This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos for Mac on-access scanning disabled.

Hello. I have Sophos for mac v 8.16c. For whatever reason, I was working and on-access scanning was randomly disabled. I went into the preferences and I can't re-enable on-access scanning, even with administrator privaleges. I have tried restarting my computer and reinstalling sophos,  but none of those fixed my issue. Can anybody help me with my problem?

I forgot to mention, I am running Mac OSX 10.8.4

:1012610


This thread was automatically locked due to age.
  • I opened Console, and found this message, in case it is any indication:

    Info:    ic_worker_start: kext not found, attempting to load at 14:57 on 05 March 2015

    I use OS 10.6.8, with Sophos 9.2.2 on a 2010 MacBook Pro.

    Hardware UUID:    20B01658-F8DD-59EB-8445-F825CB725C4F

    :1020322

  • tonyjackson wrote:

    I opened Console, and found this message, in case it is any indication:

    Info:    ic_worker_start: kext not found, attempting to load at 14:57 on 05 March 2015

    I use OS 10.6.8, with Sophos 9.2.2 on a 2010 MacBook Pro.

    Hardware UUID:    20B01658-F8DD-59EB-8445-F825CB725C4F


    That is extremely useful. A couple of questions, if the problem has not resovled itself automatically (for some people, the software "heals" itself which makes diagnostics harder).

    (1) do you have anything interesting about install failures in the log file /var/log/install.log

    (2) are there any files located at /Library/Extensions/SophosOnAccessInterceptor.kext

    (3) are there any files located at /System/Library/Extensions/SophosOnAccessInterceptor.kext

    Thanks for the info.

    :1020323

    ---

    Bob Cook (bob.cook@sophos.com) Director, Software Development

  • Hello

    Same problem since 2 days.

    Log file:

    06.03.15 11:36:28 Sophos Anti-Virus[453] *** Assertion failure in -[IPCConnection initWithFileHandle:delegate:], /Builds/build_savmac/Libraries/Server Library/IPCConnection.m:242

    Sophos version 9.2.4

    Mac OS X 10.6.8 Snow leopard

    Information: Since 3 days the log shows many contacts with dropbox, but we ourselves dont contact dropbox:

    06.03.15 08:10:32 [0x0-0xf00f].com.getdropbox.dropbox[147] /Applications/Dropbox.app/Contents/Resources/lib/python27.zip
    06.03.15 08:10:32 [0x0-0xf00f].com.getdropbox.dropbox[147] /Applications/Dropbox.app/Contents/Resources/lib/python2.7
    06.03.15 08:10:32 [0x0-0xf00f].com.getdropbox.dropbox[147] /Applications/Dropbox.app/Contents/Resources/lib/python2.7/plat-darwin
    06.03.15 08:10:32 [0x0-0xf00f].com.getdropbox.dropbox[147] /Applications/Dropbox.app/Contents/Resources/lib/python2.7/plat-mac
    06.03.15 08:10:32 [0x0-0xf00f].com.getdropbox.dropbox[147] /Applications/Dropbox.app/Contents/Resources/lib/python2.7/plat-mac/lib-scriptpackages
    06.03.15 08:10:32 [0x0-0xf00f].com.getdropbox.dropbox[147] /Applications/Dropbox.app/Contents/Resources/lib/python2.7/lib-tk
    06.03.15 08:10:32 [0x0-0xf00f].com.getdropbox.dropbox[147] /Applications/Dropbox.app/Contents/Resources/lib/python2.7/lib-old
    06.03.15 08:10:32 [0x0-0xf00f].com.getdropbox.dropbox[147] /Applications/Dropbox.app/Contents/Resources/lib/python2.7/lib-dynload
    06.03.15 08:10:32 com.apple.launchd[1] (com.apple.SystemStarter) Failed to count the number of files in "/System/Library/StartupItems": No such file or directory

    Can you helb me?

    Thank you

    Walter

    :1020326

  • Walter wrote:

    Hello

    Same problem since 2 days.

    Log file:

    06.03.15 11:36:28 Sophos Anti-Virus[453] *** Assertion failure in -[IPCConnection initWithFileHandle:delegate:], /Builds/build_savmac/Libraries/Server Library/IPCConnection.m:242 


    That message suggests there is some communications issues between our components (IPC stands for Inter-Process Communications). Can you tell me what files you have located in /var/run related to Sophos? Please run this command in Terminal and let me know the output:

    ls -l /var/run/com.sophos.*

    My system shows ten separate entries.


    Walter wrote:

    Information: Since 3 days the log shows many contacts with dropbox, but we ourselves dont contact dropbox:

    06.03.15 08:10:32 [0x0-0xf00f].com.getdropbox.dropbox[147] /Applications/Dropbox.app/Contents/Resources/lib/python27.zip
    06.03.15 08:10:32 [0x0-0xf00f].com.getdropbox.dropbox[147] /Applications/Dropbox.app/Contents/Resources/lib/python2.7
    06.03.15 08:10:32 [0x0-0xf00f].com.getdropbox.dropbox[147] /Applications/Dropbox.app/Contents/Resources/lib/python2.7/plat-darwin
    06.03.15 08:10:32 [0x0-0xf00f].com.getdropbox.dropbox[147] /Applications/Dropbox.app/Contents/Resources/lib/python2.7/plat-mac
    06.03.15 08:10:32 [0x0-0xf00f].com.getdropbox.dropbox[147] /Applications/Dropbox.app/Contents/Resources/lib/python2.7/plat-mac/lib-scriptpackages
    06.03.15 08:10:32 [0x0-0xf00f].com.getdropbox.dropbox[147] /Applications/Dropbox.app/Contents/Resources/lib/python2.7/lib-tk
    06.03.15 08:10:32 [0x0-0xf00f].com.getdropbox.dropbox[147] /Applications/Dropbox.app/Contents/Resources/lib/python2.7/lib-old
    06.03.15 08:10:32 [0x0-0xf00f].com.getdropbox.dropbox[147] /Applications/Dropbox.app/Contents/Resources/lib/python2.7/lib-dynload
    06.03.15 08:10:32 com.apple.launchd[1] (com.apple.SystemStarter) Failed to count the number of files in "/System/Library/StartupItems": No such file or directory 


    Those messages are not related to our software. Looks like some sort of logging from DropBox software.

    :1020327

    ---

    Bob Cook (bob.cook@sophos.com) Director, Software Development

  • Hi

    Thank you for answering. There is no file in var/run:

    Walter-Rutishausers-MacBook-Pro:~ walter$ ls -l /var/run/com.sophos.*
    ls: /var/run/com.sophos.*: No such file or directory

    When I want to run Sophos by menu line (sign with cross inside) nor an update nor an actualisation is possible.

    New download of sophos?

    Thank you for your help.

    Walter

    :1020328
  • Hello Mr. Cook!

    Same issue here, just happening today.  Here is what's revealed in Terminal:

    srwxrwxrwx  1 root  daemon  0 Mar  6 21:15 /var/run/com.sophos.sau.ipc

    srw-------  1 root  daemon  0 Mar  6 21:15 /var/run/com.sophos.sau.ipcs

    -rw-------  1 root  daemon  4 Mar  6 21:14 /var/run/com.sophos.sau.pid

    -rw-------  1 root  daemon  5 Mar  6 22:26 /var/run/com.sophos.sav.ic.pid

    srwxrwxrwx  1 root  daemon  0 Mar  6 21:39 /var/run/com.sophos.sav.ipc

    srw-------  1 root  daemon  0 Mar  6 21:39 /var/run/com.sophos.sav.ipcs

    -rw-------  1 root  daemon  4 Mar  6 21:39 /var/run/com.sophos.sav.pid

    srwxrwxrwx  1 root  daemon  0 Mar  6 21:39 /var/run/com.sophos.sav.quarantine

    srwxrwxrwx  1 root  daemon  0 Mar  6 21:39 /var/run/com.sophos.sav.scan

    Please help me!  Thank you in advance for your prompt response.

    :1020329
  • I suggest reinstalling. Seems pretty broken. There could be interesting things in the installer log file (under /var/log/install.log).

    :1020370

    ---

    Bob Cook (bob.cook@sophos.com) Director, Software Development


  • MusicMan wrote:

    Hello Mr. Cook!

    Same issue here, just happening today.  Here is what's revealed in Terminal:

    srwxrwxrwx  1 root  daemon  0 Mar  6 21:15 /var/run/com.sophos.sau.ipc

    srw-------  1 root  daemon  0 Mar  6 21:15 /var/run/com.sophos.sau.ipcs

    -rw-------  1 root  daemon  4 Mar  6 21:14 /var/run/com.sophos.sau.pid

    -rw-------  1 root  daemon  5 Mar  6 22:26 /var/run/com.sophos.sav.ic.pid

    srwxrwxrwx  1 root  daemon  0 Mar  6 21:39 /var/run/com.sophos.sav.ipc

    srw-------  1 root  daemon  0 Mar  6 21:39 /var/run/com.sophos.sav.ipcs

    -rw-------  1 root  daemon  4 Mar  6 21:39 /var/run/com.sophos.sav.pid

    srwxrwxrwx  1 root  daemon  0 Mar  6 21:39 /var/run/com.sophos.sav.quarantine

    srwxrwxrwx  1 root  daemon  0 Mar  6 21:39 /var/run/com.sophos.sav.scan

    Please help me!  Thank you in advance for your prompt response.


    That looks correct. What messages do you see in the log file "/Library/Logs/Sophos Anti-Virus.log"?

    :1020371

    ---

    Bob Cook (bob.cook@sophos.com) Director, Software Development

  • Dear Mr. Cook,

    Thank you for your response!  The issue seems to inexplicably resolved itself, and the program appears to be functioning normally (I hope!).  I must be living right, for the moment.

    Until later, thank you again sir!

    :1020391
  • Same problem here.  Can I uninstall the reinstall Sophos?  

    Below are latest excerpts from library:

    al Error: The main virus data file is missing
    com.sophos.intercheck: Sophos Anti-Virus cannot continue
    com.sophos.intercheck:
    com.sophos.intercheck: Info: ic_worker_start: kext already loaded at 13:15 on 15 March 2015
    com.sophos.intercheck:
    com.sophos.intercheck: Fatal Error: The main virus data file is missing
    com.sophos.intercheck: Sophos Anti-Virus cannot continue
    com.sophos.intercheck:
    com.sophos.intercheck: Info: ic_worker_start: kext already loaded at 13:15 on 15 March 2015
    com.sophos.intercheck:
    com.sophos.intercheck: Fatal Error: The main virus data file is missing
    com.sophos.intercheck: Sophos Anti-Virus cannot continue
    com.sophos.intercheck:
    com.sophos.intercheck: Info: ic_worker_start: kext already loaded at 13:15 on 15 March 2015
    com.sophos.intercheck:
    com.sophos.intercheck: Fatal Error: The main virus data file is missing
    com.sophos.intercheck: Sophos Anti-Virus cannot continue
    com.sophos.intercheck:
    com.sophos.intercheck: Info: ic_worker_start: kext already loaded at 13:15 on 15 March 2015
    com.sophos.intercheck:
    com.sophos.intercheck: Fatal Error: The main virus data file is missing
    com.sophos.intercheck: Sophos Anti-Virus cannot continue
    com.sophos.intercheck:
    com.sophos.intercheck: Info: ic_worker_start: kext already loaded at 13:16 on 15 March 2015
    com.sophos.intercheck:
    com.sophos.intercheck: Fatal Error: The main virus data file is missing
    com.sophos.intercheck: Sophos Anti-Virus cannot continue
    com.sophos.intercheck:

    :1020392