Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 24 replies
  • Subscribers 1 subscriber
  • Views 21019 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Error Message: Rootkit scan cancelled due to a corrupt disk

sophos-icated

We are seeing the rootkit scan fail on multiple systems due to a "corrupt disk".  Specifically the error is:

Code: a01e0004

Description: Rootkit scan cancelled due to a corrupt disk

Have checked systems experiencing this error and there is no problem with the disk (scans are negative).  Any idea what corrupt disk this might refer to.  Also interesting is clicking on the link back to sophos knowledgebase comes up with nothing.  That is there is no entry for error code a01e0004.

We are running enterprise console 4.0.0.2362. 

System experiencing the error is running Windows Vista service pack 2.

Anyone have ideas on what might be causing this?

Thanks in advance.

:1514


This thread was automatically locked due to age.
Parents
  • 0

    Hi Jak,

    Thank you for your suggestion. It sounds to have a lot of steps and some knowledge to recover that affected. Anyway, this case is my customer's issue which their outsourcer who take care of maintenance pc job solved it by attaching the affected notebook's harddisk to his computer which has Kaspersky AV and running virus scan. The result is there is 2 malwares, trojan and rootkit.

    rootkit.win32.small.bjj and trojan-downloader.win32.agent.er (kaspersky).

    What the point is Sophos on the affected notebook whether can be detected both malwares or not?. The time that shown in enterprise console log of the affected notebook indicating that "rootkit scan has been cancelled due to corrupted disk" before bluescreen will be happened or Windows couldn't be started.

    What is the meaning of "rootkit scan has been cancelled due to corrupted disk"?. How to solve this error because I have seen a lot of this error in Enterprise Console?. let"s say 10 endpoints have this error.

    :9489
Reply
  • 0

    Hi Jak,

    Thank you for your suggestion. It sounds to have a lot of steps and some knowledge to recover that affected. Anyway, this case is my customer's issue which their outsourcer who take care of maintenance pc job solved it by attaching the affected notebook's harddisk to his computer which has Kaspersky AV and running virus scan. The result is there is 2 malwares, trojan and rootkit.

    rootkit.win32.small.bjj and trojan-downloader.win32.agent.er (kaspersky).

    What the point is Sophos on the affected notebook whether can be detected both malwares or not?. The time that shown in enterprise console log of the affected notebook indicating that "rootkit scan has been cancelled due to corrupted disk" before bluescreen will be happened or Windows couldn't be started.

    What is the meaning of "rootkit scan has been cancelled due to corrupted disk"?. How to solve this error because I have seen a lot of this error in Enterprise Console?. let"s say 10 endpoints have this error.

    :9489
Children
No Data