Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 15 replies
  • Subscribers 1 subscriber
  • Views 46634 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Shh/Updater-B - Web protection is no longer functional [0xa058000c]

adam23

All my machines now has these error on them after the Shh/Updater-B problem.

Web protection is no longer functional. The filtering driver has been bypassed or unloaded [0xa058000c]

Any idea's on how to fix this?  reprotecting a machine does not fix the error.  Just comes right back.

:31647


This thread was automatically locked due to age.
  • 0
    adam23 wrote:

    All my machines now has these error on them after the Shh/Updater-B problem.

    Web protection is no longer functional. The filtering driver has been bypassed or unloaded [0xa058000c]

    Any idea's on how to fix this?  reprotecting a machine does not fix the error.  Just comes right back.

    Hi Adam,

    Step 1 is to work through the advisory steps if you haven't already. That will get your updating to work, then we can go about restoring the deleted files. The advisory can be found at 

    http://www.sophos.com/en-us/support/knowledgebase/118311.aspx

    :31649
  • 0

    Most of my machines are up-to-date with the fix.  But that has not resolved this issue.  Only way I have found to fix it is to manually remove the client, reboot and re-install.  I assume there is a file missing or something.

    I do not want to have to manually re-install all of my clients.

    :31663
  • 0

    I cant get updating to work at all. Stuck at 6pm last night.

    :31667
  • 0
    adam23 wrote:

    Most of my machines are up-to-date with the fix.  But that has not resolved this issue.  Only way I have found to fix it is to manually remove the client, reboot and re-install.  I assume there is a file missing or something.

    I do not want to have to manually re-install all of my clients.

    In the huge thread on this, there have been some batch files posted that copy the missing files from the update location to the endpoint. You could use such a batch file as a machine startup script, or push it with PSEXEC, etc. to avoid having to reprotect systems. You might need to tweak them for these specific files, but currently this is your quickest option to recover from this. I'm mostly monitoring the other thread, so if I miss something here, please cross post to the other thread and I'll hopefully see it.

    :31675
  • 0
    Can someone tell me the file or files that will fix this issue. From the look of the batch files they are to fix the auto update problem.
    :31697
  • 0

    It would be helpful if Nathan gave the link to the other thread so we too could get lost amongst it's hugeness.

    "Web Protection is no longer functional. 

    The filtering driver has been bypassed or unloaded."

    Just copying in the files as stated does not seem to be enough.
    I'm thinking by the verbiage of the error that a previously deleted DLL needs to be reregistered.

    But which one? What Path?
    I guess I could try to reregister all of them :-(

    :32241
  • 0
    Why_Force wrote:

    It would be helpful if Nathan gave the link to the other thread so we too could get lost amongst it's hugeness.

    "Web Protection is no longer functional. 

    The filtering driver has been bypassed or unloaded."

    Just copying in the files as stated does not seem to be enough.
    I'm thinking by the verbiage of the error that a previously deleted DLL needs to be reregistered.

    But which one? What Path?
    I guess I could try to reregister all of them :-(

    Sorry, the link ot the other thread is http://community.sophos.com/t5/Sophos-Endpoint-Protection/Is-any-one-else-seing-this-alert-Shh-Updater-B-False-positives/td-p/29723.

    :32251
  • 0

    Link didn't work.

    Received an error.....

    "

    An Unexpected Error has occurred.

    * Sorry, your request failed. A notification has been sent to the development team for investigation.

    Exception ID: 1F5529F1

    Please click the Back button on your browser."

    :32723
  • 0

    Has anyone found a solution to this yet?

    I tried following Article ID 114350, but even a push reprotect of PCs with this problem still had it after the reprotect.

    I have alread been round all PCs in the organisation to run a script to reload the Sophos Auto Update (provided by Sophos), and don't really want to go round them yet again. Fortunately only a small organisation, can't imagine the problem for larger setups.

    Any pointers appreciated.

    :32949