This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos SAVAdminService and SavService being removed and re-installed

I have a strange problem with a P.C. on the network it is constantly removing and reinstalling SavAdmin and SavService, I get EVEREST reports (of software changes) every 30 minutes like this :

* Service removed: SAVAdminService,Sophos Anti-Virus status reporter,SAVAdminService.exe,9.5.4.9570
* Service removed: SAVService,Sophos Anti-Virus,SavService.exe,9.5.0.9530

* New service installed: SAVAdminService,Sophos Anti-Virus status reporter,SAVAdminService.exe,9.5.4.9570
* New service installed: SAVService,Sophos Anti-Virus,SavService.exe,9.5.0.9530

then another :

* Service removed: SAVAdminService,Sophos Anti-Virus status reporter,SAVAdminService.exe,9.5.4.9570
* Service removed: SAVService,Sophos Anti-Virus,SavService.exe,9.5.0.9530

* New service installed: SAVAdminService,Sophos Anti-Virus status reporter,SAVAdminService.exe,9.5.4.9570
* New service installed: SAVService,Sophos Anti-Virus,SavService.exe,9.5.0.9530

Any ideas what is causing this, Sophos endpoint is configured to update the clients every 30 minutes but no other P.C.s are doing this.

This thread was automatically locked due to age.

Parents

0 Quoque over 13 years ago

Thanks for bearing with me, I renamed the file, it still doesn't work and the log files are a lot shorter :

2012-05-22 14:41:11 Unable to create an instance of ComponentManager - SystemInformation will not be informed of the update
2012-05-22 14:41:11 About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate
2012-05-22 14:41:11 Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate
2012-05-22 14:41:11 DataUpdateRequest signalled
2012-05-22 14:41:11 About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended
2012-05-22 14:41:11 Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended
2012-05-22 14:41:26 SAVI dll was installed successfully
2012-05-22 14:41:26 Policy files unchanged - ConfigureSAV will not be called
2012-05-22 14:41:57 Unable to create an instance of ComponentManager - SystemInformation cannot be informed of end of update

2012-05-22 14:40:40 Info: Logging started: installing/upgrading Sophos Anti-Virus
2012-05-22 14:40:40 Info: InstallFromPath is: C:\Program Files\Sophos\AutoUpdate\cache\savxp2012-05-22 14:40:40 Info: InstallToPath is: 
2012-05-22 14:40:40 Detected version of SAV has major version number: 9
2012-05-22 14:40:40 Detected version of SAV has minor version number: 5
2012-05-22 14:40:40 Info: registryInstallTo [overriding InstallToPath] is: C:\Program Files\Sophos\Sophos Anti-Virus2012-05-22 14:40:40 Info: SetupPlugin: updateProps.m_MajorUpdate = 0
2012-05-22 14:40:40 Info: SetupPlugin: updateProps.m_DataOnlyUpdate = 1
2012-05-22 14:40:40 Info: SetupPlugin: updateProps.m_OnAccessDriverUpdate = 0
2012-05-22 14:40:40 Info: SetupPlugin: updateProps.m_BootDriverUpdate = 0
2012-05-22 14:40:40 Info: SetupPlugin: updateProps.m_ClassFilterUpdate = 0
2012-05-22 14:40:40 Info: SetupPlugin: updateProps.m_RemoveWebScanning = 0
2012-05-22 14:40:40 Info: Installing sav only: 0
2012-05-22 14:40:40 Managed install
2012-05-22 14:40:40 Info: MSXML6 is installed
2012-05-22 14:40:40 Info: Logging started: performing minor update to Sophos Anti-Virus.
2012-05-22 14:40:40 Info: Beginning Shared Custom Actions. Logging will appear in Custom Action log.
2012-05-22 14:40:40 Info: Running SetUpdateBegin shared custom action.
2012-05-22 14:41:11 Info: Return Value from SetUpdateBegin: 0
2012-05-22 14:41:11 Info: Running DeleteRuleFiles(IDEs) shared custom action.
2012-05-22 14:41:11 Info: Return Value from DeleteRuleFiles(IDEs): 0
2012-05-22 14:41:11 Info: Running DeleteRuleFiles(HIPSConfig) shared custom action.
2012-05-22 14:41:11 Info: Return Value from DeleteRuleFiles(HIPSConfig): 0
2012-05-22 14:41:11 Info: Running DeleteRuleFiles(bdls) shared custom action.
2012-05-22 14:41:11 Info: Return Value from DeleteRuleFiles(bdls): 0
2012-05-22 14:41:11 Info: Running CopyHotUpdateFiles shared custom action.
2012-05-22 14:41:11 Info: Return Value from CopyHotUpdateFiles: 0
2012-05-22 14:41:11 Info: Running UpdateSAVI shared custom action.
2012-05-22 14:41:26 Info: Return Value from UpdateSAVI: 0
2012-05-22 14:41:26 Info: Running SetSavAdminUpdateComplete shared custom action.
2012-05-22 14:41:26 Info: Return Value from SetSavAdminUpdateComplete: 0
2012-05-22 14:41:26 Info: Running ConfigureSAV shared custom action.
2012-05-22 14:41:26 Info: Return Value from ConfigureSAV: 0
2012-05-22 14:41:26 Info: Running CopySAVSyncFile shared custom action.
2012-05-22 14:41:26 Info: Return Value from CopySAVSyncFile: 0
2012-05-22 14:41:26 Info: Running SetUpdateFinished shared custom action.
2012-05-22 14:41:57 Info: Return Value from SetUpdateFinished: 0
2012-05-22 14:41:57 Info: Running RunAfterScripts shared custom action.
2012-05-22 14:41:57 Info: Return Value from RunAfterScripts: 0
2012-05-22 14:41:57 Info: Shared custom actions succeeded.
2012-05-22 14:41:57 Info: Update to Sophos Anti-Virus succeeded.

I am afraid I don't know how to install the version 10 ( I assumed it would be automatic), could you tell me and I'll try that.?

Reply

0 Quoque over 13 years ago

Thanks for bearing with me, I renamed the file, it still doesn't work and the log files are a lot shorter :

2012-05-22 14:41:11 Unable to create an instance of ComponentManager - SystemInformation will not be informed of the update
2012-05-22 14:41:11 About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate
2012-05-22 14:41:11 Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate
2012-05-22 14:41:11 DataUpdateRequest signalled
2012-05-22 14:41:11 About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended
2012-05-22 14:41:11 Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended
2012-05-22 14:41:26 SAVI dll was installed successfully
2012-05-22 14:41:26 Policy files unchanged - ConfigureSAV will not be called
2012-05-22 14:41:57 Unable to create an instance of ComponentManager - SystemInformation cannot be informed of end of update

2012-05-22 14:40:40 Info: Logging started: installing/upgrading Sophos Anti-Virus
2012-05-22 14:40:40 Info: InstallFromPath is: C:\Program Files\Sophos\AutoUpdate\cache\savxp2012-05-22 14:40:40 Info: InstallToPath is: 
2012-05-22 14:40:40 Detected version of SAV has major version number: 9
2012-05-22 14:40:40 Detected version of SAV has minor version number: 5
2012-05-22 14:40:40 Info: registryInstallTo [overriding InstallToPath] is: C:\Program Files\Sophos\Sophos Anti-Virus2012-05-22 14:40:40 Info: SetupPlugin: updateProps.m_MajorUpdate = 0
2012-05-22 14:40:40 Info: SetupPlugin: updateProps.m_DataOnlyUpdate = 1
2012-05-22 14:40:40 Info: SetupPlugin: updateProps.m_OnAccessDriverUpdate = 0
2012-05-22 14:40:40 Info: SetupPlugin: updateProps.m_BootDriverUpdate = 0
2012-05-22 14:40:40 Info: SetupPlugin: updateProps.m_ClassFilterUpdate = 0
2012-05-22 14:40:40 Info: SetupPlugin: updateProps.m_RemoveWebScanning = 0
2012-05-22 14:40:40 Info: Installing sav only: 0
2012-05-22 14:40:40 Managed install
2012-05-22 14:40:40 Info: MSXML6 is installed
2012-05-22 14:40:40 Info: Logging started: performing minor update to Sophos Anti-Virus.
2012-05-22 14:40:40 Info: Beginning Shared Custom Actions. Logging will appear in Custom Action log.
2012-05-22 14:40:40 Info: Running SetUpdateBegin shared custom action.
2012-05-22 14:41:11 Info: Return Value from SetUpdateBegin: 0
2012-05-22 14:41:11 Info: Running DeleteRuleFiles(IDEs) shared custom action.
2012-05-22 14:41:11 Info: Return Value from DeleteRuleFiles(IDEs): 0
2012-05-22 14:41:11 Info: Running DeleteRuleFiles(HIPSConfig) shared custom action.
2012-05-22 14:41:11 Info: Return Value from DeleteRuleFiles(HIPSConfig): 0
2012-05-22 14:41:11 Info: Running DeleteRuleFiles(bdls) shared custom action.
2012-05-22 14:41:11 Info: Return Value from DeleteRuleFiles(bdls): 0
2012-05-22 14:41:11 Info: Running CopyHotUpdateFiles shared custom action.
2012-05-22 14:41:11 Info: Return Value from CopyHotUpdateFiles: 0
2012-05-22 14:41:11 Info: Running UpdateSAVI shared custom action.
2012-05-22 14:41:26 Info: Return Value from UpdateSAVI: 0
2012-05-22 14:41:26 Info: Running SetSavAdminUpdateComplete shared custom action.
2012-05-22 14:41:26 Info: Return Value from SetSavAdminUpdateComplete: 0
2012-05-22 14:41:26 Info: Running ConfigureSAV shared custom action.
2012-05-22 14:41:26 Info: Return Value from ConfigureSAV: 0
2012-05-22 14:41:26 Info: Running CopySAVSyncFile shared custom action.
2012-05-22 14:41:26 Info: Return Value from CopySAVSyncFile: 0
2012-05-22 14:41:26 Info: Running SetUpdateFinished shared custom action.
2012-05-22 14:41:57 Info: Return Value from SetUpdateFinished: 0
2012-05-22 14:41:57 Info: Running RunAfterScripts shared custom action.
2012-05-22 14:41:57 Info: Return Value from RunAfterScripts: 0
2012-05-22 14:41:57 Info: Shared custom actions succeeded.
2012-05-22 14:41:57 Info: Update to Sophos Anti-Virus succeeded.

I am afraid I don't know how to install the version 10 ( I assumed it would be automatic), could you tell me and I'll try that.?

Children

No Data