I have a user who infected by cryptowall last week. All doucments were encrypted and renamed with random character file name and extension sub filename. But VirusScan didnot detect anything. DAT is most updated version. What I have missed to config in ePO?
Last time, another users were infected, but virusscan found the exe immediately after it run.