This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Getting some "Restore Failed:" that I have never seen before

Good morning,

Noticed several "Restore failed" messages this morning on my machine. The files that the alerts are referencing were deleted a while back but this morning I received an alert for each on of them as seen in the image attached.

Does anyone know what and/or why Sophos was "restoring" them?

This thread was automatically locked due to age.

0 Barb@Sophos over 6 years ago

Hi Kyle,

Did you receive any alerts or emails regarding this extension?

Please have a look at Sophos Central: Failed to restore a cleaned-up application for troubleshooting steps.

Barb@Sophos
Community Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Kyle Parrish over 6 years ago in reply to Barb@Sophos

Hello,

I did receive several alerts in Central regarding this but unsure why.

The files had been manually deleted from the machine weeks again and all of a sudden it looks like Clean attempted to restore them?

The Clean logs show that it was trying to restore the file due to a "False Positive".
Cancel
Vote Up 0 Vote Down

Cancel
0 Barb@Sophos over 6 years ago in reply to Kyle Parrish

Hi Kyle,

What may have happened is that you had a False Positive on your system, and we released a new definition file that fixes that FP. Thus, Sophos tried to automatically restore the files.

You should be able to follow the KB steps in order to recover them. Otherwise, if you are not interested in recovering the files, you can acknowledge the alert to ignore them.

Barb@Sophos
Community Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel