This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos SAVAdminService and SavService being removed and re-installed

I have a strange problem with a P.C. on the network it is constantly removing and reinstalling SavAdmin and SavService, I get EVEREST reports (of software changes) every 30 minutes like this :

* Service removed: SAVAdminService,Sophos Anti-Virus status reporter,SAVAdminService.exe,9.5.4.9570
* Service removed: SAVService,Sophos Anti-Virus,SavService.exe,9.5.0.9530

* New service installed: SAVAdminService,Sophos Anti-Virus status reporter,SAVAdminService.exe,9.5.4.9570
* New service installed: SAVService,Sophos Anti-Virus,SavService.exe,9.5.0.9530

then another :

* Service removed: SAVAdminService,Sophos Anti-Virus status reporter,SAVAdminService.exe,9.5.4.9570
* Service removed: SAVService,Sophos Anti-Virus,SavService.exe,9.5.0.9530

* New service installed: SAVAdminService,Sophos Anti-Virus status reporter,SAVAdminService.exe,9.5.4.9570
* New service installed: SAVService,Sophos Anti-Virus,SavService.exe,9.5.0.9530

Any ideas what is causing this, Sophos endpoint is configured to update the clients every 30 minutes but no other P.C.s are doing this.

:24697


This thread was automatically locked due to age.
Parents
  • I'm not sure that it is trying to update, I've stopped it updating every 30 minutes in Endpoint but when I manually trigger an update it does not always create the log files. When I run Sophos manually (even as administrator) it runs but apart from the "Configure updating" and "View updating log" the other icons are greyed-out. Endpoint says on-access scanning is disabled. I have endpoint installed on a machine that acts as a server for all the installations, I suppose the clients get the new versions from files stored on the server, In theory I am the one in charge of it but I don't know much about it, as you can tell.
    :25031
Reply
  • I'm not sure that it is trying to update, I've stopped it updating every 30 minutes in Endpoint but when I manually trigger an update it does not always create the log files. When I run Sophos manually (even as administrator) it runs but apart from the "Configure updating" and "View updating log" the other icons are greyed-out. Endpoint says on-access scanning is disabled. I have endpoint installed on a machine that acts as a server for all the installations, I suppose the clients get the new versions from files stored on the server, In theory I am the one in charge of it but I don't know much about it, as you can tell.
    :25031
Children
No Data