Most likely Post WINDOWS Monthly Patch Installation, Sophos status is broken.
We started the Windows updates rollout this week and already have multiple devices with this issues now.
Ex- This device was all okay once the update was installed and rebooted Sophos events shows this error.
Anyone else with this problem?
Hi Jiri Hadamek
Devices with red health status on central, does it show any specific service stopped or any other detections?
Shweta
It haven´t service stopped. It simply haven´t service installed.
Now - after several restarts AND several "update NOW" from Sophos UI on PCs we have the following state:
In Sophos Control Central - OK
ALL Sophos services ARE running - OK
On workstation - Sophos show errors - see the attached pictures.
Could you please translate the error message shown in the Endpoint UI? Which service state is in the stopped state?
Translated freely into English " Some services aren´t started. Call IT" But ALL services ARE running. (After several restart and reinstall from LOCAL Sophos UI)
Can you please click on About > Open Endpoint Self Help Tool > Services and check which services are not running? Do you see any components which are not installed?
Thanks,
Yashraj Singha
Community Team Lead, Support & Services| Sophos Technical Support Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts If a post solves your question use the 'Verify Answer' button.
All services ARE running
and
ALL services ARE installed.
Yep, same here.
Console:
" Failed to install savxp: uninstalling an older product failed."
Log:
"WARN Failed to install product E17FE03B-0501-4aaa-BC69-0129D965F311 10.8.7.1000."
Version agent: 10.8.6 VE3.78.5
Can you find (and attach) the install and uninstall logs of SAV in \windows\temp\ (if this is an AutoUpdate initiated install attempt) or under %temp% if you are performing an install with say the Sophos Central installer they would be under %temp%.
Hi jak,
Here is it what I found:
Sophos Anti-Virus Major Install Log
https://pastebin.com/fdBLBRf7
Sophos Anti-Virus Uninstall log
https://pastebin.com/N83VsS2J
SophosUpdate log when I initialization update from Console, maybe could help as well
https://pastebin.com/W1zLQf6r
Seeing error 1612 on SAV uninstall and install logs. The uninstall process is looking for the MSI which is missing in this path: C:\WINDOWS\Installer\60e64.msi.
You can try uninstalling Sophos using the SophosZap tool, and then reinstall Sophos.
Regards,