Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • +2 person also asked this people also asked this
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 28 subscribers
  • Views 642 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos suddenly detecting Trusteer Rapport?

zeban sho

Noticed ransomware alert from a PC with C:\Windows\System32\msiexec.exe but drilling down I can see it's Trusteer Rapport. I have about a dozen machines with this software though and none of the others are alerting. I'm 99% sure it's a false positive, but wanted to hear if anyone else got it. https://omegle.onl/ 



This thread was automatically locked due to age.
Parents
  • 0

    Yes, I've had 4 different clients using the service and it's detecting it.  Looks like the service is trying to do an update that Sophos believes matches what Ransomware would do.  Been a little hesitant to throw it as a global exception but I'm thinking if others are getting it, it's probably safe.  Bad thing is that it has to be on there for those who scan checks / do deposits on their machines.  So stuck with dual scanners.

Reply
  • 0

    Yes, I've had 4 different clients using the service and it's detecting it.  Looks like the service is trying to do an update that Sophos believes matches what Ransomware would do.  Been a little hesitant to throw it as a global exception but I'm thinking if others are getting it, it's probably safe.  Bad thing is that it has to be on there for those who scan checks / do deposits on their machines.  So stuck with dual scanners.

Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?

Unfiltered HTML