Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 44 replies
  • Subscribers 1 subscriber
  • Views 145767 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SHH/Updater-B Fiasco Recovery Steps

chavez243

Just thought a thread for just the recovery steps would be helpful as I'm sure this is a big mess for many of my IT brethren who will be burning the midnight oil on the cleanup.

Perhaps a Sophos engineer could chime in on:

- what to do about "Software Delivery failed" in Update Manager

- what to do about ALsvc.exe and ALUpdate.exe being detected / quarantined

- other steps?

:30335


This thread was automatically locked due to age.
Parents
  • 0

    Hello Fabi2000,

    you can extract what has been deleted from the logs.

    What can be done then depends on the product (unless you have a recent backup).

    The missing files might still be available on another (unaffected) endpoint. The product installation might offer Repair to restore missing files from the source. If neither is available you'd have to obtain the install (medium). Might be necessary to run the product through an update then - therefore I'd install on a "recovery" machine and copy the files from there (note that only files have been moved/deleted as there was no cleanup routine - which might also perform actions in other parts, e.g. the registry - involved).

    Sorry I can't suggest an easier solution

    Christian

    :32103
Reply
  • 0

    Hello Fabi2000,

    you can extract what has been deleted from the logs.

    What can be done then depends on the product (unless you have a recent backup).

    The missing files might still be available on another (unaffected) endpoint. The product installation might offer Repair to restore missing files from the source. If neither is available you'd have to obtain the install (medium). Might be necessary to run the product through an update then - therefore I'd install on a "recovery" machine and copy the files from there (note that only files have been moved/deleted as there was no cleanup routine - which might also perform actions in other parts, e.g. the registry - involved).

    Sorry I can't suggest an easier solution

    Christian

    :32103
Children
No Data