Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 15 subscribers
  • Views 1294 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

eclipse development tool not working when Sophos endpoint is running in the system.

Mahesh P Mohan

Dear Team,

eclipse development tool not working when Sophos endpoint is running in the system.

we have done the below activity to fix the same but the result is failed.

1. added eclipse process in exclude list

2. added the eclipse installation path and other folders related to eclipse to the exclude list.

3. disabled each feature in Sophos

when we completely uninstall Sophos endpoint the same is working without any issue. ( also when all the components are disabled the same is working). there is no detection log available in Sophos central. 

kindly help to fix the same.

Regards

Mahesh. p.Mohan



This thread was automatically locked due to age.
Parents
  • 0

    Hello Mahesh,

    Please copy\paste and provide a screenshot of all exclusions that you added and provide a link or full list from Eclipse support so we can cross-reference. 

    Also please run the following in elevated command prompt while in Safe Mode in order to unload all Sophos filter drivers (you may need to disable Tamper protection first). 

    ren C:\Windows\System32\hmpalert.dll hmpalert.orig
    ren C:\Windows\SysWOW64\hmpalert.dll hmpalert.orig
    ren C:\Windows\System32\drivers\hmpalert.sys  hmpalert.orig
    ren C:\Windows\System32\drivers\savonaccess.sys savonaccess.orig
    ren C:\Windows\System32\drivers\SophosED.sys SophosED.orig
    ​
    After that please boot back in Normal mode and re-test the issue. if you find that the issue is no longer happening, we would need to narrow down which component is causing it. Please run the following commands in Safe mode again, which will re-activate one component at a time. After each command in Safe Mode, please boot back in normal mode and re-test the issue.  
     
    1) ren C:\Windows\System32\hmpalert.orig hmpalert.dll
        ren C:\Windows\SysWOW64\hmpalert.orig hmpalert.dll

    2) ren C:\Windows\System32\drivers\hmpalert.orig hmpalert.sys 

    3) ren C:\Windows\System32\drivers\savonaccess.orig savonaccess.sys

    4) ren C:\Windows\System32\drivers\SophosED.orig SophosED.sys

    Please provide the name of the component which you had to re-enable back to make the issue to start happening again.

Reply
  • 0

    Hello Mahesh,

    Please copy\paste and provide a screenshot of all exclusions that you added and provide a link or full list from Eclipse support so we can cross-reference. 

    Also please run the following in elevated command prompt while in Safe Mode in order to unload all Sophos filter drivers (you may need to disable Tamper protection first). 

    ren C:\Windows\System32\hmpalert.dll hmpalert.orig
    ren C:\Windows\SysWOW64\hmpalert.dll hmpalert.orig
    ren C:\Windows\System32\drivers\hmpalert.sys  hmpalert.orig
    ren C:\Windows\System32\drivers\savonaccess.sys savonaccess.orig
    ren C:\Windows\System32\drivers\SophosED.sys SophosED.orig
    ​
    After that please boot back in Normal mode and re-test the issue. if you find that the issue is no longer happening, we would need to narrow down which component is causing it. Please run the following commands in Safe mode again, which will re-activate one component at a time. After each command in Safe Mode, please boot back in normal mode and re-test the issue.  
     
    1) ren C:\Windows\System32\hmpalert.orig hmpalert.dll
        ren C:\Windows\SysWOW64\hmpalert.orig hmpalert.dll

    2) ren C:\Windows\System32\drivers\hmpalert.orig hmpalert.sys 

    3) ren C:\Windows\System32\drivers\savonaccess.orig savonaccess.sys

    4) ren C:\Windows\System32\drivers\SophosED.orig SophosED.sys

    Please provide the name of the component which you had to re-enable back to make the issue to start happening again.

Children
No Data
Unfiltered HTML