Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 4 subscribers
  • Views 1763 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Windows 7 freezes when try to install a custom Sophos AV package

Kai-Christian Zellemann

Hello everybody,

I have a problem creating a custom Sophos AV package (Version 10.8.2.363). When I embed the configuration for Sophos AV (ExportConfig.exe -type SAV...) into the custom package, Windows 7 freezes when I try to install the package. If I do not embed the configuration, then everything works without problems?

I used the following script to create the package:

@ECHO OFF

RMDIR /S /Q "%TEMP%\savinst"
MKDIR "%TEMP%\savinst"

robocopy.exe "C:\ProgramData\Sophos\Update Manager\Update Manager\CIDs\S000\SAVSCFXP" "%TEMP%\savinst\SAVSCFXP" /MIR
robocopy.exe "%TEMP%\savinst\SAVSCFXP" "%TEMP%\savinst\SAVSCFXPXML" /MIR

"C:\Program Files (x86)\Sophos\Enterprise Console\ExportConfig.exe" -type AU -policy "HomeUse" -output "%TEMP%\savinst\SAVSCFXPXML\sau\sauconf.xml"
REM Without the next line, Sophos AV will be installed without problems.
"C:\Program Files (x86)\Sophos\Enterprise Console\ExportConfig.exe" -type SAV -policy "HomeUse" -output "%TEMP%\savinst\SAVSCFXPXML\savxp\savconf.xml"
"C:\Program Files (x86)\Sophos\Update Manager\ConfigCID.exe" "%TEMP%\savinst\SAVSCFXPXML"

(ECHO "%%~dp0SAVSCFXP\setup.exe" -ni -mng no -crt R -updp "%%~dp0SAVSCFXPXML")> "%TEMP%\savinst\Setup.cmd"

RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\ntp"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\ntp64"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\RMS"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\SAVXP"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\SCF"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\sed"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\sed64"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\spa"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\spa64"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXP\ssp"

DEL "%TEMP%\savinst\SAVSCFXPXML\setup*.*"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\crt"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\ntp"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\ntp64"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\rms"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\scf"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\sed"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\sed64"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\spa"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\spa64"
RMDIR /S /Q "%TEMP%\savinst\SAVSCFXPXML\ssp"

explorer.exe "%TEMP%\savinst"

PAUSE



This thread was automatically locked due to age.
Parents
  • 0

    Hello Kai-Christian Zellemann,

    did it work before or is this your first attempt with such a package? Just Windows 7 (which edition) and not, say, Windows 10 that freezes?

    Windows 7 freezes
    some time after running setup.cmd? And freezes means totally unresponsive and you have to press the power-button to switch off the machine? If so, what happens after a reboot?
    AFAIK it should work as follows: setup.exe runs CRT, if this returns ok the AutoUpdate is installed with the XML folder set as update location. Subsequently AU checks for updates and installs SAVXP, the XML is applied during install. If the OS freezes at this point AU should nevertheless be installed and make another attempt to install SAVXP.
    Are there logs from the SAVXP install?

    Christian 

  • 0 in reply to QC

    Could it be related to the April hang with the Microsoft update?  If you exclude C:\program data\sophos\ as a test in the exported SAV config does that help? Could the LSP DLL be the cause which is loaded from ProgramData? Can you exclude that? It just seems a bit of a coincidence that there has been a hang recently. You might have to crash the computer with the keyboard having configured the computer to create a full dump and send it in to Sophos.

    Hope it helps,

    Jak

  • 0 in reply to jak

    Hello,

    it seems to be related to the Micrsoft update. The installation works if I add "C:\ProgramData\Sophos\" to the exception list.

Reply Children
  • 0 in reply to Kai-Christian Zellemann

    Interesting, what about just excluding:

    • swi_ifslsp.dll
    • swi_ifslsp_64.dll

    from the location they exist under ProgramData?  I don't have a Win 7 computer to hand to check but it's something like:

    C:\programdata\sophos\web intelligence\swi_ifslsp.dll
    C:\programdata\sophos\web intelligence\swi_ifslsp_64.dll

    Regards,
    Jak

Unfiltered HTML