This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Windows 7 freezes when try to install a custom Sophos AV package

Hello everybody,

I have a problem creating a custom Sophos AV package (Version 10.8.2.363). When I embed the configuration for Sophos AV (ExportConfig.exe -type SAV...) into the custom package, Windows 7 freezes when I try to install the package. If I do not embed the configuration, then everything works without problems?

I used the following script to create the package:

@ECHO OFF

RMDIR /S /Q "%TEMP%\savinst"
MKDIR "%TEMP%\savinst"

robocopy.exe "C:\ProgramData\Sophos\Update Manager\Update Manager\CIDs\S000\SAVSCFXP" "%TEMP%\savinst\SAVSCFXP" /MIR
robocopy.exe "%TEMP%\savinst\SAVSCFXP" "%TEMP%\savinst\SAVSCFXPXML" /MIR

"C:\Program Files (x86)\Sophos\Enterprise Console\ExportConfig.exe" -type AU -policy "HomeUse" -output "%TEMP%\savinst\SAVSCFXPXML\sau\sauconf.xml"
REM Without the next line, Sophos AV will be installed without problems.
"C:\Program Files (x86)\Sophos\Enterprise Console\ExportConfig.exe" -type SAV -policy "HomeUse" -output "%TEMP%\savinst\SAVSCFXPXML\savxp\savconf.xml"
"C:\Program Files (x86)\Sophos\Update Manager\ConfigCID.exe" "%TEMP%\savinst\SAVSCFXPXML"

(ECHO "%%~dp0SAVSCFXP\setup.exe" -ni -mng no -crt R -updp "%%~dp0SAVSCFXPXML")> "%TEMP%\savinst\Setup.cmd"

RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\ntp"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\ntp64"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\RMS"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\SAVXP"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\SCF"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\sed"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\sed64"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\spa"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\spa64"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\ssp"

DEL "%TEMP%\savinst\SAVSCFXPXML\setup*.*"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\crt"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\ntp"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\ntp64"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\rms"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\scf"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\sed"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\sed64"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\spa"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\spa64"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\ssp"

explorer.exe "%TEMP%\savinst"

PAUSE



This thread was automatically locked due to age.
Parents
  • Hello Kai-Christian Zellemann,

    did it work before or is this your first attempt with such a package? Just Windows 7 (which edition) and not, say, Windows 10 that freezes?

    Windows 7 freezes
    some time after running setup.cmd? And freezes means totally unresponsive and you have to press the power-button to switch off the machine? If so, what happens after a reboot?
    AFAIK it should work as follows: setup.exe runs CRT, if this returns ok the AutoUpdate is installed with the XML folder set as update location. Subsequently AU checks for updates and installs SAVXP, the XML is applied during install. If the OS freezes at this point AU should nevertheless be installed and make another attempt to install SAVXP.
    Are there logs from the SAVXP install?

    Christian 

Reply
  • Hello Kai-Christian Zellemann,

    did it work before or is this your first attempt with such a package? Just Windows 7 (which edition) and not, say, Windows 10 that freezes?

    Windows 7 freezes
    some time after running setup.cmd? And freezes means totally unresponsive and you have to press the power-button to switch off the machine? If so, what happens after a reboot?
    AFAIK it should work as follows: setup.exe runs CRT, if this returns ok the AutoUpdate is installed with the XML folder set as update location. Subsequently AU checks for updates and installs SAVXP, the XML is applied during install. If the OS freezes at this point AU should nevertheless be installed and make another attempt to install SAVXP.
    Are there logs from the SAVXP install?

    Christian 

Children
  • Could it be related to the April hang with the Microsoft update?  If you exclude C:\program data\sophos\ as a test in the exported SAV config does that help? Could the LSP DLL be the cause which is loaded from ProgramData? Can you exclude that? It just seems a bit of a coincidence that there has been a hang recently. You might have to crash the computer with the keyboard having configured the computer to create a full dump and send it in to Sophos.

    Hope it helps,

    Jak

  • Hello,

    it seems to be related to the Micrsoft update. The installation works if I add "C:\ProgramData\Sophos\" to the exception list.

  • Interesting, what about just excluding:

    • swi_ifslsp.dll
    • swi_ifslsp_64.dll

    from the location they exist under ProgramData?  I don't have a Win 7 computer to hand to check but it's something like:

    C:\programdata\sophos\web intelligence\swi_ifslsp.dll
    C:\programdata\sophos\web intelligence\swi_ifslsp_64.dll

    Regards,
    Jak