Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Message says "Sophos Anti-Virus is not running"

I've suddenly started getting a "Sophos Anti-Virus is not running" message after restarting my Mac. Running OS X 10.7.4. When I check Activity Monitor, SophosUIServer and SophosAutoUpdate appear to be running normally. The application itself does not run in the background and never has. Why am I getting this message?

Thanks!

:1007481


This thread was automatically locked due to age.
Parents
  • Hi,

    The shield will be grey if the on-access scanner isn't running. The on-access scanner process is named "Intercheck" and sounds like its not running either. There are a few things you can check:

    1. Verify that the LaunchDaemons directory and contents are correct. There have been sporadic reports of problems when the permissions of that directory are incorrect. You want to make sure the directory "/Library/LaunchDaemons" and all files inside are owned by "root" and group "wheel". You also want to make sure the permissions are not set to be world-writable ("everyone" should be read-only). Note that this directory is normally not visible in the Finder. Press Command+Shift+G then type in the path "/Library" to go to that location directly.

    2. Verify that the files "com.sophos.*" in the directory "/var/run" exist and are set with the correct ownership and permissions.

    srwxrwxrwx 1 root daemon 0 20 Mar 12:23 com.sophos.sau.ipc
    srw------- 1 root daemon 0 20 Mar 12:23 com.sophos.sau.ipcs
    -rw------- 1 root daemon 6 20 Mar 12:23 com.sophos.sau.pid
    srwxrwxrwx 1 root daemon 0 20 Mar 12:23 com.sophos.sav.ic.ipc
    srw------- 1 root daemon 0 20 Mar 12:23 com.sophos.sav.ic.ipcs
    -rw------- 1 root daemon 6 20 Mar 12:23 com.sophos.sav.ic.pid
    srwxrwxrwx 1 root daemon 0 20 Mar 12:23 com.sophos.sav.ipc
    srw------- 1 root daemon 0 20 Mar 12:23 com.sophos.sav.ipcs
    -rw------- 1 root daemon 6 20 Mar 12:23 com.sophos.sav.pid
    srwxrwxrwx 1 root daemon 0 20 Mar 12:23 com.sophos.sav.quarantine
    srwxrwxrwx 1 root daemon 0 20 Mar 12:23 com.sophos.sav.scan

    3. Check for any errors in the Intercheck logs. In the Console application, look for the log named "Sophos Anti-Virus.log" for any odd messages. There have been sporadic reports of errors initializing the detection engine.

    Keep me posted on your status.

    :1011784
Reply
  • Hi,

    The shield will be grey if the on-access scanner isn't running. The on-access scanner process is named "Intercheck" and sounds like its not running either. There are a few things you can check:

    1. Verify that the LaunchDaemons directory and contents are correct. There have been sporadic reports of problems when the permissions of that directory are incorrect. You want to make sure the directory "/Library/LaunchDaemons" and all files inside are owned by "root" and group "wheel". You also want to make sure the permissions are not set to be world-writable ("everyone" should be read-only). Note that this directory is normally not visible in the Finder. Press Command+Shift+G then type in the path "/Library" to go to that location directly.

    2. Verify that the files "com.sophos.*" in the directory "/var/run" exist and are set with the correct ownership and permissions.

    srwxrwxrwx 1 root daemon 0 20 Mar 12:23 com.sophos.sau.ipc
    srw------- 1 root daemon 0 20 Mar 12:23 com.sophos.sau.ipcs
    -rw------- 1 root daemon 6 20 Mar 12:23 com.sophos.sau.pid
    srwxrwxrwx 1 root daemon 0 20 Mar 12:23 com.sophos.sav.ic.ipc
    srw------- 1 root daemon 0 20 Mar 12:23 com.sophos.sav.ic.ipcs
    -rw------- 1 root daemon 6 20 Mar 12:23 com.sophos.sav.ic.pid
    srwxrwxrwx 1 root daemon 0 20 Mar 12:23 com.sophos.sav.ipc
    srw------- 1 root daemon 0 20 Mar 12:23 com.sophos.sav.ipcs
    -rw------- 1 root daemon 6 20 Mar 12:23 com.sophos.sav.pid
    srwxrwxrwx 1 root daemon 0 20 Mar 12:23 com.sophos.sav.quarantine
    srwxrwxrwx 1 root daemon 0 20 Mar 12:23 com.sophos.sav.scan

    3. Check for any errors in the Intercheck logs. In the Console application, look for the log named "Sophos Anti-Virus.log" for any odd messages. There have been sporadic reports of errors initializing the detection engine.

    Keep me posted on your status.

    :1011784
Children
No Data