Sophos Endpoint

Discussions Ransomware. - False positive?

Sophos Endpoint requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 1 reply
Subscribers 9 subscribers
Views 1846 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Ransomware. - False positive?

Sophos User1909 over 4 years ago

Cryptoguard detected ransomware in file path related to Java.

File Path : ∕Library∕Java∕JavaVirtualMachines∕jdk-14.0.1.jdk∕Contents∕Home∕bin∕java

OS : MacOS

Sophos has blocked the ransomware's access to the file system

I ran scan on the user's system but nothing was found to clean up.

Is it a false positive? I could not find any other details related to the alert to come to the conclusion.

This thread was automatically locked due to age.

0 Yashraj S over 4 years ago

Hi Sophos User1909

Can you please let us know what did Sophos detect it as? If you think it is false positive, I'd recommend you to submit a sample of that file to Sophos labs for confirmation. Are you able to see more details about it on the machine/Sophos Central?

Thanks,

Yashraj Singha
Manager | Global Community Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question, please use the "Verify Answer" button.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel