The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
The following message is seen in the Windows Event log with Event ID 7031:
The Sophos Message Router Service terminated unexpectedly
The Sophos Message Router Service terminated unexpectedly. It has done this n times.
First seen in Sophos Enterprise Manager 4.7.0Sophos Control Center 4.0.1Enterprise Console 4.5.0
1. Remove any .msg files that have built up
For more information please see: The Envelopes folder in Endpoint Security and Control
2. Check Network Properties for Dell Remote Access Controller
It is possible that a Dell Remote Access Controller (RAC) is causing the Message Router Service to fail.
3. Check the registry settings on client computers
If this is a client message router and the following registry key is empty, then the router will keep restarting:
The Router Log will state, 'There are no certificates in AuthStore'.
There is no entry for AuthStore in the registry on the client computers. If the ParentRouter entry is empty, the router believes itself to the parent and will look for a local AuthoStore and will fail.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.