This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Problem with auto-upgrade to 10.3

Hi,

A number of our Windows 8 machines that were running 10.2 updated themselves yesterday to 10.3.1. However, 5 now have errors saying 'Failed to install SAVXP: The MSI has failed'. I cannot re-protect them as it says 'The applied software subscription does not contain software this computer can use'. 

The group of computers were assigned to the 10.2 recommended subscription but this has changed its self to 'Recommended'. 

What do I get these machines running a stable version of Sophos? Can I roll back to 10.2 easily?

Thanks,

Mike

:44447


This thread was automatically locked due to age.
  • Hello Mike,

    Failed to install SAVXP: The MSI has failed

    the logs (Sophos Anti-Virus ...) in %Windir%\TEMP should have specific information about the error.

    The applied software subscription does not contain software this computer can use

    Are these perhaps Windows 8 and do you have an "older" SEC version? I get this error when trying to Protect a Windows 8 machine from SEC5.0.

    Christian

    :44449
  • A snippet of the 'CustomActions Log' log shows:

    2013-10-24 11:34:36 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf00 with error: Access is denied.
    .
    2013-10-24 11:34:36 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf13 with error: Access is denied.
    .
    2013-10-24 11:34:36 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf14 with error: Access is denied.
    .
    2013-10-24 11:34:36 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf15 with error: Access is denied.
    .
    2013-10-24 11:34:36 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf25 with error: Access is denied.
    .
    2013-10-24 11:34:36 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf31 with error: Access is denied.
    .
    2013-10-24 11:34:36 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf34 with error: Access is denied.
    .
    2013-10-24 11:34:36 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf82 with error: Access is denied.
    .
    2013-10-24 11:34:36 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf94 with error: Access is denied.
    .
    2013-10-24 11:34:36 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf96 with error: Access is denied.
    .
    2013-10-24 11:34:36 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf99 with error: Access is denied.
    .
    2013-10-24 11:34:36 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll.stf00 with error: Access is denied.
    .
    2013-10-24 11:34:36 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll detoured exists, proceeding to rename it & mark for delete.
    2013-10-24 11:34:36 DeleteOtherFiles: GetRidOfExistingDetoured(C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll): Failed to rename C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll: maximum allowed temporary extension reached
    2013-10-24 11:34:36 DeleteOtherFiles: PROCESSOR_ARCHITECTURE environment variable is: AMD64
    2013-10-24 11:34:36 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll detoured exists, proceeding to rename it & mark for delete.
    2013-10-24 11:34:36 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\detoured.dll does not exist, no further action.
    2013-10-24 11:34:36 DeleteOtherFiles: Deleting config file folder
    2013-10-24 11:34:36 DeleteOtherFiles: Failed to delete config folder, 2
    2013-10-24 11:34:36 DeleteOtherFiles: Action succeeded
    2013-10-24 11:34:36 ForceDeleteFiles: Action started
    2013-10-24 11:34:36 ForceDeleteFiles: Error deleting DesktopMessaging registry key. Returned error was: The system cannot find the file specified.

    2013-10-24 11:34:36 ForceDeleteFiles: Action succeeded
    2013-10-24 11:34:36 RunErrorScripts: Action started
    2013-10-24 11:34:36 RunErrorScripts: Action succeeded
    2013-10-24 11:34:36 RestoreMovedFiles: Action started
    2013-10-24 11:34:36 RestoreMovedFiles: RestoreMovedFiles(): Failed to rename C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll: maximum allowed temporary extension reached
    2013-10-24 11:34:36 RestoreMovedFiles: Action succeeded
    2013-10-24 11:34:36 SetUpdateFailed: Action started
    2013-10-24 11:34:36 SetUpdateFailed: Unable to create an instance of ComponentManager - SystemInformation cannot be informed of end of update
    2013-10-24 11:34:36 SetUpdateFailed: Action succeeded

    ----------------------------------------


    Interestingly, one of the five resolved itself without any intervention. All the PCs are exact clones of each other, there are no difference in registery permissions vs ones that have updated successfully. 

    Mike

    :44453
  • Hello Mike,

    perhaps Sophos Anti-Virus CustomActions log shows 'Error opening Windows key' can help (although you say the permissions are identical). In addition please check if there is indeed a number of leftovers, you should be able to delete them after a reboot.

    What about the Protect computers issue?

    Christian

    :44459
  • Hi Christian,

    Thanks for your help. No mention in the logs about an 'error opening Windows key'. When you say leftovers, what do you mean?

    Protect computers doesn't work, I'm running EC 5.0.0.5 and have no intention of upgrading. 

    Mike

    :44467
  • Hello Mike,

    the log you speaks of an error deleting this key - the "file not found" is one interpretation of the result of the call, in case of a regkey it should be "key not found" :)
    I meant leftover DLLs, with the stf?? extensions, which should have been deleted after a reboot.

    As you see SEC 5.0 can't properly handle Windows 8. I didn't have any problems upgrading the other servers to finally 5.2.1 - almost disappointing uneventful.

    Christian
    :44471