Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=detection-stop-ransomware

Stop detecting ransomware

If ransomware is detected but you’re sure the detection is incorrect, you can stop it from happening again.

This applies to all your users and computers.

To stop detecting ransomware, do as follows:

  1. Go to My Environment > Computers & Servers.
  2. Find the computer where the detection happened and click it to view its details.
  3. On the Events tab, find the detection event and click Details.
  4. In Event details, look for Don't detect this again.
  5. Select Exclude this Detection ID from checking. This prevents detection for this application.
  6. Click Exclude.

Your exclusion is added to the Global Exclusions list.