This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

W32/AutoRun-BSY identified on wrong workstation on Entrerprise Console

For a while now we have the threat W32/AutoRun-BSY showing up on our console, but it has always been identified as the wrong workstation by the console. The last time to  found the effected workstation we had to logon to all our workstations and interogate sophos. 

Is there an easier way to find out what workstation that is affected?

Thanks

:49308


This thread was automatically locked due to age.
Parents
  • Hi Christian

    The W32/AutoRun-BSY appears under "Outstanding alerts and errors" requesting a restart.  "Latest application control events" and "Latest web events" are the events of the identified workstation. 

    The workstation are cloned with OS,  but sophos is installed individually. The workstations are identifed individually on enterprise console as individual workstations.  

    This threat appeared on one workstation this morning, which I checked locally. it has now appeared on another worksation?  It usually selects a workstation that is on?

    hope this helps   

    :49314
Reply
  • Hi Christian

    The W32/AutoRun-BSY appears under "Outstanding alerts and errors" requesting a restart.  "Latest application control events" and "Latest web events" are the events of the identified workstation. 

    The workstation are cloned with OS,  but sophos is installed individually. The workstations are identifed individually on enterprise console as individual workstations.  

    This threat appeared on one workstation this morning, which I checked locally. it has now appeared on another worksation?  It usually selects a workstation that is on?

    hope this helps   

    :49314
Children
No Data