This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos quarantining auto update again

Has anybody noticed that Sophos is quarantining its own update program again?

We noticed that the clients were failing to update this morning and that alsvc.exe is quarantined on the clients. We had this a few months back when it was a known problem but I can't find anything about it today.

:38379


This thread was automatically locked due to age.
Parents
  • Hello bestseany,

    don't think the FP has risen from the grave :smileysurprised:

    What are your cleanup settings? Have the files been moved or deleted? If not, the updating should work when you add the exclusion (you specified the file name, didnt you?) and the clients comply.

    In addition to the clients' VDL version and IDE count you should check the date of the detection. Unlikely that some clients have updated and reported for half a year but I won't rule it out absolutely. I would have suggested collecting the logs and sending them to support, but then you probably want to make sure that it is not a false alarm (forgive the pun).

    Christian

    :38385
Reply
  • Hello bestseany,

    don't think the FP has risen from the grave :smileysurprised:

    What are your cleanup settings? Have the files been moved or deleted? If not, the updating should work when you add the exclusion (you specified the file name, didnt you?) and the clients comply.

    In addition to the clients' VDL version and IDE count you should check the date of the detection. Unlikely that some clients have updated and reported for half a year but I won't rule it out absolutely. I would have suggested collecting the logs and sending them to support, but then you probably want to make sure that it is not a false alarm (forgive the pun).

    Christian

    :38385
Children
No Data