This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Threat Detected - Malware and PUAs - Not deleting

Sophos has been installed on one of our storage servers, its come up with a lot of errors and warnings in volume shadow copy locations. I have since excluded these locations but it will still not clear.

If I click resolve nothing happens. If I go into Sophos Central, all I can do is acknowledge, which I have done for all of them, but the error still displays. What can I do to fix this?

Thnaks.

This thread was automatically locked due to age.

Parents

0 DianneY over 5 years ago

Hi David Ashcroft

Are you still receiving new detections for this event? Are the VSS paths configured correctly?

If you haven't please check out the information below on what you can do for this issue:

Related post

How to purge the Volume Shadow Copies after a malware infection
Cancel
Vote Up 0 Vote Down

Cancel
0 David Ashcroft over 5 years ago in reply to DianneY

Followed both of those, volume shadow copies are already disabled and I specified the full path and the specific exe, but the old entries are still not being deleted.
Cancel
Vote Up 0 Vote Down

Cancel
0 Jasmin over 5 years ago in reply to David Ashcroft

Hi David Ashcroft

I understand that you have disabled the Volume shadow copy in your environment but there are so many back up Softwares which generally creates a temporary volume shadow copy as per their process and then removes it from the machine. I'd suggest you click on resolve and see what happens after that.

I'd also refer you to go through this post which is helpful in this scenario.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Jasmin over 5 years ago in reply to David Ashcroft

Hi David Ashcroft

I understand that you have disabled the Volume shadow copy in your environment but there are so many back up Softwares which generally creates a temporary volume shadow copy as per their process and then removes it from the machine. I'd suggest you click on resolve and see what happens after that.

I'd also refer you to go through this post which is helpful in this scenario.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data