Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 12 replies
  • Subscribers 1 subscriber
  • Views 26288 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos CLI scan goes wrong

AKoenig

Hello dear Community,

i have a problem with the Sophos virus scan using the CLI.

Our company wants me to develop procedures using Kaseya to scan our company Workstations.

To acomplish this, the first thing coming to my mind was scaning the PCs using the CLI command, but here comes the problem.

When I execute the sav32cli.exe with the parameters -DI -P:"C:\Temp\Sophos_Scan.txt" --stop-scan , there is a huge fail, which(i think) is not attended to happen. See attachment for the outcome of the first hour of scaning.

Basicly, what it does, it is going into a structure which is non-existant at all, and decreases the /Anwendungsdaten with every retry, coming down to no /Anwendungsdaten in the structure at all, which should be the right place to scan.

My question here is of corse:

- How do i fix this problem?

-If not fixable, is there any other way to trigger a scan from "remote"?

:55168


This thread was automatically locked due to age.
Parents
  • 0

    Hello Alex Axel [Ihad it right the first time],

    the version numbers now have a lifetime of roughly one month (this hasn't always been the case) and thus won't tell you if the endpoint has recently updated and all the IDEs (guess you'd have to count them). The different components have their own version, the one you showed is for AutoUpdate, RMS has another.

    The best thing I can come up with is:

    HKLM\SOFTWARE\[Wow6432Node\]Sophos\AutoUpdate\Service\Subscription\\version

    Christian

    :55199
Reply
  • 0

    Hello Alex Axel [Ihad it right the first time],

    the version numbers now have a lifetime of roughly one month (this hasn't always been the case) and thus won't tell you if the endpoint has recently updated and all the IDEs (guess you'd have to count them). The different components have their own version, the one you showed is for AutoUpdate, RMS has another.

    The best thing I can come up with is:

    HKLM\SOFTWARE\[Wow6432Node\]Sophos\AutoUpdate\Service\Subscription\\version

    Christian

    :55199
Children
No Data