This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

August 23rd Sophos Update Causes: 32-bit Outlook 2013, Internet Explorer, FireFox to not open in Windows 10

The subject sums it up.  Since yesterday's update, we noticing a consistent trend in our environment.  Computers running Windows 10 are having issues opening Outlook 2013, IE and FF to not open after a Sophos update yesterday morning around 10:30 AM (EST.)

In the event viewer, checked why the applications are failing to open and it shows APPHANG, faulting module: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll

 

The work-around has been to cut/paste both sophos_detoured.dll and sophos_detoured_x64.dll out of that folder. As soon as we do that the applications launch.  This only started happening August 23rd morning.

 

Anyone have experience with this so far?  I would have expected to see this on the forums already.

 

Thanks,



This thread was automatically locked due to age.
Parents
  • Sophos Endpoint Security and Control status report for machine CORNB156
    
    [General]  
    Endpoint security and control =  10.8 
    Support reference =   
    Current user rights =  Sophos Administrator 
     
    [Anti-virus and HIPS] 
    -[ Software]
    Sophos Anti-Virus 10.8.2.311 
    On-access status Enabled 
    Detection engine 3.73.0 
    Detection data 5.54 
    Virus data date 8/21/2018 
    Items detected 24410608 
    Detection identities 176 
    HIPS rules version 10.3.244.1 
    HIPS configuration version 1.0.65.2 
    Last updated 8/27/2018 9:19:03 AM 
     
    +[ Components]
    AppFeedManager.dll 10.8.2.311 , size 531008 bytes  
    ApplicationManagement.dll 10.8.2.311 , size 460808 bytes  
    AuthorisedLists.dll 10.8.2.311 , size 246800 bytes  
    BackgroundScanning.dll 10.8.2.311 , size 102880 bytes  
    BHOManagement.dll 10.8.2.311 , size 338688 bytes  
    bpaif.dll 2.5.0.99 , size 265480 bytes  
    Categories.dll 10.8.2.311 , size 21784 bytes  
    ComponentManager.dll 10.8.2.311 , size 124168 bytes  
    Configuration.dll 10.8.2.311 , size 377624 bytes  
    DesktopMessaging.dll 10.8.2.311 , size 530432 bytes  
    DetectionFeedback.dll 10.8.2.311 , size 1019304 bytes  
    DriveProcessor.dll 10.8.2.311 , size 174040 bytes  
    EEConsumer.dll 10.8.2.311 , size 139256 bytes  
    FilterProcessors.dll 10.8.2.311 , size 272248 bytes  
    FSDecomposer.dll 10.8.2.311 , size 118416 bytes  
    ICAdapter.dll 10.8.2.311 , size 222376 bytes  
    ICManagement.dll 10.8.2.311 , size 587536 bytes  
    ICProcessors.dll 10.8.2.311 , size 374040 bytes  
    Instrumentation.dll 10.8.2.311 , size 84656 bytes  
    LegacyConsumers.dll 10.8.2.311 , size 128328 bytes  
    Localisation.dll 10.8.2.311 , size 155944 bytes  
    Logging.dll 10.8.2.311 , size 532032 bytes  
    osdp.dll 1.44.1.2420 , size 239000 bytes  
    Persistance.dll 10.8.2.311 , size 125704 bytes  
    rkdisk.dll 1.5.33.1 , size 121888 bytes  
    Safestore32.dll 1.3.0.1 , size 1699752 bytes  
    SafeStore64.dll 1.3.0.1 , size 2278520 bytes  
    SavAdapter.dll 10.8.2.311 , size 1595904 bytes  
    SAVControl.dll 10.8.2.311 , size 240088 bytes  
    SAVI.dll 9.0.11.2420 , size 3571608 bytes  
    savmscm.dll 2.00.1503 , size 261376 bytes  
    SavNeutralRes.dll 10.8.2.311 , size 3232856 bytes  
    SavPlugin.dll 10.8.2.311 , size 148080 bytes  
    SavRes.dll 10.8.2.311 , size 776664 bytes  
    SavResChs.dll 10.8.2.311 , size 143352 bytes  
    SavResCht.dll 10.8.2.311 , size 142840 bytes  
    SavResDeu.dll 10.8.2.311 , size 203136 bytes  
    SavResEng.dll 10.8.2.311 , size 194824 bytes  
    SavResEsp.dll 10.8.2.311 , size 203136 bytes  
    SavResFra.dll 10.8.2.311 , size 214008 bytes  
    SavResIt.dll 10.8.2.311 , size 209336 bytes  
    SavResJap.dll 10.8.2.311 , size 157928 bytes  
    SavSecurity.dll 10.8.2.311 , size 164136 bytes  
    SavShellExt.dll 10.8.2.311 , size 427616 bytes  
    SavShellExtX64.dll 10.8.2.311 , size 546544 bytes  
    SAVUserContext.dll 10.8.2.311 , size 125824 bytes  
    ScanEditExports.dll 10.8.2.311 , size 56136 bytes  
    ScanEditFacade.dll 10.8.2.311 , size 223400 bytes  
    ScanManagement.dll 10.8.2.311 , size 333568 bytes  
    SEDManagement.dll 10.8.2.311 , size 391752 bytes  
    SIPSManagement.dll 10.8.2.311 , size 758440 bytes  
    SophosOfficeAV.dll 10.8.2.311 , size 177176 bytes  
    SophosOfficeAVx64.dll 10.8.2.311 , size 214576 bytes  
    SophtainerAdapter.dll 10.8.2.311 , size 89896 bytes  
    sophtlib.dll 1.00.0.2420 , size 770456 bytes  
    SWIManagement.dll 10.8.2.311 , size 237408 bytes  
    SystemInformation.dll 10.8.2.311 , size 132992 bytes  
    TamperProtectionControl.dll 10.8.2.311 , size 153264 bytes  
    TamperProtectionControlX64.dll 10.8.2.311 , size 178256 bytes  
    TamperProtectionManagement.dll 10.8.2.311 , size 242072 bytes  
    TamperProtectionPlugin.dll 10.8.2.311 , size 285168 bytes  
    ThreatDetection.dll 10.8.2.311 , size 603192 bytes  
    ThreatManagement.dll 10.8.2.311 , size 782928 bytes  
    Translators.dll 10.8.2.311 , size 236440 bytes  
    VEController.dll 10.8.2.311 , size 279992 bytes  
    veex.dll 3.73.0.2420 , size 4372688 bytes  
    VirusDetection.dll 10.8.2.311 , size 1027616 bytes  
    wow64ext.dll 1.0.0.9 , size 64392 bytes  
    BackgroundScanClient.exe 10.8.2.311 , size 82672 bytes  
    ForceUpdateAlongSideSGN.exe 10.8.2.311 , size 300256 bytes  
    Native.exe 10.8.2.311 , size 317000 bytes  
    sav32cli.exe 2.99.9.00 , size 528896 bytes  
    SAVAdminService.exe 10.8.2.311 , size 251984 bytes  
    SAVCleanupService.exe 10.8.2.311 , size 169888 bytes  
    SavMain.exe 10.8.2.311 , size 1748200 bytes  
    SavProgress.exe 10.8.2.311 , size 498784 bytes  
    SavProxy.exe 10.8.2.311 , size 90984 bytes  
    SavService.exe 10.8.2.311 , size 225000 bytes  
    SAVTelem.exe 10.8.2.311 , size 70712 bytes  
    ssr32.exe 1.3.0.1 , size 151096 bytes  
    ssr64.exe 1.3.0.1 , size 173928 bytes  
    WSCClient.exe 10.8.2.311 , size 282160 bytes  
    difxapi.dll 2.1 , size 414152 bytes  
    swi_filter.dll 3.6.0.3312 , size 2919560 bytes  
    swi_filter_64.dll 3.6.0.3312 , size 4144112 bytes  
    swi_ifslsp.dll 3.6.0.3312 , size 141424 bytes  
    swi_ifslsp_64.dll 3.6.0.3312 , size 201656 bytes  
    swi_di.exe 3.6.0.3312 , size 298840 bytes  
    swi_fc.exe 3.6.0.3312 , size 3164376 bytes  
    swi_filter.exe 3.6.0.3312 , size 475384 bytes  
    swi_lsp32_util.exe 3.6.0.3312 , size 251472 bytes  
    swi_lspdiag.exe 3.6.0.3312 , size 213552 bytes  
    swi_lspdiag_64.exe 3.6.0.3312 , size 262976 bytes  
    swi_service.exe 3.6.0.3312 , size 3621480 bytes  
    swi_update_64.exe 3.6.0.3312 , size 2121216 bytes  
    swi_callout.sys 3.6.0.1 , size 47760 bytes  
    savonaccess.sys 3.25.2.0 , size 204328 bytes  
    SophosBootDriver.sys 1.1.1.0 , size 45840 bytes  
    SophosBootTasks.exe 10.8.2.311 , size 44304 bytes  
     
    +[ Detection identity files]
    keylo-ul.ide  
    fare-fih.ide  
    emote-vz.ide  
    msili-sy.ide  
    hupig-wm.ide  
    blada-hg.ide  
    pdfu-fmg.ide  
    sidewi-a.ide  
    mdro-igi.ide  
    autosp-j.ide  
    spy-ard.ide  
    msili-tb.ide  
    fare-fiv.ide  
    fare-fiw.ide  
    emote-wr.ide  
    phis-cxx.ide  
    emote-wt.ide  
    msili-tc.ide  
    emote-wv.ide  
    netwi-mj.ide  
    pdfu-fmu.ide  
    remco-cp.ide  
    drop-ui.ide  
    lethi-dj.ide  
    fare-fja.ide  
    msil-lod.ide  
    fare-fje.ide  
    phis-cyb.ide  
    mdro-igl.ide  
    emote-wy.ide  
    phis-cye.ide  
    rtfdro-q.ide  
    htmld-ie.ide  
    bank-gws.ide  
    age-azkg.ide  
    delf-gui.ide  
    netwi-mk.ide  
    zbot-mex.ide  
    msil-lor.ide  
    vbinj-st.ide  
    trick-ed.ide  
    remco-cn.ide  
    phis-czh.ide  
    miner-ov.ide  
    inje-dks.ide  
    steal-ar.ide  
    trick-eg.ide  
    age-azlf.ide  
    pdfu-foj.ide  
    phis-czo.ide  
    age-azli.ide  
    phis-czp.ide  
    msil-loy.ide  
    docd-ozp.ide  
    phis-czq.ide  
    zbot-mfb.ide  
    formb-da.ide  
    inje-dku.ide  
    msil-log.ide  
    phis-czx.ide  
    age-azls.ide  
    blada-hk.ide  
    steal-az.ide  
    fare-fkn.ide  
    remco-ct.ide  
    emote-ya.ide  
    formb-dd.ide  
    emote-xb.ide  
    pdfu-fox.ide  
    docd-pan.ide  
    emoge-fo.ide  
    msil-lpi.ide  
    rtf-bb.ide  
    fare-flj.ide  
    zbot-mey.ide  
    inje-dle.ide  
    rans-ezt.ide  
    docd-pdf.ide  
    msil-lpo.ide  
    phis-dbj.ide  
    chisb-vt.ide  
    phis-dbk.ide  
    blada-hr.ide  
    emoge-fq.ide  
    delf-guy.ide  
    docd-pdk.ide  
    shiot-de.ide  
    zbot-mfe.ide  
    pdfu-fpu.ide  
    keylo-ut.ide  
    hawke-rx.ide  
    phis-dbv.ide  
    fuerbo-g.ide  
    rans-ezx.ide  
    zbot-mfx.ide  
    inje-dli.ide  
    fare-fjs.ide  
    emote-yt.ide  
    fare-fmd.ide  
    rans-ezy.ide  
    fare-fmg.ide  
    zbot-mga.ide  
    formb-dq.ide  
    mdro-ihc.ide  
    age-azki.ide  
    rans-ezq.ide  
    rans-faa.ide  
    fare-fld.ide  
    docph-y.ide  
    remco-cv.ide  
    remco-da.ide  
    inje-dlo.ide  
    remco-db.ide  
    formb-dr.ide  
    steal-bl.ide  
    trick-ee.ide  
    delf-gvj.ide  
    age-aznx.ide  
    lokib-ak.ide  
    nymai-hy.ide  
    remco-dd.ide  
    age-azoc.ide  
    inje-dlz.ide  
    bckdo-ab.ide  
    inje-dmd.ide  
    wont-aem.ide  
    darkc-ht.ide  
    formbo-t.ide  
    fare-fnd.ide  
    msil-lrj.ide  
    inje-dmj.ide  
    zbot-mgk.ide  
    docd-phy.ide  
    rtfdr-dj.ide  
    emote-zn.ide  
    nanoc-zl.ide  
    msil-lro.ide  
    age-azox.ide  
    emote-zp.ide  
    nanoc-zm.ide  
    remco-dh.ide  
    formb-ed.ide  
    msil-lrp.ide  
    rans-fad.ide  
    fare-fnj.ide  
    docph-ad.ide  
    bank-gwy.ide  
    nymai-ia.ide  
    keylo-ur.ide  
    trick-et.ide  
    vbinj-sz.ide  
    lokib-ao.ide  
    age-azpo.ide  
    emot-aai.ide  
    fare-fnx.ide  
    pdfdro-m.ide  
    zbot-mgt.ide  
    msil-lrw.ide  
    formb-eh.ide  
    miner-ox.ide  
    emot-aan.ide  
    nanoc-zt.ide  
    encdo-af.ide  
    docd-pix.ide  
    gandcr-w.ide  
    gen-e.ide  
    zbot-mhd.ide  
    emot-aas.ide  
    msili-uk.ide  
    msili-ul.ide  
    pdfu-ftf.ide  
    emoge-fn.ide  
    blada-id.ide  
    zbot-mhg.ide  
    zbot-mhi.ide  
    zbot-mhj.ide  
     
     
    [Web Control] 
    +[ Software]
    Web control 1.5.2549 
    Web control status Disabled 
     
    +[ Components]
    swc_service.exe 1.5.2549 , size 360040 bytes  
    SWCAdapter.dll 1.5.2549 , size 328384 bytes  
    WCMResChs.dll 1.5.2549 , size 18648 bytes  
    WCMResCht.dll 1.5.2549 , size 18648 bytes  
    WCMResDeu.dll 1.5.2549 , size 19160 bytes  
    WCMResEng.dll 1.5.2549 , size 18136 bytes  
    WCMResEsp.dll 1.5.2549 , size 19160 bytes  
    WCMResFra.dll 1.5.2549 , size 19160 bytes  
    WCMResIt.dll 1.5.2549 , size 19160 bytes  
    WCMResJap.dll 1.5.2549 , size 19160 bytes  
    WCPResChs.dll 1.5.2549 , size 87792 bytes  
    WCPResCht.dll 1.5.2549 , size 87792 bytes  
    WCPResDeu.dll 1.5.2549 , size 88304 bytes  
    WCPResEng.dll 1.5.2549 , size 87280 bytes  
    WCPResEsp.dll 1.5.2549 , size 88304 bytes  
    WCPResFra.dll 1.5.2549 , size 88304 bytes  
    WCPResIt.dll 1.5.2549 , size 88304 bytes  
    WCPResJap.dll 1.5.2549 , size 87792 bytes  
    WebControlMessaging.dll 1.5.2549 , size 196872 bytes  
    WebControlPlugin.dll 1.5.2549 , size 312216 bytes  
     
     
    [Updating] 
    +[ Software]
    Sophos AutoUpdate 5.14.36 
    Last checked for updates 8/27/2018 9:35:41 
    Update status Success 
     
    +[ Components]
    ALMon.exe 5.14.36.36 , size 1517632 bytes  
    ALsvc.exe 5.14.36.36 , size 775696 bytes  
    ALUpdate.exe 5.14.36.36 , size 2473968 bytes  
    SophosUpdate.exe 5.14.19 , size 2305560 bytes  
    AUAdapter.dll 5.14.36.36 , size 1165280 bytes  
    EECustomActions.dll 5.14.36.36 , size 533056 bytes  
    ispsheet.dll 5.14.36.36 , size 425568 bytes  
    SAUConfigDLL.dll 5.14.36.36 , size 722240 bytes  
    SingleGUIPlugin.dll 5.14.36.36 , size 677432 bytes  
    SUL.dll 5.14.19 , size 1461440 bytes  
    iconfig.ppi 5.14.36.36 , size 519560 bytes  
    ilog.ppi 5.14.36.36 , size 609968 bytes  
    isched.ppi 5.14.36.36 , size 482672 bytes  
    almonres.dll 5.14.36.36 , size 39448 bytes  
    iconfres.dll 5.14.36.36 , size 21272 bytes  
    ilogres.dll 5.14.36.36 , size 19160 bytes  
    ischdres.dll 5.14.36.36 , size 18136 bytes  
    sharedres.dll 5.14.36.36 , size 37400 bytes  
    almonres.dll 5.14.36.36 , size 40472 bytes  
    iconfres.dll 5.14.36.36 , size 21784 bytes  
    ilogres.dll 5.14.36.36 , size 19160 bytes  
    ischdres.dll 5.14.36.36 , size 18136 bytes  
    sharedres.dll 5.7.35.35 , size 40984 bytes  
    almonres.dll 5.14.36.36 , size 39960 bytes  
    iconfres.dll 5.14.36.36 , size 21784 bytes  
    ilogres.dll 5.14.36.36 , size 19160 bytes  
    ischdres.dll 5.14.36.36 , size 18136 bytes  
    sharedres.dll 5.7.35.35 , size 38936 bytes  
    almonres.dll 5.14.36.36 , size 41560 bytes  
    iconfres.dll 5.14.36.36 , size 21784 bytes  
    ilogres.dll 5.14.36.36 , size 19672 bytes  
    ischdres.dll 5.14.36.36 , size 18136 bytes  
    sharedres.dll 5.7.35.35 , size 40984 bytes  
    ALMonres.dll 5.14.36.36 , size 41048 bytes  
    iconfres.dll 5.14.36.36 , size 21784 bytes  
    ilogres.dll 5.14.36.36 , size 19160 bytes  
    ischdres.dll 5.14.36.36 , size 18136 bytes  
    sharedres.dll 5.7.35.35 , size 39960 bytes  
    almonres.dll 5.14.36.36 , size 36312 bytes  
    iconfres.dll 5.14.36.36 , size 20760 bytes  
    ilogres.dll 5.14.36.36 , size 18648 bytes  
    ischdres.dll 5.14.36.36 , size 18136 bytes  
    sharedres.dll 5.7.35.35 , size 30616 bytes  
    ALMonres.dll 5.14.36.36 , size 34776 bytes  
    iconfres.dll 5.14.36.36 , size 20760 bytes  
    ilogres.dll 5.14.36.36 , size 18648 bytes  
    ischdres.dll 5.14.36.36 , size 18136 bytes  
    sharedres.dll 5.7.35.35 , size 25432 bytes  
    ALMonres.dll 5.14.36.36 , size 34264 bytes  
    iconfres.dll 5.14.36.36 , size 20760 bytes  
    ilogres.dll 5.14.36.36 , size 18648 bytes  
    ischdres.dll 5.14.36.36 , size 18136 bytes  
    sharedres.dll 5.7.35.35 , size 25944 bytes  
     
     
    [System] 
    Revision =  14857 
    Description =  Intel64 Family 6 Model 58 Stepping 9 
    AddressWidth =  64 
    ThreadCount =  4 
    LoadPercentage =  2 
    VirtualizationFirmwareEnabled =  True 
    Level =  6 
    DeviceID =  CPU0 
    AssetTag =  Fill By OEM 
    CurrentVoltage =  0 
    PowerManagementSupported =  False 
    SocketDesignation =  SOCKET 0 
    StatusInfo =  3 
    Family =  205 
    Name =  Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz 
    Manufacturer =  GenuineIntel 
    NumberOfEnabledCore =  2 
    DataWidth =  64 
    Stepping =   
    InstallDate =   
    ProcessorType =  3 
    Characteristics =  4 
    Caption =  Intel64 Family 6 Model 58 Stepping 9 
    L2CacheSize =  512 
    VoltageCaps =   
    L3CacheSpeed =  0 
    CreationClassName =  Win32_Processor 
    Architecture =  9 
    PartNumber =  Fill By OEM 
    ErrorDescription =   
    Availability =  3 
    SystemName =  CORNB156 
    Role =  CPU 
    SecondLevelAddressTranslationExtensions =  True 
    NumberOfCores =  2 
    CurrentClockSpeed =  2601 
    SystemCreationClassName =  Win32_ComputerSystem 
    PowerManagementCapabilities =   
    ConfigManagerUserConfig =   
    VMMonitorModeExtensions =  True 
    ErrorCleared =   
    L3CacheSize =  3072 
    UniqueId =   
    ProcessorId =  BFEBFBFF000306A9 
    L2CacheSpeed =   
    SerialNumber =   
    ExtClock =  100 
    CpuStatus =  1 
    ConfigManagerErrorCode =   
    OtherFamilyDescription =   
    Version =   
    Status =  OK 
    NumberOfLogicalProcessors =  4 
    PNPDeviceID =   
    UpgradeMethod =  33 
    MaxClockSpeed =  2601 
    LastErrorCode =   
    Description =   
    CurrentTimeZone =  -240 
    CSCreationClassName =  Win32_ComputerSystem 
    DataExecutionPrevention_Available =  True 
    ServicePackMinorVersion =  0 
    PAEEnabled =   
    Debug =  False 
    MUILanguages =   
    BuildNumber =  17134 
    TotalVisibleMemorySize =  8291088 
    DataExecutionPrevention_SupportPolicy =  2 
    Name =  Microsoft Windows 10 Pro|C:\WINDOWS|\Device\Harddisk0\Partition1 
    CSName =  CORNB156 
    BuildType =  Multiprocessor Free 
    Manufacturer =  Microsoft Corporation 
    PlusVersionNumber =   
    OSType =  18 
    InstallDate =  20180802 142022 
    RegisteredUser =  KSRAdmin 
    ProductType =  1 
    NumberOfUsers =  6 
    Caption =  Microsoft Windows 10 Pro 
    NumberOfProcesses =  168 
    LocalDateTime =  20180827 093836 
    TotalVirtualMemorySize =  16679696 
    WindowsDirectory =  C:\WINDOWS 
    OSArchitecture =  64-bit 
    SystemDrive =  C: 
    CreationClassName =  Win32_OperatingSystem 
    OSLanguage =  1033 
    ServicePackMajorVersion =  0 
    LargeSystemCache =   
    TotalSwapSpaceSize =   
    SizeStoredInPagingFiles =  8388608 
    Primary =  True 
    SystemDirectory =  C:\WINDOWS\system32 
    NumberOfLicensedUsers =  0 
    DataExecutionPrevention_Drivers =  True 
    CSDVersion =   
    CountryCode =  1 
    OtherTypeDescription =   
    BootDevice =  \Device\HarddiskVolume1 
    MaxProcessMemorySize =  137438953344 
    SerialNumber =  00330-80000-00000-AA986 
    PortableOperatingSystem =  False 
    OperatingSystemSKU =  48 
    MaxNumberOfProcesses =  4294967295 
    LastBootUpTime =  20180827 090332 
    FreeSpaceInPagingFiles =  8384340 
    SystemDevice =  \Device\HarddiskVolume1 
    DataExecutionPrevention_32BitApplications =  True 
    Organization =  KSR International Co. 
    PlusProductID =   
    SuiteMask =  272 
    FreeVirtualMemory =  13468652 
    ForegroundApplicationBoost =  2 
    Version =  10.0.17134 
    Status =  OK 
    FreePhysicalMemory =  5521508 
    EncryptionLevel =  256 
    Locale =  0409 
    Distributed =  False 
    CodeSet =  1252 
    OSProductSuite =  256 
     
    

    Faulting application name: iexplore.exe, version: 11.0.17134.1, time stamp: 0xc9403716
    Faulting module name: sophos_detoured_x64.dll, version: 10.8.2.311, time stamp: 0x5b6c330f
    Exception code: 0xc0000005
    Fault offset: 0x0000000000004e11
    Faulting process id: 0x25cc
    Faulting application start time: 0x01d43e0a58405826
    Faulting application path: C:\Program Files\Internet Explorer\iexplore.exe
    Faulting module path: C:\PROGRA~2\Sophos\SOPHOS~1\sophos_detoured_x64.dll
    Report Id: bf0da3ae-53af-4fdf-b426-ea0bd3d8a4d2
    Faulting package full name: 
    Faulting package-relative application ID: 

    Faulting application name: OUTLOOK.EXE, version: 15.0.5049.1000, time stamp: 0x5b200738
    Faulting module name: sophos_detoured.dll, version: 10.8.2.311, time stamp: 0x5b6c25e7
    Exception code: 0xc0000005
    Fault offset: 0x0001dab8
    Faulting process id: 0x2670
    Faulting application start time: 0x01d43e09b7a77cc5
    Faulting application path: C:\Program Files (x86)\Microsoft Office\Office15\OUTLOOK.EXE
    Faulting module path: C:\PROGRA~2\Sophos\SOPHOS~1\sophos_detoured.dll
    Report Id: 22eb3663-5c5d-4ed4-a35a-c6cb6c0f92e7
    Faulting package full name: 
    Faulting package-relative application ID: 

  • Have you started an official support case with Sophos (this is a community forum -- if you want direct support from Sophos opening a ticket is recommended)?

     

    I've got a laptop here with W10 and Outlook 2013, Firefox, and Central Endpoint + Intercept X, fully updated, and am not seeing this issue.

    Windows 10 Enterprise, Build 1803, w/ all updates.

     

    OH..

    and Endpoint versions are:

    Core Agent:  2.0.5

    Endpoint Advanced: 10.8.1.2

    Intercept X:  2.0.6

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • Hi,

     

    Yes I have a case opened with Sophos on this; though it's been since Thursday and no update on a fix so I figured I'd reach out to the forums.

     

    We are running on-premise Sophos Enterprise Console version 5.5.1 using the recommended subscription level.   I'd assume Sophos push the same code out whether running on-prem or central endpoint, but this does not seem to be the case.

     

  • Hmm... we are reseller so I do have a lab / test instance of on-prem here.  I'll spool it up and see if I see anything like that.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • Hmm... we are reseller so I do have a lab / test instance of on-prem here.  I'll spool it up and see if I see anything like that.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
  • Also, what is the version info as reflected on the client itself (not the SEC console)?

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • Never mind the last post, I see it in the log file you posted.   A bit newer than the current Central version if the same engine is being used.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.