This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos EndPoint SC 9.7 extrange behavior

Hi all,

I have noted in three different computers that the almon.exe process is trying to read data every second from a registry file that it doesn't exists:


11:38:03,9998984    ALMon.exe    3576    RegQueryKey    HKCU\Software\Classes    SUCCESS    Query: HandleTags, HandleTags: 0x1


11:38:03,9999241    ALMon.exe    3576    RegOpenKey    HKCU\Software\Classes\Wow6432Node\CLSID\{72C5961A-7923-4109-BF4B-CBA5CE20BC53}    NAME NOT FOUND    Desired Access: Read


11:38:03,9999518    ALMon.exe    3576    RegOpenKey    HKCR\Wow6432Node\CLSID\{72C5961A-7923-4109-BF4B-CBA5CE20BC53}    NAME NOT FOUND    Desired Access: Read


11:38:04,9999258    ALMon.exe    3576    RegQueryKey    HKCU\Software\Classes    SUCCESS    Query: Name


Somebody have noted this before? (I am using Process Monitor Tool) It is possible to fix that?

Is always the same Key (72C5961A-7923-4109-BF4B-CBA5CE20BC53 ) in the tree computers (WXP and W7 fresh installations) in 32 and 64 bits. It is a little annoying have every second this read operation on the HD.

Thank you in advance.

:19875


This thread was automatically locked due to age.
Parents Reply Children
No Data