This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

W32/AutoRun-BSY identified on wrong workstation on Entrerprise Console

For a while now we have the threat W32/AutoRun-BSY showing up on our console, but it has always been identified as the wrong workstation by the console. The last time to  found the effected workstation we had to logon to all our workstations and interogate sophos. 

Is there an easier way to find out what workstation that is affected?

Thanks

:49308


This thread was automatically locked due to age.
Parents
  • Hello oxo,

    it has always been identified as the wrong workstation

    if you View Computer Details of the "wrong" workstation - are there any User or Username fields which mention perhaps another workstation? Have your workstations been cloned from an image which already had Sophos installed? And - do you see all your machines with Sophos in the console or did you ever have the impression that a workstation changes its name? It sounds like several endpoints appearing to SEC as the same.   

    Christian 

    :49310
Reply
  • Hello oxo,

    it has always been identified as the wrong workstation

    if you View Computer Details of the "wrong" workstation - are there any User or Username fields which mention perhaps another workstation? Have your workstations been cloned from an image which already had Sophos installed? And - do you see all your machines with Sophos in the console or did you ever have the impression that a workstation changes its name? It sounds like several endpoints appearing to SEC as the same.   

    Christian 

    :49310
Children
No Data