I've followed through the articles http://www.sophos.com/en-us/support/knowledgebase/118311.aspx provided to fix this mother of all f ups but I still have clients reporting false virus alerts.
The problem machines are all clients showing the last update in SEC at 23:38 19/09/12 when the issue started.
I've ammended the AV policy to exclude folders/files
ALsvc.exe
C:\Documents and Settings\All Users\Application Data\Sophos\
C:\PROGRA~2\Sophos\
C:\Program Files (x86)\Common Files\Adobe\
C:\Program Files (x86)\DivX\
C:\Program Files (x86)\Java\
C:\Program Files (x86)\Prophet Client\
C:\Program Files (x86)\Skype\
C:\Program Files (x86)\Sophos\
C:\Program Files\ProphetUpdate\
C:\Program Files\Sophos\
C:\programdata\sophos\
C:\Windows\SysWOW64\Macromed\Flash\
...and forced an update to clients but no change to the 'last update' in the SEC.
If I manually uninstall and reinstall directly from the SophosUpdate share the client works fine. I do not want to have to go to every client and do this so I wondered if there's anything to try?
This thread was automatically locked due to age.
