"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
The Sophos Update Manager (SUM) Logviewer.exe tool shows the error:
[DATE] [TIME] Error Deployment to a share failed because of an unexpected error. Details: Failed to read file for MD5
The SUM trace logs shows the error:
[DATE] [TIME] : WriteListForUnix: C:\Documents and Settings\All Users\Application Data\Sophos\Update Manager\Update Manager\CIDs\S055\sys\sweep\nlminst\cidsync.lst [DATE] [TIME] : ERROR: Could not open stream for MD5 of file 'C:\Documents and Settings\All Users\Application Data\Sophos\Update Manager\Update Manager\CIDs\S055\sys\sweep\nlminst\customer_ID.txt'! [DATE] [TIME] : Cmd-ALL << [E4037][Failed to read file for MD5] Deployment to a share failed because of an unexpected error. Details: Failed to read file for MD5 [DATE] [TIME] : Cmd-ALL << [E400D][ActionDeployCids-Sub0-0][DispatcherSupplements-[DATE]T16-55-21-1] Action 'ActionDeployCids-Sub0-0' with caller 'DispatcherSupplements-[DATE]T16-55-21-1' failed!
First seen in Sophos Update Manager 1.5
Incorrect permissions on a file(s) in the SYS folder or a file in that folder is locked open.
If the problem continues go through the following steps below to recreate the 'sys' folder.
Note: In the steps below the folder browsed to is 'CIDs\S055' because the error in the trace logs (see beginning of the article) references that subscription folder. Check your SUM trace logs for the exact folder you should browse to.
After a successful update you can delete the sys.old folder.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.