Sophos Central Endpoint and SEC: Computers fail/hang on boot after the Microsoft Windows April 9, 2019 update. Please follow knowledge base article 133945

Learn about the Benefits of Multi-Factor Authentication (MFA). Turn your MFA on now!

Scan Results - au.exe Trojan.FakeAV

We are using Sophos Clean to check a sampling of end-points in our environment and a number of them are detecting au.exe and completing the removal process with a restart does not remove.  Other AV products have not detected and general searches for au.exe have not provided meaningful information.  Is this a false positive?  Thanks for the help.




  • Hi Julie S,

    Will it be possible for you to locate the file and have it submitted to Sophos labs for further investigation or Can you help me with the Hash value of the file so that I can cross check if we already any details on this file.