Hallo zusammen,
wir haben aktuell seit heute morgen das Problem, dass Updates für den Filescanner mit einer Fehlermeldung (sh. Betreff) abbrechen bzw. nicht installiert werden können.
Im SophosUpdate.log ist folgendes zu sehen:
2024-02-07T07:34:11.772Z [22160:11052] A =========================
2024-02-07T07:34:11.772Z [22160:11052] A SophosUpdate is starting.
2024-02-07T07:34:11.772Z [22160:11052] A AutoUpdate version : 6.15.1417
2024-02-07T07:34:11.772Z [22160:11052] A SophosUpdate version : 6.15.1347
2024-02-07T07:34:11.772Z [22160:11052] A =========================
2024-02-07T07:34:11.772Z [22160:11052] I Platform ID: WIN_11_X64 2009 22631.3007 (23H2)
2024-02-07T07:34:11.772Z [22160:11052] I Platform upgraded: 0
2024-02-07T07:34:11.772Z [22160:11052] I Subscription: WindowsCloudAV RECOMMENDED 11
2024-02-07T07:34:11.772Z [22160:11052] I Subscription: WindowsCloudClean RECOMMENDED 1
2024-02-07T07:34:11.772Z [22160:11052] I Subscription: WindowsCloudHitmanProAlert RECOMMENDED 1
2024-02-07T07:34:11.772Z [22160:11052] I Subscription: WindowsCloudNextGen RECOMMENDED 11
2024-02-07T07:34:11.772Z [22160:11052] I Subscriptions changed: 0
2024-02-07T07:34:11.772Z [22160:11052] I Features: APPCNTRL AV CLEAN CORE DLP DVCCNTRL EFW HBT LIVEQUERY LIVETERMINAL NTP SAV SDU WEBCNTRL XPD
2024-02-07T07:34:11.772Z [22160:11052] I Features changed: 0
2024-02-07T07:34:11.772Z [22160:11052] I SAV installation not detected
2024-02-07T07:34:11.773Z [22160:11052] A Command line: "C:\ProgramData\Sophos\AutoUpdate\Cache\sophos_autoupdate1.dir\SophosUpdate.exe" -ManualUpdate
2024-02-07T07:34:11.776Z [22160:11052] I Loaded state from C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
2024-02-07T07:34:11.778Z [22160:11052] I Delayed updating is configured.
2024-02-07T07:34:11.778Z [22160:11052] I Next product update scheduled for: 2024-02-12T09:00:00
2024-02-07T07:34:12.073Z [22160:11052] I Performing supplement only update
2024-02-07T07:34:12.074Z [22160:11052] I Manual install: ignoring bandwidth limit 256 Kbps
2024-02-07T07:34:12.147Z [22160:11052] I Refreshing Sophos Update Service configuration from https://sus.sophosupd.com (manual update)
2024-02-07T07:34:12.148Z [22160:11052] I Tenant ID: 532f678a-8635-42aa-aee6-795bcf9f3e54
2024-02-07T07:34:12.148Z [22160:11052] I Device ID: 3e66351e-6fc1-473e-a18c-e83ed0af5f7d
2024-02-07T07:34:12.148Z [22160:11052] I Manually configured proxy: 10.66.70.1:8080
2024-02-07T07:34:12.220Z [22160:11052] I Trying update service url sus.sophosupd.com/.../3e66351e-6fc1-473e-a18c-e83ed0af5f7d with proxy: 10.66.70.1:8080
2024-02-07T07:34:12.420Z [22160:11052] I 200 from sus.sophosupd.com/.../3e66351e-6fc1-473e-a18c-e83ed0af5f7d with proxy: 10.66.70.1:8080 (peer address 10.66.70.1)
2024-02-07T07:34:12.427Z [22160:11052] I Sophos Update Service response: error='' reason='' code=''
2024-02-07T07:34:12.427Z [22160:11052] I Syncing suites [sdds3.WindowsCloudAV_11.6.562.93124a541a.dat, sdds3.WindowsCloudClean_1.0.42.55133bcba5.dat, sdds3.WindowsCloudHitmanProAlert_2023.1.1.20.0.f0ee074055.dat, sdds3.WindowsCloudNextGen_2023.1.3.6.0.62dce3c4fc.dat]
2024-02-07T07:34:12.427Z [22160:11052] I Release groups [C, GranularF]
2024-02-07T07:34:12.427Z [22160:11052] I No update caches configured
2024-02-07T07:34:12.427Z [22160:11052] I Trying SDDS3 CDN url https://sdds3.sophosupd.com with proxy: 10.66.70.1:8080
2024-02-07T07:34:12.500Z [22160:11052] I 200 from sdds3.sophosupd.com/.../sdds3.WindowsCloudAV_11.6.562.93124a541a.dat with proxy: 10.66.70.1:8080 (peer address 10.66.70.1)
2024-02-07T07:34:12.500Z [22160:11052] I Syncing from: https://sdds3.sophosupd.com
2024-02-07T07:34:12.698Z [22160:11052] I Refreshing supplement sdds3.CIXFLAGS.dat
2024-02-07T07:34:12.729Z [22160:11052] I GET sdds3.sophosupd.com/.../sdds3.CIXFLAGS.dat: 304 (not modified since 2024-02-02 15:58:04Z)
2024-02-07T07:34:12.743Z [22160:11052] I Refreshing supplement sdds3.hmpa_data.dat
2024-02-07T07:34:12.767Z [22160:11052] I GET sdds3.sophosupd.com/.../sdds3.hmpa_data.dat: 304 (not modified since 2024-02-05 17:05:48Z)
2024-02-07T07:34:12.780Z [22160:11052] I Refreshing supplement sdds3.CEPNGFLAGS.dat
2024-02-07T07:34:12.804Z [22160:11052] I GET sdds3.sophosupd.com/.../sdds3.CEPNGFLAGS.dat: 304 (not modified since 2024-02-05 11:10:26Z)
2024-02-07T07:34:12.818Z [22160:11052] I Refreshing supplement sdds3.NTP_OVERRIDES.dat
2024-02-07T07:34:12.842Z [22160:11052] I GET sdds3.sophosupd.com/.../sdds3.NTP_OVERRIDES.dat: 304 (not modified since 2024-01-19 14:25:47Z)
2024-02-07T07:34:12.855Z [22160:11052] I Refreshing supplement sdds3.EPIPS_data.dat
2024-02-07T07:34:12.880Z [22160:11052] I GET sdds3.sophosupd.com/.../sdds3.EPIPS_data.dat: 304 (not modified since 2024-02-06 10:15:53Z)
2024-02-07T07:34:12.893Z [22160:11052] I Refreshing supplement sdds3.ScheduledQueryPack.dat
2024-02-07T07:34:12.917Z [22160:11052] I GET sdds3.sophosupd.com/.../sdds3.ScheduledQueryPack.dat: 304 (not modified since 2024-02-01 09:19:33Z)
2024-02-07T07:34:12.932Z [22160:11052] I Refreshing supplement sdds3.D3147E4B-BECB-4CE5-A2B4-DD098CD8AEFE.dat
2024-02-07T07:34:12.956Z [22160:11052] I GET sdds3.sophosupd.com/.../sdds3.D3147E4B-BECB-4CE5-A2B4-DD098CD8AEFE.dat: 304 (not modified since 2024-01-24 19:38:52Z)
2024-02-07T07:34:12.971Z [22160:11052] I Refreshing supplement sdds3.DOC_MODEL2_64.dat
2024-02-07T07:34:13.000Z [22160:11052] I GET sdds3.sophosupd.com/.../sdds3.DOC_MODEL2_64.dat: 304 (not modified since 2024-01-15 15:17:10Z)
2024-02-07T07:34:13.014Z [22160:11052] I Refreshing supplement sdds3.ML_MODEL2_64.dat
2024-02-07T07:34:13.038Z [22160:11052] I GET sdds3.sophosupd.com/.../sdds3.ML_MODEL2_64.dat: 304 (not modified since 2024-02-06 19:05:48Z)
2024-02-07T07:34:13.054Z [22160:11052] I Refreshing supplement sdds3.LocalRepData.dat
2024-02-07T07:34:13.078Z [22160:11052] I GET sdds3.sophosupd.com/.../sdds3.LocalRepData.dat: 304 (not modified since 2024-02-07 06:55:53Z)
2024-02-07T07:34:13.094Z [22160:11052] I Refreshing supplement sdds3.REPAIRKIT.dat
2024-02-07T07:34:13.118Z [22160:11052] I GET sdds3.sophosupd.com/.../sdds3.REPAIRKIT.dat: 304 (not modified since 2024-02-02 15:57:24Z)
2024-02-07T07:34:13.133Z [22160:11052] I Refreshing supplement sdds3.TELEMSUP.dat
2024-02-07T07:34:13.156Z [22160:11052] I GET sdds3.sophosupd.com/.../sdds3.TELEMSUP.dat: 304 (not modified since 2023-09-07 16:00:41Z)
2024-02-07T07:34:13.171Z [22160:11052] I Refreshing supplement sdds3.behave.dat
2024-02-07T07:34:13.199Z [22160:11052] I GET sdds3.sophosupd.com/.../sdds3.behave.dat: 304 (not modified since 2024-02-05 23:25:50Z)
2024-02-07T07:34:13.213Z [22160:11052] I Refreshing supplement sdds3.USERAPPFEED.dat
2024-02-07T07:34:13.236Z [22160:11052] I GET sdds3.sophosupd.com/.../sdds3.USERAPPFEED.dat: 304 (not modified since 2023-11-14 14:00:59Z)
2024-02-07T07:34:13.249Z [22160:11052] I Refreshing supplement sdds3.DataSetA.dat
2024-02-07T07:34:13.274Z [22160:11052] I GET sdds3.sophosupd.com/.../sdds3.DataSetA.dat: 304 (not modified since 2024-02-07 06:37:44Z)
2024-02-07T07:34:14.196Z [22160:11052] I Sync statistics: received 3825 bytes, sent 4818 bytes
2024-02-07T07:34:15.125Z [22160:11052] I WindowsCloudNextGen: downloaded suite: sdds3.WindowsCloudNextGen_2023.1.3.6.0.62dce3c4fc.dat, version: 2023.1.3.6.0, display version: 2023.1.3.6
2024-02-07T07:34:15.125Z [22160:11052] I WindowsCloudClean: downloaded suite: sdds3.WindowsCloudClean_1.0.42.55133bcba5.dat, version: 1.0.42, display version: empty
2024-02-07T07:34:15.125Z [22160:11052] I WindowsCloudHitmanProAlert: downloaded suite: sdds3.WindowsCloudHitmanProAlert_2023.1.1.20.0.f0ee074055.dat, version: 2023.1.1.20.0, display version: 2023.1.1.20
2024-02-07T07:34:15.125Z [22160:11052] I WindowsCloudAV: downloaded suite: sdds3.WindowsCloudAV_11.6.562.93124a541a.dat, version: 11.6.562, display version: 10.8.11.4
2024-02-07T07:34:15.125Z [22160:11052] I Removing orphan products.
2024-02-07T07:34:15.125Z [22160:11052] I No orphan products detected.
2024-02-07T07:34:15.128Z [22160:11052] I Saving state to C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
2024-02-07T07:34:15.136Z [22160:11052] I Extracting packages.
2024-02-07T07:34:18.420Z [22160:11052] I Saving state to C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
2024-02-07T07:34:18.427Z [22160:11052] I Installing products.
2024-02-07T07:34:18.764Z [22160:11052] I Skipped installation of component 0253775E-970D-4876-959C-21B422420E5A (SSE64) 3.88.0.81
2024-02-07T07:34:18.903Z [22160:11052] I Skipped installation of component 1129226C-32AB-4B72-85E1-A9CC8DFBC859 (SED64) 3.1.3.2282
2024-02-07T07:34:19.047Z [22160:11052] I Skipped installation of component 1FE3E7DF-EFFA-408A-A1B0-89F15BA61F31 (SAUXG) 6.15.1417
2024-02-07T07:34:19.063Z [22160:11052] I Skipped installation of component 243DECCD-8080-410D-A45F-77F2182715EE (UNINSTALLER64) 1.16.676
2024-02-07T07:34:19.096Z [22160:11052] I Skipped installation of component 244E68BF-E1BB-4A6B-AC18-A492DE0134C0 (HMPA64) 3.9.1.2325
2024-02-07T07:34:19.271Z [22160:11052] I Skipped installation of component 3799FB3E-808A-4F7D-AC6A-0C74F931C386 (MCS) 4.19.561
2024-02-07T07:34:19.291Z [22160:11052] I Skipped installation of component 3CE954A1-0F41-4D9B-B2F0-58AA75334DFD (SHS) 2.12.883
2024-02-07T07:34:19.414Z [22160:11052] I Skipped installation of component 5CD1A7B6-812E-47A1-A986-3A6D5D5C19F5 (UI64) 2.9.564
2024-02-07T07:34:19.441Z [22160:11052] I Skipped installation of component 642A6FD9-A9D6-482D-BD8C-46661F241A0E (AMSI64) 1.9.2098
2024-02-07T07:34:19.493Z [22160:11052] I Skipped installation of component 70FDD40E-986A-44E5-9620-2B894A06702A (SME64) 1.8.25.1
2024-02-07T07:34:19.707Z [22160:11052] I Skipped installation of component 7F682906-6E49-481B-89C5-2DCA36720F4F (ESH64) 3.4.530.0
2024-02-07T07:34:19.732Z [22160:11052] I Skipped installation of component BA3387BB-AE88-4403-A36D-F8C0E0B6AEB2 (LIVETERMINAL64) 1.7.174.0
2024-02-07T07:34:19.749Z [22160:11052] I Skipped installation of component CD297D6B-58A5-474F-8A0D-0A15803B8B50 (EFW64) 2.3.93
2024-02-07T07:34:19.801Z [22160:11052] I Skipped installation of component LiveQuery64 (LiveQuery64) 4.0.0.442
2024-02-07T07:34:19.949Z [22160:11052] I Skipped installation of component NTP64 (NTP64) 1.17.3508
2024-02-07T07:34:19.975Z [22160:11052] I Skipped installation of component SDU64 (SDU64) 6.15.1417
2024-02-07T07:34:19.975Z [22160:11052] I Installing component 591706A7-9603-4255-A65F-EA49BB11E8AC (SFS64) 1.11.3.879
2024-02-07T07:34:20.055Z [22160:11052] I setupDll='C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\sfs64\setup64.dll'; setupExe='C:\ProgramData\Sophos\AutoUpdate\Cache\sophos_autoupdate1.dir\su-setup64.exe'.
2024-02-07T07:34:20.055Z [22160:11052] I Enabling same AM-PPL protection level as parent for child process
2024-02-07T07:34:20.112Z [11312:18580] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\sfs64\Sophos\Sophos File Scanner\integrity.dat'
2024-02-07T07:34:20.159Z [11312:18580] I Successfully established interface IProductSetup2.
2024-02-07T07:34:20.257Z [11312:18580] I Reboot state: 0
2024-02-07T07:34:20.257Z [11312:18580] W Failed to install product 591706A7-9603-4255-A65F-EA49BB11E8AC.
2024-02-07T07:34:20.262Z [22160:11052] E su-setup: exit 1
2024-02-07T07:34:20.262Z [22160:11052] E [SAU] Failed to install product 591706A7-9603-4255-A65F-EA49BB11E8AC (SFS64) 1.11.3.879
2024-02-07T07:34:20.264Z [22160:11052] I Saving state to C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
2024-02-07T07:34:20.274Z [22160:11052] I Sending telemetry every 86400s
2024-02-07T07:34:20.274Z [22160:11052] I Telemetry last ran at 2024-02-06 07:32:31Z; offset time 2024-02-06 08:08:42Z (offset 2171s)
2024-02-07T07:34:20.274Z [22160:11052] I Telemetry schedule has not elapsed.
2024-02-07T07:34:20.275Z [22160:11052] E SophosUpdate failed: install failure
2024-02-07T07:34:20.277Z [22160:11052] I Saving state to C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
2024-02-07T07:34:20.285Z [22160:11052] I Launching RepairKit publishing: C:\ProgramData\Sophos\AutoUpdate\Cache\sophos_autoupdate1.dir\su-repair.exe
2024-02-07T07:34:20.285Z [22160:11052] I Disabling policy extension point for child process
2024-02-07T07:34:20.333Z [ 5236:17276] A =========================
2024-02-07T07:34:20.333Z [ 5236:17276] A su-repair is starting.
2024-02-07T07:34:20.333Z [ 5236:17276] A su-repair version : 6.15.1417
2024-02-07T07:34:20.334Z [ 5236:17276] A =========================
2024-02-07T07:34:20.337Z [ 5236:17276] I Loaded state from C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
2024-02-07T07:34:20.337Z [ 5236:17276] I Loading repair kit: C:\ProgramData\Sophos\AutoUpdate\Config\repairkit
2024-02-07T07:34:20.369Z [ 5236:17276] I Loaded repair kit: 2023.1.0.370
2024-02-07T07:34:20.369Z [ 5236:17276] I Repair kit tag: 2023-1
2024-02-07T07:34:20.369Z [ 5236:17276] A Executing repair kit publishing
2024-02-07T07:34:20.395Z [ 5236:17276] A su-repair complete.
2024-02-07T07:38:04.176Z [ 6980:20764] A =========================
2024-02-07T07:38:04.176Z [ 6980:20764] A su-repair is starting.
2024-02-07T07:38:04.177Z [ 6980:20764] A su-repair version : 6.15.1417
2024-02-07T07:38:04.177Z [ 6980:20764] A =========================
2024-02-07T07:38:04.181Z [ 6980:20764] I Loaded state from C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
2024-02-07T07:38:04.181Z [ 6980:20764] I Loading repair kit: C:\ProgramData\Sophos\AutoUpdate\Config\repairkit
2024-02-07T07:38:04.211Z [ 6980:20764] I Loaded repair kit: 2023.1.0.370
2024-02-07T07:38:04.211Z [ 6980:20764] I Repair kit tag: 2023-1
2024-02-07T07:38:04.212Z [ 6980:20764] A Executing repair kit
2024-02-07T07:38:04.212Z [ 6980:20764] I Evaluating component Sophos AutoUpdate (1FE3E7DF-EFFA-408A-A1B0-89F15BA61F31)
2024-02-07T07:38:04.213Z [ 6980:20764] I Checking adapter ALC is registered...
2024-02-07T07:38:04.213Z [ 6980:20764] I >> YES: Adapter ALC is registered. It has correct DllPath.
2024-02-07T07:38:04.213Z [ 6980:20764] I Checking Sophos AutoUpdate is registered for tamper protection (SAU)...
2024-02-07T07:38:04.214Z [ 6980:20764] I >> YES: Sophos AutoUpdate is registered for tamper protection (SAU).
2024-02-07T07:38:04.214Z [ 6980:20764] I Checking installed PE files have verified integrity ...
2024-02-07T07:38:04.319Z [ 6980:20764] I >> YES: All checked installed PE files have verified integrity.
2024-02-07T07:38:04.319Z [ 6980:20764] I Evaluating component MCS (3799FB3E-808A-4F7D-AC6A-0C74F931C386)
2024-02-07T07:38:04.320Z [ 6980:20764] I Checking MCS is registered for tamper protection (MCS)...
2024-02-07T07:38:04.320Z [ 6980:20764] I >> YES: MCS is registered for tamper protection (MCS).
2024-02-07T07:38:04.320Z [ 6980:20764] I Checking service "Sophos MCS Agent" is running...
2024-02-07T07:38:04.320Z [ 6980:20764] I >> YES: Service "Sophos MCS Agent" is running.
2024-02-07T07:38:04.321Z [ 6980:20764] I Checking service "Sophos MCS Client" is running...
2024-02-07T07:38:04.321Z [ 6980:20764] I >> YES: Service "Sophos MCS Client" is running.
2024-02-07T07:38:04.321Z [ 6980:20764] I Checking installed PE files have verified integrity ...
2024-02-07T07:38:04.366Z [ 6980:20764] I >> YES: All checked installed PE files have verified integrity.
2024-02-07T07:38:04.366Z [ 6980:20764] I Evaluating component SFS (591706A7-9603-4255-A65F-EA49BB11E8AC)
2024-02-07T07:38:04.366Z [ 6980:20764] W Component SFS (591706A7-9603-4255-A65F-EA49BB11E8AC) had failed to install. A reinstall will be attempted during the next SophosUpdate
2024-02-07T07:38:04.367Z [ 6980:20764] I Evaluating component SSE (0253775E-970D-4876-959C-21B422420E5A)
2024-02-07T07:38:04.367Z [ 6980:20764] I Checking SSE is registered for tamper protection (SSE)...
2024-02-07T07:38:04.368Z [ 6980:20764] I >> YES: SSE is registered for tamper protection (SSE).
2024-02-07T07:38:04.368Z [ 6980:20764] I Checking installed PE files have verified integrity ...
2024-02-07T07:38:04.502Z [ 6980:20764] I >> YES: All checked installed PE files have verified integrity.
2024-02-07T07:38:04.502Z [ 6980:20764] I Evaluating component SED (1129226C-32AB-4B72-85E1-A9CC8DFBC859)
2024-02-07T07:38:04.503Z [ 6980:20764] I Checking adapter CORC is registered...
2024-02-07T07:38:04.503Z [ 6980:20764] I >> YES: Adapter CORC is registered. It has correct DllPath.
2024-02-07T07:38:04.503Z [ 6980:20764] I Checking adapter CORE is registered...
2024-02-07T07:38:04.504Z [ 6980:20764] I >> YES: Adapter CORE is registered. It has correct DllPath.
2024-02-07T07:38:04.504Z [ 6980:20764] I Checking SED is registered for tamper protection (SED)...
2024-02-07T07:38:04.504Z [ 6980:20764] I >> YES: SED is registered for tamper protection (SED).
2024-02-07T07:38:04.504Z [ 6980:20764] I Checking SED is registered for tamper protection (SEL)...
2024-02-07T07:38:04.505Z [ 6980:20764] I >> YES: SED is registered for tamper protection (SEL).
2024-02-07T07:38:04.505Z [ 6980:20764] I Checking service "Sophos Endpoint Defense Service" is running...
2024-02-07T07:38:04.505Z [ 6980:20764] I >> YES: Service "Sophos Endpoint Defense Service" is running.
2024-02-07T07:38:04.505Z [ 6980:20764] I Checking service "Sophos System Protection Service" is running...
2024-02-07T07:38:04.506Z [ 6980:20764] I >> YES: Service "Sophos System Protection Service" is running.
2024-02-07T07:38:04.506Z [ 6980:20764] I Checking installed PE files have verified integrity ...
2024-02-07T07:38:04.891Z [ 6980:20764] I >> YES: All checked installed PE files have verified integrity.
2024-02-07T07:38:04.892Z [ 6980:20764] I Evaluating component NTP (NTP64)
2024-02-07T07:38:04.893Z [ 6980:20764] I Checking NTP is registered for tamper protection (NTP)...
2024-02-07T07:38:04.893Z [ 6980:20764] I >> YES: NTP is registered for tamper protection (NTP).
2024-02-07T07:38:04.893Z [ 6980:20764] I Checking NTP is registered for tamper protection (NTP_SCM)...
2024-02-07T07:38:04.893Z [ 6980:20764] I >> YES: NTP is registered for tamper protection (NTP_SCM).
2024-02-07T07:38:04.893Z [ 6980:20764] I Checking service "SntpService" is running...
2024-02-07T07:38:04.894Z [ 6980:20764] I >> YES: Service "SntpService" is running.
2024-02-07T07:38:04.894Z [ 6980:20764] I Checking installed PE files have verified integrity ...
2024-02-07T07:38:05.065Z [ 6980:20764] I >> YES: All checked installed PE files have verified integrity.
2024-02-07T07:38:05.066Z [ 6980:20764] I Evaluating component SHS (3CE954A1-0F41-4D9B-B2F0-58AA75334DFD)
2024-02-07T07:38:05.066Z [ 6980:20764] I Checking adapter SHS is registered...
2024-02-07T07:38:05.067Z [ 6980:20764] I >> YES: Adapter SHS is registered. It has correct DllPath.
2024-02-07T07:38:05.067Z [ 6980:20764] I Checking SHS is registered for tamper protection (SHS)...
2024-02-07T07:38:05.067Z [ 6980:20764] I >> YES: SHS is registered for tamper protection (SHS).
2024-02-07T07:38:05.067Z [ 6980:20764] I Checking service "Sophos Health Service" is running...
2024-02-07T07:38:05.067Z [ 6980:20764] I >> YES: Service "Sophos Health Service" is running.
2024-02-07T07:38:05.067Z [ 6980:20764] I Checking installed PE files have verified integrity ...
2024-02-07T07:38:05.100Z [ 6980:20764] I >> YES: All checked installed PE files have verified integrity.
2024-02-07T07:38:05.100Z [ 6980:20764] I Evaluating component HMPA (244E68BF-E1BB-4A6B-AC18-A492DE0134C0)
2024-02-07T07:38:05.100Z [ 6980:20764] I Checking HMPA Policy...
2024-02-07T07:38:05.101Z [ 6980:20764] I Checking HMPA is registered for tamper protection (HMPA)...
2024-02-07T07:38:05.101Z [ 6980:20764] I >> YES: HMPA is registered for tamper protection (HMPA).
2024-02-07T07:38:05.102Z [ 6980:20764] I Checking service "hmpalertsvc" is running...
2024-02-07T07:38:05.102Z [ 6980:20764] I >> YES: Service "hmpalertsvc" is running.
2024-02-07T07:38:05.102Z [ 6980:20764] I Checking installed PE files have verified integrity ...
2024-02-07T07:38:05.157Z [ 6980:20764] I >> YES: All checked installed PE files have verified integrity.
2024-02-07T07:38:05.157Z [ 6980:20764] I Evaluating component LIVEQUERY (LiveQuery64)
2024-02-07T07:38:05.158Z [ 6980:20764] I Checking LIVEQUERY is registered for tamper protection (LiveQuery)...
2024-02-07T07:38:05.158Z [ 6980:20764] I >> YES: LIVEQUERY is registered for tamper protection (LiveQuery).
2024-02-07T07:38:05.158Z [ 6980:20764] I Checking service "Sophos Live Query" is running...
2024-02-07T07:38:05.158Z [ 6980:20764] I >> YES: Service "Sophos Live Query" is running.
2024-02-07T07:38:05.159Z [ 6980:20764] I Checking installed PE files have verified integrity ...
2024-02-07T07:38:05.443Z [ 6980:20764] I >> YES: All checked installed PE files have verified integrity.
2024-02-07T07:38:05.443Z [ 6980:20764] I Evaluating component LIVETERMINAL (BA3387BB-AE88-4403-A36D-F8C0E0B6AEB2)
2024-02-07T07:38:05.444Z [ 6980:20764] I Checking adapter LiveTerminal is registered...
2024-02-07T07:38:05.444Z [ 6980:20764] I >> YES: Adapter LiveTerminal is registered. It has correct DllPath.
2024-02-07T07:38:05.444Z [ 6980:20764] I Checking LIVETERMINAL is registered for tamper protection (LiveTerminal)...
2024-02-07T07:38:05.444Z [ 6980:20764] I >> YES: LIVETERMINAL is registered for tamper protection (LiveTerminal).
2024-02-07T07:38:05.444Z [ 6980:20764] I Checking installed PE files have verified integrity ...
2024-02-07T07:38:05.495Z [ 6980:20764] I >> YES: All checked installed PE files have verified integrity.
2024-02-07T07:38:05.495Z [ 6980:20764] I Evaluating component Sophos AMSI Protection (642A6FD9-A9D6-482D-BD8C-46661F241A0E)
2024-02-07T07:38:05.496Z [ 6980:20764] I Checking Sophos AMSI Protection is registered for tamper protection (AMSI)...
2024-02-07T07:38:05.497Z [ 6980:20764] I >> YES: Sophos AMSI Protection is registered for tamper protection (AMSI).
2024-02-07T07:38:05.497Z [ 6980:20764] I Checking installed PE files have verified integrity ...
2024-02-07T07:38:05.537Z [ 6980:20764] I >> YES: All checked installed PE files have verified integrity.
2024-02-07T07:38:05.537Z [ 6980:20764] I Evaluating component ESH (7F682906-6E49-481B-89C5-2DCA36720F4F)
2024-02-07T07:38:05.538Z [ 6980:20764] I Checking ESH is registered for tamper protection (ESH)...
2024-02-07T07:38:05.538Z [ 6980:20764] I >> YES: ESH is registered for tamper protection (ESH).
2024-02-07T07:38:05.538Z [ 6980:20764] I Checking installed PE files have verified integrity ...
2024-02-07T07:38:05.606Z [ 6980:20764] I >> YES: All checked installed PE files have verified integrity.
2024-02-07T07:38:05.606Z [ 6980:20764] I SDU was last uploaded at 2024-02-07T07:23:34Z (1707290614 secs).
2024-02-07T07:38:05.606Z [ 6980:20764] I SDU is throttled.
2024-02-07T07:38:05.606Z [ 6980:20764] A su-repair complete.
2024-02-07T07:38:05.654Z [ 5072:21052] A =========================
2024-02-07T07:38:05.655Z [ 5072:21052] A SophosUpdate is starting.
2024-02-07T07:38:05.655Z [ 5072:21052] A AutoUpdate version : 6.15.1417
2024-02-07T07:38:05.655Z [ 5072:21052] A SophosUpdate version : 6.15.1347
2024-02-07T07:38:05.655Z [ 5072:21052] A =========================
2024-02-07T07:38:05.655Z [ 5072:21052] I Platform ID: WIN_11_X64 2009 22631.3007 (23H2)
2024-02-07T07:38:05.655Z [ 5072:21052] I Platform upgraded: 0
2024-02-07T07:38:05.655Z [ 5072:21052] I Subscription: WindowsCloudAV RECOMMENDED 11
2024-02-07T07:38:05.655Z [ 5072:21052] I Subscription: WindowsCloudClean RECOMMENDED 1
2024-02-07T07:38:05.655Z [ 5072:21052] I Subscription: WindowsCloudHitmanProAlert RECOMMENDED 1
2024-02-07T07:38:05.655Z [ 5072:21052] I Subscription: WindowsCloudNextGen RECOMMENDED 11
2024-02-07T07:38:05.655Z [ 5072:21052] I Subscriptions changed: 0
2024-02-07T07:38:05.655Z [ 5072:21052] I Features: APPCNTRL AV CLEAN CORE DLP DVCCNTRL EFW HBT LIVEQUERY LIVETERMINAL NTP SAV SDU WEBCNTRL XPD
2024-02-07T07:38:05.655Z [ 5072:21052] I Features changed: 0
2024-02-07T07:38:05.655Z [ 5072:21052] I SAV installation not detected
2024-02-07T07:38:05.656Z [ 5072:21052] A Command line: "C:\ProgramData\Sophos\AutoUpdate\Cache\sophos_autoupdate1.dir\SophosUpdate.exe" -ManualUpdate
2024-02-07T07:38:05.659Z [ 5072:21052] I Loaded state from C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
2024-02-07T07:38:05.660Z [ 5072:21052] I Delayed updating is configured.
2024-02-07T07:38:05.660Z [ 5072:21052] I Next product update scheduled for: 2024-02-12T09:00:00
2024-02-07T07:38:05.912Z [ 5072:21052] I Performing supplement only update
2024-02-07T07:38:05.913Z [ 5072:21052] I Manual install: ignoring bandwidth limit 256 Kbps
2024-02-07T07:38:05.989Z [ 5072:21052] I Refreshing Sophos Update Service configuration from https://sus.sophosupd.com (manual update)
2024-02-07T07:38:05.989Z [ 5072:21052] I Tenant ID: 532f678a-8635-42aa-aee6-795bcf9f3e54
2024-02-07T07:38:05.989Z [ 5072:21052] I Device ID: 3e66351e-6fc1-473e-a18c-e83ed0af5f7d
2024-02-07T07:38:05.989Z [ 5072:21052] I Manually configured proxy: 10.66.70.1:8080
2024-02-07T07:38:06.062Z [ 5072:21052] I Trying update service url sus.sophosupd.com/.../3e66351e-6fc1-473e-a18c-e83ed0af5f7d with proxy: 10.66.70.1:8080
2024-02-07T07:38:06.292Z [ 5072:21052] I 200 from sus.sophosupd.com/.../3e66351e-6fc1-473e-a18c-e83ed0af5f7d with proxy: 10.66.70.1:8080 (peer address 10.66.70.1)
2024-02-07T07:38:06.305Z [ 5072:21052] I Sophos Update Service response: error='' reason='' code=''
2024-02-07T07:38:06.305Z [ 5072:21052] I Syncing suites [sdds3.WindowsCloudAV_11.6.562.93124a541a.dat, sdds3.WindowsCloudClean_1.0.42.55133bcba5.dat, sdds3.WindowsCloudHitmanProAlert_2023.1.1.20.0.f0ee074055.dat, sdds3.WindowsCloudNextGen_2023.1.3.6.0.62dce3c4fc.dat]
2024-02-07T07:38:06.305Z [ 5072:21052] I Release groups [C, GranularF]
2024-02-07T07:38:06.306Z [ 5072:21052] I No update caches configured
2024-02-07T07:38:06.306Z [ 5072:21052] I Trying SDDS3 CDN url https://sdds3.sophosupd.com with proxy: 10.66.70.1:8080
2024-02-07T07:38:06.358Z [ 5072:21052] I 200 from sdds3.sophosupd.com/.../sdds3.WindowsCloudAV_11.6.562.93124a541a.dat with proxy: 10.66.70.1:8080 (peer address 10.66.70.1)
2024-02-07T07:38:06.358Z [ 5072:21052] I Syncing from: https://sdds3.sophosupd.com
2024-02-07T07:38:06.567Z [ 5072:21052] I Refreshing supplement sdds3.CIXFLAGS.dat
2024-02-07T07:38:06.603Z [ 5072:21052] I GET sdds3.sophosupd.com/.../sdds3.CIXFLAGS.dat: 304 (not modified since 2024-02-02 15:58:04Z)
2024-02-07T07:38:06.616Z [ 5072:21052] I Refreshing supplement sdds3.hmpa_data.dat
2024-02-07T07:38:06.639Z [ 5072:21052] I GET sdds3.sophosupd.com/.../sdds3.hmpa_data.dat: 304 (not modified since 2024-02-05 17:05:48Z)
2024-02-07T07:38:06.652Z [ 5072:21052] I Refreshing supplement sdds3.CEPNGFLAGS.dat
2024-02-07T07:38:06.676Z [ 5072:21052] I GET sdds3.sophosupd.com/.../sdds3.CEPNGFLAGS.dat: 304 (not modified since 2024-02-05 11:10:26Z)
2024-02-07T07:38:06.689Z [ 5072:21052] I Refreshing supplement sdds3.NTP_OVERRIDES.dat
2024-02-07T07:38:06.714Z [ 5072:21052] I GET sdds3.sophosupd.com/.../sdds3.NTP_OVERRIDES.dat: 304 (not modified since 2024-01-19 14:25:47Z)
2024-02-07T07:38:06.727Z [ 5072:21052] I Refreshing supplement sdds3.EPIPS_data.dat
2024-02-07T07:38:06.753Z [ 5072:21052] I GET sdds3.sophosupd.com/.../sdds3.EPIPS_data.dat: 304 (not modified since 2024-02-06 10:15:53Z)
2024-02-07T07:38:06.766Z [ 5072:21052] I Refreshing supplement sdds3.ScheduledQueryPack.dat
2024-02-07T07:38:06.788Z [ 5072:21052] I GET sdds3.sophosupd.com/.../sdds3.ScheduledQueryPack.dat: 304 (not modified since 2024-02-01 09:19:33Z)
2024-02-07T07:38:06.801Z [ 5072:21052] I Refreshing supplement sdds3.D3147E4B-BECB-4CE5-A2B4-DD098CD8AEFE.dat
2024-02-07T07:38:06.833Z [ 5072:21052] I GET sdds3.sophosupd.com/.../sdds3.D3147E4B-BECB-4CE5-A2B4-DD098CD8AEFE.dat: 304 (not modified since 2024-01-24 19:38:52Z)
2024-02-07T07:38:06.847Z [ 5072:21052] I Refreshing supplement sdds3.DOC_MODEL2_64.dat
2024-02-07T07:38:06.870Z [ 5072:21052] I GET sdds3.sophosupd.com/.../sdds3.DOC_MODEL2_64.dat: 304 (not modified since 2024-01-15 15:17:10Z)
2024-02-07T07:38:06.883Z [ 5072:21052] I Refreshing supplement sdds3.ML_MODEL2_64.dat
2024-02-07T07:38:06.910Z [ 5072:21052] I GET sdds3.sophosupd.com/.../sdds3.ML_MODEL2_64.dat: 304 (not modified since 2024-02-06 19:05:48Z)
2024-02-07T07:38:06.929Z [ 5072:21052] I Refreshing supplement sdds3.LocalRepData.dat
2024-02-07T07:38:06.958Z [ 5072:21052] I GET sdds3.sophosupd.com/.../sdds3.LocalRepData.dat: 304 (not modified since 2024-02-07 06:55:53Z)
2024-02-07T07:38:06.973Z [ 5072:21052] I Refreshing supplement sdds3.REPAIRKIT.dat
2024-02-07T07:38:06.997Z [ 5072:21052] I GET sdds3.sophosupd.com/.../sdds3.REPAIRKIT.dat: 304 (not modified since 2024-02-02 15:57:24Z)
2024-02-07T07:38:07.013Z [ 5072:21052] I Refreshing supplement sdds3.TELEMSUP.dat
2024-02-07T07:38:07.042Z [ 5072:21052] I GET sdds3.sophosupd.com/.../sdds3.TELEMSUP.dat: 304 (not modified since 2023-09-07 16:00:41Z)
2024-02-07T07:38:07.062Z [ 5072:21052] I Refreshing supplement sdds3.behave.dat
2024-02-07T07:38:07.085Z [ 5072:21052] I GET sdds3.sophosupd.com/.../sdds3.behave.dat: 304 (not modified since 2024-02-05 23:25:50Z)
2024-02-07T07:38:07.098Z [ 5072:21052] I Refreshing supplement sdds3.USERAPPFEED.dat
2024-02-07T07:38:07.122Z [ 5072:21052] I GET sdds3.sophosupd.com/.../sdds3.USERAPPFEED.dat: 304 (not modified since 2023-11-14 14:00:59Z)
2024-02-07T07:38:07.135Z [ 5072:21052] I Refreshing supplement sdds3.DataSetA.dat
2024-02-07T07:38:07.178Z [ 5072:21052] I GET sdds3.sophosupd.com/.../sdds3.DataSetA.dat: 304 (not modified since 2024-02-07 06:37:44Z)
2024-02-07T07:38:08.033Z [ 5072:21052] I Sync statistics: received 3825 bytes, sent 4818 bytes
2024-02-07T07:38:08.918Z [ 5072:21052] I WindowsCloudNextGen: downloaded suite: sdds3.WindowsCloudNextGen_2023.1.3.6.0.62dce3c4fc.dat, version: 2023.1.3.6.0, display version: 2023.1.3.6
2024-02-07T07:38:08.918Z [ 5072:21052] I WindowsCloudClean: downloaded suite: sdds3.WindowsCloudClean_1.0.42.55133bcba5.dat, version: 1.0.42, display version: empty
2024-02-07T07:38:08.918Z [ 5072:21052] I WindowsCloudHitmanProAlert: downloaded suite: sdds3.WindowsCloudHitmanProAlert_2023.1.1.20.0.f0ee074055.dat, version: 2023.1.1.20.0, display version: 2023.1.1.20
2024-02-07T07:38:08.918Z [ 5072:21052] I WindowsCloudAV: downloaded suite: sdds3.WindowsCloudAV_11.6.562.93124a541a.dat, version: 11.6.562, display version: 10.8.11.4
2024-02-07T07:38:08.918Z [ 5072:21052] I Removing orphan products.
2024-02-07T07:38:08.918Z [ 5072:21052] I No orphan products detected.
2024-02-07T07:38:08.921Z [ 5072:21052] I Saving state to C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
2024-02-07T07:38:08.927Z [ 5072:21052] I Extracting packages.
2024-02-07T07:38:12.146Z [ 5072:21052] I Saving state to C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
2024-02-07T07:38:12.154Z [ 5072:21052] I Installing products.
2024-02-07T07:38:12.468Z [ 5072:21052] I Skipped installation of component 0253775E-970D-4876-959C-21B422420E5A (SSE64) 3.88.0.81
2024-02-07T07:38:12.601Z [ 5072:21052] I Skipped installation of component 1129226C-32AB-4B72-85E1-A9CC8DFBC859 (SED64) 3.1.3.2282
2024-02-07T07:38:12.714Z [ 5072:21052] I Skipped installation of component 1FE3E7DF-EFFA-408A-A1B0-89F15BA61F31 (SAUXG) 6.15.1417
2024-02-07T07:38:12.726Z [ 5072:21052] I Skipped installation of component 243DECCD-8080-410D-A45F-77F2182715EE (UNINSTALLER64) 1.16.676
2024-02-07T07:38:12.755Z [ 5072:21052] I Skipped installation of component 244E68BF-E1BB-4A6B-AC18-A492DE0134C0 (HMPA64) 3.9.1.2325
2024-02-07T07:38:12.914Z [ 5072:21052] I Skipped installation of component 3799FB3E-808A-4F7D-AC6A-0C74F931C386 (MCS) 4.19.561
2024-02-07T07:38:12.932Z [ 5072:21052] I Skipped installation of component 3CE954A1-0F41-4D9B-B2F0-58AA75334DFD (SHS) 2.12.883
2024-02-07T07:38:13.039Z [ 5072:21052] I Skipped installation of component 5CD1A7B6-812E-47A1-A986-3A6D5D5C19F5 (UI64) 2.9.564
2024-02-07T07:38:13.062Z [ 5072:21052] I Skipped installation of component 642A6FD9-A9D6-482D-BD8C-46661F241A0E (AMSI64) 1.9.2098
2024-02-07T07:38:13.105Z [ 5072:21052] I Skipped installation of component 70FDD40E-986A-44E5-9620-2B894A06702A (SME64) 1.8.25.1
2024-02-07T07:38:13.273Z [ 5072:21052] I Skipped installation of component 7F682906-6E49-481B-89C5-2DCA36720F4F (ESH64) 3.4.530.0
2024-02-07T07:38:13.291Z [ 5072:21052] I Skipped installation of component BA3387BB-AE88-4403-A36D-F8C0E0B6AEB2 (LIVETERMINAL64) 1.7.174.0
2024-02-07T07:38:13.306Z [ 5072:21052] I Skipped installation of component CD297D6B-58A5-474F-8A0D-0A15803B8B50 (EFW64) 2.3.93
2024-02-07T07:38:13.350Z [ 5072:21052] I Skipped installation of component LiveQuery64 (LiveQuery64) 4.0.0.442
2024-02-07T07:38:13.476Z [ 5072:21052] I Skipped installation of component NTP64 (NTP64) 1.17.3508
2024-02-07T07:38:13.499Z [ 5072:21052] I Skipped installation of component SDU64 (SDU64) 6.15.1417
2024-02-07T07:38:13.499Z [ 5072:21052] I Installing component 591706A7-9603-4255-A65F-EA49BB11E8AC (SFS64) 1.11.3.879
2024-02-07T07:38:13.563Z [ 5072:21052] I setupDll='C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\sfs64\setup64.dll'; setupExe='C:\ProgramData\Sophos\AutoUpdate\Cache\sophos_autoupdate1.dir\su-setup64.exe'.
2024-02-07T07:38:13.564Z [ 5072:21052] I Enabling same AM-PPL protection level as parent for child process
2024-02-07T07:38:13.623Z [ 6600:23256] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\sfs64\Sophos\Sophos File Scanner\integrity.dat'
2024-02-07T07:38:13.669Z [ 6600:23256] I Successfully established interface IProductSetup2.
2024-02-07T07:38:13.765Z [ 6600:23256] I Reboot state: 0
2024-02-07T07:38:13.765Z [ 6600:23256] W Failed to install product 591706A7-9603-4255-A65F-EA49BB11E8AC.
2024-02-07T07:38:13.770Z [ 5072:21052] E su-setup: exit 1
2024-02-07T07:38:13.770Z [ 5072:21052] E [SAU] Failed to install product 591706A7-9603-4255-A65F-EA49BB11E8AC (SFS64) 1.11.3.879
2024-02-07T07:38:13.773Z [ 5072:21052] I Saving state to C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
2024-02-07T07:38:13.795Z [ 5072:21052] I Sending telemetry every 86400s
2024-02-07T07:38:13.795Z [ 5072:21052] I Telemetry last ran at 2024-02-06 07:32:31Z; offset time 2024-02-06 08:33:00Z (offset 3629s)
2024-02-07T07:38:13.795Z [ 5072:21052] I Telemetry schedule has not elapsed.
2024-02-07T07:38:13.796Z [ 5072:21052] E SophosUpdate failed: install failure
2024-02-07T07:38:13.798Z [ 5072:21052] I Saving state to C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
2024-02-07T07:38:13.806Z [ 5072:21052] I Launching RepairKit publishing: C:\ProgramData\Sophos\AutoUpdate\Cache\sophos_autoupdate1.dir\su-repair.exe
2024-02-07T07:38:13.806Z [ 5072:21052] I Disabling policy extension point for child process
2024-02-07T07:38:13.855Z [22188:12096] A =========================
2024-02-07T07:38:13.856Z [22188:12096] A su-repair is starting.
2024-02-07T07:38:13.856Z [22188:12096] A su-repair version : 6.15.1417
2024-02-07T07:38:13.856Z [22188:12096] A =========================
2024-02-07T07:38:13.860Z [22188:12096] I Loaded state from C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
2024-02-07T07:38:13.860Z [22188:12096] I Loading repair kit: C:\ProgramData\Sophos\AutoUpdate\Config\repairkit
2024-02-07T07:38:13.892Z [22188:12096] I Loaded repair kit: 2023.1.0.370
2024-02-07T07:38:13.892Z [22188:12096] I Repair kit tag: 2023-1
2024-02-07T07:38:13.892Z [22188:12096] A Executing repair kit publishing
2024-02-07T07:38:13.915Z [22188:12096] A su-repair complete.
Kann jemand erkennen, wo das Problem liegt?
Vielen Dank im Voraus,
Frank
Added tags
[edited by: Gladys at 10:04 AM (GMT -8) on 5 Mar 2024]
