We have Sophos Endpoint Protection installed on all of our workstations. 4 times we've received alerts that our firewall has detected C2/generic-C at /usr/sbin/mDNSresponder. We've wiped the laptop and reisntalled each time, but we're losing faith in…