This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Getting email alert but no machines showing as having virus / malware in Enterprise console

Hi  we have just installed Sophos Enterprise console 5.2.0.644 (have been using enterprise console 4.5).

Since this has been installed (2 days) we have been getting SAV email alerts for a few machines with the message below, but these machines are showing with a green icon and same as policy in the enterprse console and there are no mahine with alerts at all.

Shouldnt the machine be showing  with an alert in the console?

User: NT AUTHORITY\SYSTEM

Scan: On-access

Machine: xxxxx

File "C:\Windows\Temp\TMP00000166B7184A7E24C3AE5D" belongs to virus/spyware 'Mal/VBDrop-G'.

:45161


This thread was automatically locked due to age.
Parents
  • Hello nwblue,

    I daresay this is not correct. Looks like the scanner changed its mind halfway through and neither alerted SEC nor indicated an action. I suggest you contact Support directly - run SDU and submit the output with your query (you can also refer them to this thread). Is the file still there? If so, you should also send a sample to Sophos.

    I notice occasional 0xa0040202 errors. These too should be investigated (although they don't seem to be reproducible).

    Christian

    :45213
Reply
  • Hello nwblue,

    I daresay this is not correct. Looks like the scanner changed its mind halfway through and neither alerted SEC nor indicated an action. I suggest you contact Support directly - run SDU and submit the output with your query (you can also refer them to this thread). Is the file still there? If so, you should also send a sample to Sophos.

    I notice occasional 0xa0040202 errors. These too should be investigated (although they don't seem to be reproducible).

    Christian

    :45213
Children
No Data