Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 10 replies
  • Subscribers 1 subscriber
  • Views 7597 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos SAVAdminService and SavService being removed and re-installed

Quoque

I have a strange problem with a P.C. on the network it is constantly removing and reinstalling SavAdmin and SavService, I get EVEREST reports (of software changes) every 30 minutes like this :

* Service removed: SAVAdminService,Sophos Anti-Virus status reporter,SAVAdminService.exe,9.5.4.9570
* Service removed: SAVService,Sophos Anti-Virus,SavService.exe,9.5.0.9530

* New service installed: SAVAdminService,Sophos Anti-Virus status reporter,SAVAdminService.exe,9.5.4.9570
* New service installed: SAVService,Sophos Anti-Virus,SavService.exe,9.5.0.9530

then another :

* Service removed: SAVAdminService,Sophos Anti-Virus status reporter,SAVAdminService.exe,9.5.4.9570
* Service removed: SAVService,Sophos Anti-Virus,SavService.exe,9.5.0.9530

* New service installed: SAVAdminService,Sophos Anti-Virus status reporter,SAVAdminService.exe,9.5.4.9570
* New service installed: SAVService,Sophos Anti-Virus,SavService.exe,9.5.0.9530

Any ideas what is causing this, Sophos endpoint is configured to update the clients every 30 minutes but no other P.C.s are doing this.

:24697


This thread was automatically locked due to age.
Parents
  • 0

    One of them is about 2Mib can you suggest a way of making it available, the other is :

    Sophos Anti-Virus CustomActions Log_120514_081238.txt

    2012-05-14 09:12:38 Starting competitor detection...
    2012-05-14 09:13:05 Setting class filter present property to: 1
    2012-05-14 09:13:05 PROCESSOR_ARCHITECTURE environment variable is: x86
    2012-05-14 09:13:42 Unable to create an instance of ComponentManager - SystemInformation will not be informed of the update
    2012-05-14 09:13:49 WaitForSAVService: Walking system processes...
    2012-05-14 09:13:49 WaitForSAVService: Finished walking system processes.
    2012-05-14 09:13:49 IsServiceInstalled: Unable to get a handle to requested service SAVOnAccess control. Returning false.
    2012-05-14 09:13:49 IsServiceInstalled: Unable to get a handle to requested service SAVOnAccess filter. Returning false.
    2012-05-14 09:13:59 CopyOtherFiles custom action - Copying other driver files
    2012-05-14 09:13:59 Copying class filter source: C:\Program Files\Sophos\AutoUpdate\cache\savxp\classfilterdrivers\i386\SDCFILTER.INF, target: C:\Program Files\Sophos\Sophos Anti-Virus\
    2012-05-14 09:14:00 GetRidOfExistingDetoured - C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll detoured exists, proceeding to rename it & mark for delete.
    2012-05-14 09:14:00 PROCESSOR_ARCHITECTURE environment variable is: x86
    2012-05-14 09:14:00 BopsUnregister: could not get short path to DLL. It will not be unregistered.
    2012-05-14 09:14:00 GetRidOfExistingDetoured - C:\Program Files\Sophos\Sophos Anti-Virus\detoured.dll does not exist, no further action.
    2012-05-14 09:14:00 BOPS path already exists
    2012-05-14 09:14:00 PROCESSOR_ARCHITECTURE environment variable is: x86
    2012-05-14 09:14:00 IsServiceRunning: Unable to get a handle to requested service SAVOnAccess control. Returning false.
    2012-05-14 09:15:35 Unable to create an instance of ComponentManager - SystemInformation cannot be informed of end of update

    :24703
Reply
  • 0

    One of them is about 2Mib can you suggest a way of making it available, the other is :

    Sophos Anti-Virus CustomActions Log_120514_081238.txt

    2012-05-14 09:12:38 Starting competitor detection...
    2012-05-14 09:13:05 Setting class filter present property to: 1
    2012-05-14 09:13:05 PROCESSOR_ARCHITECTURE environment variable is: x86
    2012-05-14 09:13:42 Unable to create an instance of ComponentManager - SystemInformation will not be informed of the update
    2012-05-14 09:13:49 WaitForSAVService: Walking system processes...
    2012-05-14 09:13:49 WaitForSAVService: Finished walking system processes.
    2012-05-14 09:13:49 IsServiceInstalled: Unable to get a handle to requested service SAVOnAccess control. Returning false.
    2012-05-14 09:13:49 IsServiceInstalled: Unable to get a handle to requested service SAVOnAccess filter. Returning false.
    2012-05-14 09:13:59 CopyOtherFiles custom action - Copying other driver files
    2012-05-14 09:13:59 Copying class filter source: C:\Program Files\Sophos\AutoUpdate\cache\savxp\classfilterdrivers\i386\SDCFILTER.INF, target: C:\Program Files\Sophos\Sophos Anti-Virus\
    2012-05-14 09:14:00 GetRidOfExistingDetoured - C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll detoured exists, proceeding to rename it & mark for delete.
    2012-05-14 09:14:00 PROCESSOR_ARCHITECTURE environment variable is: x86
    2012-05-14 09:14:00 BopsUnregister: could not get short path to DLL. It will not be unregistered.
    2012-05-14 09:14:00 GetRidOfExistingDetoured - C:\Program Files\Sophos\Sophos Anti-Virus\detoured.dll does not exist, no further action.
    2012-05-14 09:14:00 BOPS path already exists
    2012-05-14 09:14:00 PROCESSOR_ARCHITECTURE environment variable is: x86
    2012-05-14 09:14:00 IsServiceRunning: Unable to get a handle to requested service SAVOnAccess control. Returning false.
    2012-05-14 09:15:35 Unable to create an instance of ComponentManager - SystemInformation cannot be informed of end of update

    :24703
Children
No Data