The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
IssueThe Sophos Agent and Message Router services are not starting correctly and they stop and start on systems with Microsoft Forefront TMG Client and/or Microsoft Firewall Client of the ISA server 2006 installed.
If you open the Sophos Agent logs you can see:
13.09.2010 14:47:50 124C E ACE_Select_Reactor_T::open failed inside ACE_Select_Reactor_T::CTOR: An operation was attempted on something that is not a socket. 13.09.2010 14:47:50 124C E (4564|4684) ORB Core unable to initialize reactor: An operation was attempted on something that is not a socket. 13.09.2010 14:47:50 124C E Agent::Start: Caught CORBA system exception, ID 'IDL:omg.org/CORBA/INITIALIZE:1.0'TAO exception, minor code = 0 (ORB Core initialization failed; unspecified errno), completed = NO
Known to apply to the following Sophos product(s) and version(s)Sophos Anti-Virus for Windows 2000+ 9.5.0
Please note: this issue does not appear in a new installation of Endpoint Security and Control, version 9.7. Sophos Web Protection will not be available when Microsoft Forefront TMG Client and/or Microsoft Firewall Client are installed. If you have performed an upgrade to 9.7 from 9.5 (Which had the Sophos Web Protection feature enabled) then you will need to disable the feature as detailed below.There are two options to rectify this problem, you can either:
Editing the Sophos anti-virus/HIPS policy
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.