Removing Rogue (fake) AVs using Endpoint Security and Control, and SAV32CLI

You can remove most fake AV programs with Sophos Endpoint Security and Control. Alternatively, you can use the SAV32CLI program.