Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 12 replies
  • Subscribers 4 subscribers
  • Views 7288 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SEC - PUA exceptions not working?

Louis-M

We constantly have warnings about remcomsvc.exe.

We know the software so it's a bit of a false positive for us. So to save alerts, we placed exceptions under antivirus (C:\Windows\System32\RemComSvc.exe) and also authorized the PUA RemCom under Authorization.

We still keep getting email alerts from loads of our clients. It looks like the exceptions we put in don't work. Any ideas?

 

regards,

Louis



This thread was automatically locked due to age.
Parents
  • 0

    Hi  

    I am also interested to know whether exclusions are not working on a few of the devices or it's not working on any of the devices. Please make sure that all the devices have been updated with the latest policy push from enterprise console.

  • 0 in reply to Jasmin

      

    Email Alerts below (on access & Weekly scan):

    User: OURDOMAIN\ouruser
    Scan: On-access
    Machine: PC696

    File "C:\Windows\System32\RemComSvc.exe" belongs to adware or PUA 'RemCom' (of type Other).


    User: NT AUTHORITY\SYSTEM
    Scan: Weekly Scan (WEDS 0100hrs)
    Machine: PC646

    File "C:\Windows\SysWOW64\RemComSvc.exe" belongs to adware or PUA 'RemCom' (of type Other).

    Adware or PUA 'RemCom' has been detected.

  • 0 in reply to Louis-M

    Hi  

    Please suggest on my previous question whether you are receiving alerts for a few systems or all the systems. 

Reply Children
No Data