"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
00000067 is a generic error code returned when a component or sub-component has failed to install. If this article does not deal with the issues you are seeing, refer to article 113312 for more general troubleshooting steps on this error.
Endpoints that have upgraded to the 10.2.4 package version (Sophos Auto Update version 2.9.0) fail to update following the addition of XML configuration and/or custom files to the CID using the ConfigCID.exe tool.
The Sophos Console will show the following error:
Failed to install SAVXP: Package authentication failed with corresponding code 00000067
Note: The error will be reported against the component that failed to update.
The Auto Update log will show the following error:
Manifest failure for product [product name]
CheckCustomManifest: invalid package:invalid custom manifest: [BADFILE]: 3: 'C:\Program Files\Sophos\AutoUpdate\cache\savxp\cmanifest.dat'
Note: The package affected will vary depending on where the fixed configuration and/or custom files have been added, in this example it's the Sophos Anti-Virus folder 'savxp'.
First seen in Sophos Anti-Virus for Windows 2000+ 10.2
Sophos Auto Update version 2.9.0 (and later) now performs a check that all files added to an update location are signed and included in the manifest. XML configuration and custom files must be added to the CID with version 184.108.40.206 of ConfigCID.exe or later, supplied with Sophos Update Manager 1.4.2 and later.
Use the latest version of ConfigCID.exe (version 220.127.116.11 and above) to add custom files to a CID.
Check you are using ConfigCID.exe version 18.104.22.168 and later:
Tous les commentaires envoyés sont lus par un membre de notre équipe. En revanche, nous ne répondons pas aux questions techniques spécifiques. Si vous avez besoin d'assistance technique, veuillez poser votre question sur notre communauté. Pour tous produits sous licence, veuillez ouvrir un incident support.