After Adding Intercept X to our Endpoints we're getting multiple issue with Applications failing to start with a pop-up Quoting error code 0xc0000005
Eventviewer entry's in the Application Log for the crashes gives me this:
Event ID:1000
Faulting application name: SophosDiag.exe, version: 1.2.76.0, time stamp: 0x589aea74
Faulting module name: ntdll.dll, version: 10.0.14393.479, time stamp: 0x5825887f
Exception code: 0xc0000005
Fault offset: 0x0000000000003c45
Faulting process id: 0x2a88
Faulting application start time: 0x01d2bd9dcaed1fce
Faulting application path: C:\Program Files\Sophos\Endpoint Self Help\SophosDiag.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: 77acfa35-2cc3-41ba-81b5-b0a365711987
Faulting package full name:
Faulting package-relative application ID:
We'd attempted fixing with uninstalls and re-installs of the affected applications, Repairs of Windows (trying to fix NTdll.dll), Re-installed .Net components, disabled real time scanning, Runtime protections ect but nothing worked applications still crached.
Uninstalled full Sophos endpoint from a test machine and applications started working. Re-installed the endpoint without Intercept X components and applications still work. Add Intercept to it again and the applications will fail again.
Seen this with: SQLExpress, Powershell ISE, Oloneo Photoengine and even SophosDiag.exe
Endpoints affected as mostly Windows 10 but also seen on Windows 7
Anyone else seeing similar issues?
This thread was automatically locked due to age.
