Sophos Endpoint AV reports 'threat' in 3CX Assistant

[Fatboy40]

When installing the 3CX Assistant (v 9.0.13537) our AV software, Sophos Endpoint v 9, reports a 'threat' in that a component of the Assistant's installation is 'PsKIll'.

Now I'm aware of PsKill, and that it's a legitimate utility for killing off processes, but if I temporarily disable the AV software to install the Assistant will PsKIll then be picked up by the AV software once it's enabled again and the assistant is used ? (or via scheduled full scand of the computers local drives ?).

Thanks.

 

[StefanW]

just make simply an exeption in ur AV not to scan the 3CX assistant folder and you should be fine from there on.

 

[Fatboy40]

I always feel uncomfortable making AV exceptions, but I will if that is what has to be done.

Out of interest what does 3CX use PsKill for in regards to the function of the Assistant ?.

Thanks.

 

[StefanW]

have a look in
C:\Program Files\3CX Assistant

we dont install any PSkill.exe at all.
So i am a bit confused right now...

 

[Fatboy40]

we dont install any PSkill.exe at all.
So i am a bit confused right now...

Sophos picks it up during the process of the file 3CXAssistantSetup9.exe unpacking itself for installation.