This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Application that legitimately launches another EXE gets blocked

Hi,

I have an application running on Windows 7 x86 with Sophos ES&C v 9.5. When you click on a button in the GUI it tries to launch another EXE from the local hard drive but is blocked unless I first kill SavService.exe. I have exempted the program EXE, the folders containing the called EXE, turned off DEP and UAC and still have the problem. How can I permit the application to proceed?

Thanks

:18695


This thread was automatically locked due to age.
  • Hello ipgsophos ,

    first of all you should not indiscriminately change security related settings. They are not there just to make your life harder. While you gave the details of your OS and Sophos they are missing for the problem. If course if both the an application and the another EXE are rather uncommon or internal it won't help if you name them. 

    By blocked you mean that the EXE just doesn't start or do you get an alert from Sophos (if so, what does it say)?And you have to stop the service (or do you actually kill the process) before you click the button to be able to launch the program?

    Christian

    :18711
  • Hi,

    I'm curious what type of customers you think Sophos has that would spend many thousands of dollars per year on a security solution and then "indiscriminately change security related settings ." This is what is known as troubleshooting. It's unfortunate that so many people on IT community forums have such a negative attitude.

    Your assumption that the applications might be uncommon is correct; it's extremely unlikely that other customers would have them. The underlying .NET of the application throws an Access Denied error when the Sophos Anti-Virus status reporter is running on Windows 7 systems. Stopping the service allows the application to function as intended. The SAVService does not cause the issue.

    Thanks for your help

    :18873
  • No offense meant - from your condensed description I was unable to understand exactly what "blocked" signified. Normally if Sophos takes action you'll find it in the logs and if nothing is logged an exemption won't help. As this forum is not restricted to "customers" I'd rather say "don't try this at home" once too often...
    Apart from that the problem sounds rather esoteric. Likely not a general issue but any statement would be mere speculation

    Christian
    :18879