Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 2674 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

FixUpdate.vbs v6.1 Error while restoring quarantine Files "Ignore file moved for another reason"

Alexandre_T

Hello,

Is anyone experiencing the same problem ? :

While using the Fixupdate.vbs everything works fine except the restore of the files in quarantine....

When we use the /verbose mode in cscript we can see this message :

Ignore file moved for another reason: "C:\program files (x86)\Sophos\autoupdate\ALsvc.exe" "C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\ALsvc.exe.000" And it's the same for ALL the files...

And all the log files generated by the script (ex: "2012-9-26_9-27-49_#ComputerName#_001-FalsePosAll.txt") are empty.

 command line used for the script : cscript.exe //nologo FixUpdate.vbs /fixIssues:true /useSophosCid:true /verbose:true /restoreMovedFiles:true /logPath:"C:\" > C:\SophosFix.txt

Last question, Is anyone have successfully restored quarantine files using this Fixupdate.vbs ???

Thanks for your comment.

:33065


This thread was automatically locked due to age.
  • 0

    Morning Alexandre_T, sorry to hear you have had this issue i will pass it on to a dev team to investigate now. However while you do this could you please confirm if the files now exist in their target folders correctly? I Know we leave a copy of the files in the quarantine in order to ensure that they are still available if any errors occurred. The script should however have copied the files into their correct target path. 

    :33077
  • 0

    Thanks for your reply, but no, unfortunately none of the files are restored in the correct target directory.

    We try the script on different system in our environment, XP, W7 x64, 2003 and 2008 R2 and the problem occur on all our computers.

    :33081
  • 0

    Sorry, do you have the verbose output for this operation available, if you have a support case ID please link it and i can have someone from support contact you in order to get this file for investigation here.

    Could you confirm if any non-Sophos files have been affected? We believe that the reason for the SOPHOS files not moved "due to another reason" is because the Fixissues:true operation is restoring the SOPHOS files prior to the restore operation. If there are other files in addition to the SOPHOS ones marked in this state, it would be good to understand this and give us a point to start investigating further.

    :33083
  • 0

    Just saw your reply, I think we need somone from support to assist you with this as the tool should have resolved this, and ideally we would like to get mor info on why the tool is failing so we can remove any errors in its operation. Sorry i cannot help further via the forum.

    :33089