ransomware.win.honey Alert

[64Bit]

When removing user profiles there is ofcourse editing of CheckPoint honeypot files which in turn raise the alert for ransomware.win.honey.

Whats the best practice for removing user profiles that will stop notification of ransomware?

[Roman_Zitzev]

Hi,

What EP client version your are using?

Thx,

Roman

[64Bit]

Thanks for your reply Roman.

We have some on version 82.00.9089 but most endpoints have recently completed upgrade to version 85.50.1602.

[64Bit · Accepted solution]

Just an update encase anyone else has this issue. Endpoint E80.30 seems to have fixed this bug.