Hi,
A little while ago I noticed the Remove Sophos Endpoint.app had appeared on my Mac. After checking other machines I can see it's installed on everything.
Not cool.
I ran a script to remove it from all the Macs and manually deleted it from mine.
However, it reappears in /Applications the next day.
I've been running a daily script to remove it from all Macs but now it's getting to me.
I can match up a Sophos update in the logs to the same time the app was created last night so it appears to be pulling it down when Sophos updates. Although I 'think' it's only doing this once a day.
Most logs show Sophos Anti-Virus is up to date but the one that i think is downloading shows as Sophos Anti-Virus was updated.
Update is pointing at Sophos as the primary locations (no secondary) and if i force an update the app doesn't install.
Has anyone else seen this behaviour?
(I don't want to have to open a ticket with them as previous experience knows it'll go nowhere)
Thanks
Al