This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

eclipse development tool not working when Sophos endpoint is running in the system.

Dear Team,

eclipse development tool not working when Sophos endpoint is running in the system.

we have done the below activity to fix the same but the result is failed.

1. added eclipse process in exclude list

2. added the eclipse installation path and other folders related to eclipse to the exclude list.

3. disabled each feature in Sophos

when we completely uninstall Sophos endpoint the same is working without any issue. ( also when all the components are disabled the same is working). there is no detection log available in Sophos central. 

kindly help to fix the same.

Regards

Mahesh. p.Mohan



This thread was automatically locked due to age.
  • Hi

    What is the OS and the version of the Sophos endpoint installed? Are you seeing this issue on all devices with the eclipse development tool installed? 

    Shweta

    Community Support Engineer | Sophos Technical Support
    Are you a Sophos Partner? | Product Documentation@SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
    The New Home of Sophos Support Videos! - Visit Sophos Techvids
  • Hello Mahesh,

    Please copy\paste and provide a screenshot of all exclusions that you added and provide a link or full list from Eclipse support so we can cross-reference. 

    Also please run the following in elevated command prompt while in Safe Mode in order to unload all Sophos filter drivers (you may need to disable Tamper protection first). 

    ren C:\Windows\System32\hmpalert.dll hmpalert.orig
    ren C:\Windows\SysWOW64\hmpalert.dll hmpalert.orig
    ren C:\Windows\System32\drivers\hmpalert.sys  hmpalert.orig
    ren C:\Windows\System32\drivers\savonaccess.sys savonaccess.orig
    ren C:\Windows\System32\drivers\SophosED.sys SophosED.orig

    After that please boot back in Normal mode and re-test the issue. if you find that the issue is no longer happening, we would need to narrow down which component is causing it. Please run the following commands in Safe mode again, which will re-activate one component at a time. After each command in Safe Mode, please boot back in normal mode and re-test the issue.  
     
    1) ren C:\Windows\System32\hmpalert.orig hmpalert.dll
        ren C:\Windows\SysWOW64\hmpalert.orig hmpalert.dll

    2) ren C:\Windows\System32\drivers\hmpalert.orig hmpalert.sys 

    3) ren C:\Windows\System32\drivers\savonaccess.orig savonaccess.sys

    4) ren C:\Windows\System32\drivers\SophosED.orig SophosED.sys

    Please provide the name of the component which you had to re-enable back to make the issue to start happening again.