"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
When running the Sophos Endpoint Security and Control Extractor on an endpoint computer to be managed by a Sophos UTM you see:
Could not extract the installation files. Please contact Technical Support. Error code: 16
In the Sophos Extract Log_[DATE][TIME].txt log (located in the user's temp folder) you see:
[DATE]T[TIME]: Begining extraction. [DATE]T[TIME]: Reading configuration data. [DATE]T[TIME]: Found installation code in file name. [DATE]T[TIME]: Cannot clear output directory. [DATE]T[TIME]: Cleaning up. [DATE]T[TIME]: Cannot clear output directory after setup. [DATE]T[TIME]: Finishing with code 0x00000010.
First seen in UTM Managed Endpoint (Windows 2000+)
The sophos_bootstrap folder (in the user's temp folder) is inaccessible to the extractor. Most likely the folder has been locked open by another process (i.e., a previous attempt to extract the installer failed to complete successfully).
Rebooting the computer is the simplest way to unlock the folder and regain control.
If rebooting is not an option then investigation into what process is locking the folder and terminating it is required.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.