Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 70 replies
  • Answers 2 answers
  • Subscribers 22 subscribers
  • Views 301150 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Latest pre-release of 10.11.4 breaks Sophos AV Home Edition

bocaboy

The problem that existed prior to the release of 9.4.1 is back with the latest version of El Capitan that has just been pre-released 10.11.4 Beta (15E27e). The Sophos icon remains dimmed in the menu bar with the error On-Access Scanning Is Disabled. Could someone in engineering please take a look at this?



This thread was automatically locked due to age.
Parents
  • 0
    I found the following messages including the invalid signatures message

    1/15/16 12:25:33.339 AM com.apple.kextd[48]: ERROR: invalid signature for com.sophos.nke.swi, will not load
    1/15/16 12:25:33.000 AM kernel[0]: Kext com.sophos.nke.swi not found for unload request.
    1/15/16 12:25:33.000 AM kernel[0]: Kext com.sophos.nke.swi not found for unload request.
    1/15/16 12:25:34.000 AM kernel[0]: Kext com.sophos.nke.swi not found for unload request.
    1/15/16 12:25:34.000 AM kernel[0]: Kext com.sophos.nke.swi not found for unload request.
    1/15/16 12:25:34.000 AM kernel[0]: Kext com.sophos.nke.swi not found for unload request.
    1/15/16 12:25:34.536 AM SMEServiceManager[59]: [SMEServiceManager.m:1541] Unable to unload kext 'com.sophos.nke.swi'.
    1/15/16 12:25:35.018 AM com.apple.kextd[48]: Untrusted kexts are not allowed
Reply
  • 0
    I found the following messages including the invalid signatures message

    1/15/16 12:25:33.339 AM com.apple.kextd[48]: ERROR: invalid signature for com.sophos.nke.swi, will not load
    1/15/16 12:25:33.000 AM kernel[0]: Kext com.sophos.nke.swi not found for unload request.
    1/15/16 12:25:33.000 AM kernel[0]: Kext com.sophos.nke.swi not found for unload request.
    1/15/16 12:25:34.000 AM kernel[0]: Kext com.sophos.nke.swi not found for unload request.
    1/15/16 12:25:34.000 AM kernel[0]: Kext com.sophos.nke.swi not found for unload request.
    1/15/16 12:25:34.000 AM kernel[0]: Kext com.sophos.nke.swi not found for unload request.
    1/15/16 12:25:34.536 AM SMEServiceManager[59]: [SMEServiceManager.m:1541] Unable to unload kext 'com.sophos.nke.swi'.
    1/15/16 12:25:35.018 AM com.apple.kextd[48]: Untrusted kexts are not allowed
Children
  • 0 in reply to glenng6

    Can you please run the following commands in Terminal and send me the result?

    ls -lR /Library/Extensions/SophosNetworkInterceptor.kext

    find /Library/Extensions/SophosNetworkInterceptor.kext -type f -exec md5 '{}' \;

    Thanks much!

    ---

    Bob Cook (bob.cook@sophos.com) Director, Software Development

  • 0 in reply to bobcook
    I am having the same problem with the new beta. I uninstalled AV and installed Sophos Home and still have the same problem.
    Here is the result of the terminal command requested while running Sophos Home:

    MacPro_Eth_en0:~ MacPro$ ls -lR /Library/Extensions/SophosNetworkInterceptor.kext
    total 0
    dr-xr-xr-x 6 root wheel 204 Jan 15 11:24 Contents

    /Library/Extensions/SophosNetworkInterceptor.kext/Contents:
    total 8
    -r--r--r-- 1 root wheel 1437 Jan 15 11:24 Info.plist
    dr-xr-xr-x 3 root wheel 102 Jan 15 11:24 MacOS
    dr-xr-xr-x 3 root wheel 102 Jan 15 11:24 Resources
    dr-xr-xr-x 3 root wheel 102 Jan 15 11:24 _CodeSignature

    /Library/Extensions/SophosNetworkInterceptor.kext/Contents/MacOS:
    total 224
    -r-xr-xr-x 1 root wheel 112900 Jan 15 11:24 SophosSocketFilter

    /Library/Extensions/SophosNetworkInterceptor.kext/Contents/Resources:
    total 8
    -r--r--r-- 1 root wheel 458 Jan 15 11:24 build-info.plist

    /Library/Extensions/SophosNetworkInterceptor.kext/Contents/_CodeSignature:
    total 8
    -r--r--r-- 1 root wheel 426 Jan 15 11:24 CodeResources

    and for the second command:

    MacPro_Eth_en0:~ MacPro$ find /Library/Extensions/SophosNetworkInterceptor.kext -type f -exec md5 '{}' \;
    MD5 (/Library/Extensions/SophosNetworkInterceptor.kext/Contents/_CodeSignature/CodeResources) = 6d72b40fd8ecf726a68a0b0392ce2caf
    MD5 (/Library/Extensions/SophosNetworkInterceptor.kext/Contents/Info.plist) = 62a4ad5a0134537d5a1badd6230006a9
    MD5 (/Library/Extensions/SophosNetworkInterceptor.kext/Contents/MacOS/SophosSocketFilter) = 70b673c2f950f13ed054b24fc08ae403
    MD5 (/Library/Extensions/SophosNetworkInterceptor.kext/Contents/Resources/build-info.plist) = 1e778eccca3cee7fcf311cd65c6f213b

    The Sophos agent I chatted with online about an hour ago was totally unaware of this issue with the new beta.
  • 0 in reply to bobcook
    Bob,
    Here are the results:

    Glenn-Gardiners-MacBook-Pro:~ glenng6$ ls -lR /Library/Extensions/SophosNetworkInterceptor.kext
    total 0
    dr-xr-xr-x 6 root wheel 204 Sep 25 06:03 Contents

    /Library/Extensions/SophosNetworkInterceptor.kext/Contents:
    total 8
    -r--r--r-- 1 root wheel 1437 Sep 25 06:03 Info.plist
    dr-xr-xr-x 3 root wheel 102 Sep 25 06:03 MacOS
    dr-xr-xr-x 3 root wheel 102 Sep 25 06:03 Resources
    dr-xr-xr-x 3 root wheel 102 Sep 25 06:03 _CodeSignature

    /Library/Extensions/SophosNetworkInterceptor.kext/Contents/MacOS:
    total 224
    -r-xr-xr-x 1 root wheel 112900 Sep 25 06:03 SophosSocketFilter

    /Library/Extensions/SophosNetworkInterceptor.kext/Contents/Resources:
    total 8
    -r--r--r-- 1 root wheel 458 Sep 25 06:03 build-info.plist

    /Library/Extensions/SophosNetworkInterceptor.kext/Contents/_CodeSignature:
    total 8
    -r--r--r-- 1 root wheel 426 Sep 25 06:03 CodeResources
    Glenn-Gardiners-MacBook-Pro:~ glenng6$


    Glenn-Gardiners-MacBook-Pro:~ glenng6$ find /Library/Extensions/SophosNetworkInterceptor.kext -type f -exec md5 '{}' \;
    MD5 (/Library/Extensions/SophosNetworkInterceptor.kext/Contents/_CodeSignature/CodeResources) = 9bd102f37637c83812aa36b4aeb6c5db
    MD5 (/Library/Extensions/SophosNetworkInterceptor.kext/Contents/Info.plist) = 62a4ad5a0134537d5a1badd6230006a9
    MD5 (/Library/Extensions/SophosNetworkInterceptor.kext/Contents/MacOS/SophosSocketFilter) = 445675e047d911f354fc5e24bc88a679
    MD5 (/Library/Extensions/SophosNetworkInterceptor.kext/Contents/Resources/build-info.plist) = 9f86d916dd7b91f35131868a308b5706
    Glenn-Gardiners-MacBook-Pro:~ glenng6$
  • 0 in reply to glenng6
    Same problem. Same MD5 checksums. It breaks are security, so i cannot use VPN technology to do my work...
  • 0 in reply to bobcook
    $ ls -lR /Library/Extensions/SophosNetworkInterceptor.kext
    total 0
    dr-xr-xr-x 6 root wheel 204B 16 Nov 20:51 Contents/

    /Library/Extensions/SophosNetworkInterceptor.kext/Contents:
    total 8
    -r--r--r-- 1 root wheel 1.4K 16 Nov 20:51 Info.plist
    dr-xr-xr-x 3 root wheel 102B 16 Nov 20:51 MacOS/
    dr-xr-xr-x 3 root wheel 102B 16 Nov 20:51 Resources/
    dr-xr-xr-x 3 root wheel 102B 16 Nov 20:51 _CodeSignature/

    /Library/Extensions/SophosNetworkInterceptor.kext/Contents/MacOS:
    total 224
    -r-xr-xr-x 1 root wheel 110K 16 Nov 20:51 SophosSocketFilter*

    /Library/Extensions/SophosNetworkInterceptor.kext/Contents/Resources:
    total 8
    -r--r--r-- 1 root wheel 458B 16 Nov 20:51 build-info.plist

    /Library/Extensions/SophosNetworkInterceptor.kext/Contents/_CodeSignature:
    total 8
    -r--r--r-- 1 root wheel 426B 16 Nov 20:51 CodeResources
    $ find /Library/Extensions/SophosNetworkInterceptor.kext -type f -exec md5 '{}' \;
    MD5 (/Library/Extensions/SophosNetworkInterceptor.kext/Contents/_CodeSignature/CodeResources) = 9bd102f37637c83812aa36b4aeb6c5db
    MD5 (/Library/Extensions/SophosNetworkInterceptor.kext/Contents/Info.plist) = 62a4ad5a0134537d5a1badd6230006a9
    MD5 (/Library/Extensions/SophosNetworkInterceptor.kext/Contents/MacOS/SophosSocketFilter) = 445675e047d911f354fc5e24bc88a679
    MD5 (/Library/Extensions/SophosNetworkInterceptor.kext/Contents/Resources/build-info.plist) = 9f86d916dd7b91f35131868a308b5706
Unfiltered HTML