Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 9 subscribers
  • Views 13013 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Windows 7 Action Center saying no Anti Virus is installed

Andrew Kerrison

We have rolled out Sophos Endpoint, managed by Sophos Central, to include the Intercept X part onto our Windows 7 computers on the network (both x32 and x64).  This appears to all be ok, however the Microsoft Action Center is reporting all all computers that there is no Anti Virus installed and we need to install one.

Is this a normal message when using the cloud based Endpoint package - or have we got something wrong?

In addition I am a little unclear as to whether the Sophos Endpoint / Intercept X software is the complete package.  Is this a combined Anti virus / malware protection software?

Thanks


Andrew



This thread was automatically locked due to age.
Parents
  • 0

    Is the "Sophos Anti-Virus Status Reporter" service started?

    Out of interest, do you get a error message if you use the vbscript mentioned in this post:
    https://community.sophos.com/products/sophos-home/f/sophos-home-for-windows/77835/cannot-install-sophos-home---tells-me-mcafee-installed-when-it-isn-t/298635#298635

    WScript.Echo "Checking for installed Anti-Virus products"
    Set oWMI = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\SecurityCenter2")
    Set colItems = oWMI.ExecQuery("Select * from AntiVirusProduct")
    For Each objItem in colItems
      WScript.Echo "Anti-Virus product found:"
      WScript.Echo objItem.displayName
      WScript.Echo objItem.instanceGuid
    Next
    WScript.Echo "Completed."

    I wonder if WMI is broken?

    Also, if you disable Tamper Protection on the computer and stop the "Sophos Anti-Virus Status Reporter" service.

    Create a DWORD registry key under:

    64-bit computer: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Sophos\SAVService\Application

    32-bit computer: HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\SAVService\Application

    ...called "Debug" and set it to "1". Then start the "Sophos Anti-Virus Status Reporter" service, under \windows\temp\ you should have the log file: WSCClient_Log.txt.  Does that have anything of interest in it?

    Regards,

    Jak

  • 0 in reply to jak

    Firstly, the software was downloaded from the Sophos Central Cloud, and our system was migrated using the Sophos Migration Tool.

     

    However, on the machines i have just checked there is no such service as Sophos Anti-virusStatus Reporter.

    Are EndPoint Protection and InterceptX two seperate products>

    Andrew

  • 0 in reply to Andrew Kerrison

    Well if I look at my Download page I have:

    So there is:

    • Download only Endpoint Advanced
    • Download only Intercept X

    If I download and install just "Intercept X" I don't get the traditional Sophos Anti-Virus (which includes the status reporter service, Sophos Anti-Virus service, etc)

    If I install "Endpoint Advanced" I would get SAV but not InerceptX. 

    If I choose complete, I would get the traditional AV and the InterceptX.

    Does this help?  I must confess, I'm not sure if InterceptX registers with Action/Security Center: I suspect not as it's not really an Anti-Virus product but more of an anti-exploit and I'm not sure there is a category for that.

    If you install Just Intercept X it will install alongside other traditional AV and security products.  If you install Endpoint Advanced (with out without Intercept X) it will remove existing security products to avoid conflict.  It's for this reason you can install Intercept X on a machine with say Symantec, Mcafee, etc..

    Regards,

    Jak

Reply
  • 0 in reply to Andrew Kerrison

    Well if I look at my Download page I have:

    So there is:

    • Download only Endpoint Advanced
    • Download only Intercept X

    If I download and install just "Intercept X" I don't get the traditional Sophos Anti-Virus (which includes the status reporter service, Sophos Anti-Virus service, etc)

    If I install "Endpoint Advanced" I would get SAV but not InerceptX. 

    If I choose complete, I would get the traditional AV and the InterceptX.

    Does this help?  I must confess, I'm not sure if InterceptX registers with Action/Security Center: I suspect not as it's not really an Anti-Virus product but more of an anti-exploit and I'm not sure there is a category for that.

    If you install Just Intercept X it will install alongside other traditional AV and security products.  If you install Endpoint Advanced (with out without Intercept X) it will remove existing security products to avoid conflict.  It's for this reason you can install Intercept X on a machine with say Symantec, Mcafee, etc..

    Regards,

    Jak

Children
No Data
Unfiltered HTML