Sophos has a persistent heuristic-based false positive against applications implemented using the go programming language and networking. Their product will remove the affected binary, and, unregister and remove the service.

You can submit the binary to Sophos and ask them to re-evaluate. Typically they do this automatically around 24 – hours after they send the false positive out to all the clients.

To resolve, first in your Sophos console as Sophos not to scan (or ignore the specific false positive of CXrep/MalGo-A) for the binary ‘agilicus-agent.exe’, usually in C:\Program Files\Agilicus\Agent, but, in desktop launcher cases, end-user specific.

Secondly, you must re-install the connector. no config or state is lost. Navigate to “Resources/Connectors” in your admin interface, at the far right is a > sign, pull that down, remove the stale instance. Now use the 3-dots action button to install. The connector will pick back up where it was.