This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SVRT process terminated.

We found SVRT has terminated.

But I don't know why it been terminated.

Here is the log:

2019-06-25 02:38:11.330  Sophos Virus Removal Tool version 2.7.0

2019-06-25 02:38:11.330  Copyright (c) 2009-2018 Sophos Limited. All rights reserved.

 

2019-06-25 02:38:11.330  This tool will scan your computer for viruses and other threats. If it finds any, it will give you the option to remove them.

 

2019-06-25 02:38:11.330  Windows version 6.1 SP 1.0 Service Pack 1 build 7601 SM=0x100 PT=0x1 WOW64

2019-06-25 02:38:11.331  Log file path: C:\ProgramData\Sophos\Sophos Virus Removal Tool\Logs\SophosVirusRemovalTool.log

 

2019-06-25 02:38:20.272  Option all = no

2019-06-25 02:38:20.272  Option recurse = yes

2019-06-25 02:38:20.272  Option archive = no

2019-06-25 02:38:20.272  Option service = yes

2019-06-25 02:38:20.272  Option confirm = yes

2019-06-25 02:38:20.272  Option sxl = no

2019-06-25 02:38:20.273  Option max-data-age = 35

2019-06-25 02:38:20.273  Option vdl-logging = yes

2019-06-25 02:38:20.275  Component SVRTcli.exe version 2.7.0

2019-06-25 02:38:20.275  Component control.dll version 2.7.0

2019-06-25 02:38:20.275  Component SVRTservice.exe version 2.7.0

2019-06-25 02:38:20.275  Component engine\osdp.dll version 1.44.1.2432

2019-06-25 02:38:20.275  Component engine\veex.dll version 3.74.1.2432

2019-06-25 02:38:20.275  Component engine\savi.dll version 9.0.12.2432

2019-06-25 02:38:20.276  Component rkdisk.dll version 1.5.33.1

2019-06-25 02:38:20.276  Version info: Product version       2.7.0

2019-06-25 02:38:20.276  Version info: Detection engine    3.74.1

2019-06-25 02:38:20.276  Version info: Detection data        5.57

2019-06-25 02:38:20.276  Version info: Build date     11/13/2018

2019-06-25 02:38:20.276  Version info: Data files added      320

2019-06-25 02:38:20.276  Version info: Last successful update      (not yet updated)

 

2019-06-25 02:38:20.347  Running in preview mode - will not perform disinfection/cleanup

 

2019-06-25 11:20:48.877  Could not open C:\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb

2019-06-25 11:20:48.880  Could not open C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb

2019-06-25 11:20:50.889  Could not open C:\Windows\System32\config\RegBack\DEFAULT

2019-06-25 11:20:50.890  Could not open C:\Windows\System32\config\RegBack\SAM

2019-06-25 11:20:50.891  Could not open C:\Windows\System32\config\RegBack\SECURITY

2019-06-25 11:20:50.892  Could not open C:\Windows\System32\config\RegBack\SOFTWARE

2019-06-25 11:20:50.894  Could not open C:\Windows\System32\config\RegBack\SYSTEM

2019-06-25 13:06:28.869  Warning: failed to stop service (109: The pipe has been ended.)

2019-06-25 13:06:28.870  Error: scan service had to be terminated

 

2019-06-25 13:06:28.870  Scan completed.

2019-06-25 13:06:28.870 



This thread was automatically locked due to age.
Parents
  • Hi, 

    General info here: https://community.sophos.com/kb/en-us/113298 

    Also there are two things that stick out from the log you posted.

     

    1.  It is running in preview mode, are you simply testing this?  With that switch -preview Do not do disinfection/cleanup.  Meaning it will only identify.

    2.  Are you running this with an admin cmd prompt or right clicking and run as admin when you open the tool?  It looks as though it cannot access System32 files which you would need admin to access.

    Respectfully, 

     

    Badrobot

     

Reply
  • Hi, 

    General info here: https://community.sophos.com/kb/en-us/113298 

    Also there are two things that stick out from the log you posted.

     

    1.  It is running in preview mode, are you simply testing this?  With that switch -preview Do not do disinfection/cleanup.  Meaning it will only identify.

    2.  Are you running this with an admin cmd prompt or right clicking and run as admin when you open the tool?  It looks as though it cannot access System32 files which you would need admin to access.

    Respectfully, 

     

    Badrobot

     

Children
No Data