Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=detection-stop-ransomware

Stop detecting ransomware

If ransomware is detected but you’re sure the detection is incorrect, you can stop it happening again.

This applies to all your users and computers.

  1. Go to Devices > Computers or Servers, depending on where the application was detected.
  2. Find the computer where the detection happened and click on it to view its details.
  3. On the Events tab, find the detection event and click Details.

  4. In Event details, look for Don't detect this again.

    Select Exclude this Detection ID from checking. from checking. This prevents this detection for this application.

  5. Click Exclude.

We’ll add your exclusion to the Global Exclusions list.