Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 12 replies
  • Subscribers 6 subscribers
  • Views 4821 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Endpoint - Service Sophos Autoupdate stopped

Julian Cast

Hello,

 

we often have the problem with the service Sophos Autoupdate stopped. Sophos Enpoint is in error state until we re start the service manually (or restart the computer).

 

 

Can you help me to find a definitive solution? Thanks !



This thread was automatically locked due to age.
Parents
  • 0

    Hello Julian Cast,

    we often have the problem with the service Sophos Autoupdate stopped
    this is definitely not normal, that the service is stopped should very rarely be the case if at all.
    You say you can start it manually - there should be an event or error in the Windows Event logs (Application, System) that tells when and perhaps why it has stopped. Please also check the latest ALSvc2020... and ALUpdate2020... logs in %ProgramData%\Sophos\AutoUpdate\Logs\.

    Christian

  • 0 in reply to QC

    Hello QC,

     

    thanks, i will check and share it with  you !

     

    Julian 

Reply Children
  • 0 in reply to Julian Cast

    Hello,

    for information, this computer is a fresh installation from this afternoon... 

    here sophosUpdate.log

    020-01-27T14:13:54.954Z [ 1748:11376] [v6.1.356.0] INFO [I19463] Syncing product 97B6A561-5F87-4A2E-A4FE-177F48D8899F RECOMMENDED path=savxp/crt
    2020-01-27T14:13:54.983Z [ 1748:11376] [v6.1.356.0] INFO [I19463] Syncing product SAVCONTROLLINE CEP path=savxp
    2020-01-27T14:13:54.989Z [ 1748:11376] [v6.1.356.0] INFO [I19463] Syncing product SXLSUP LATEST path=savxp
    2020-01-27T14:13:54.994Z [ 1748:11376] [v6.1.356.0] INFO [I19463] Syncing product HIPS LATEST_CLOUD_ENDPOINT path=savxp
    2020-01-27T14:13:55.000Z [ 1748:11376] [v6.1.356.0] INFO [I19463] Syncing product hmpa_data LATEST path=hmpa
    2020-01-27T14:13:55.005Z [ 1748:11376] [v6.1.356.0] INFO [I19463] Syncing product hmpa_data LATEST path=hmpa64
    2020-01-27T14:13:55.008Z [ 1748:11376] [v6.1.356.0] INFO [I19463] Syncing product IDE572 LATEST path=savxp
    2020-01-27T14:13:55.092Z [ 1748:11376] [v6.1.356.0] INFO [I19463] Syncing product IDE573 LATEST path=savxp
    2020-01-27T14:13:55.369Z [ 1748:11376] [v6.1.356.0] INFO Removing orphan products.
    2020-01-27T14:13:55.370Z [ 1748:11376] [v6.1.356.0] INFO No orphan products detected.
    2020-01-27T14:13:55.375Z [ 1748:11376] [v6.1.356.0] INFO Overwriting state file C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
    2020-01-27T14:13:55.385Z [ 1748:11376] [v6.1.356.0] INFO Verified state file can be loaded.
    2020-01-27T14:13:55.385Z [ 1748:11376] [v6.1.356.0] INFO Beginning decode
    2020-01-27T14:13:58.002Z [ 1748:11376] [v6.1.356.0] INFO WindowsCloudNextGen: skipping decode: nothing to do
    2020-01-27T14:14:02.562Z [ 1748:11376] [v6.1.356.0] INFO WindowsCloudNextGen: downloaded suite version: 11.6.360, display version: 2.5.5
    2020-01-27T14:14:02.566Z [ 1748:11376] [v6.1.356.0] INFO WindowsCloudClean: skipping decode: nothing to do
    2020-01-27T14:14:07.119Z [ 1748:11376] [v6.1.356.0] INFO WindowsCloudClean: downloaded suite version: 1.0.42, display version: empty
    2020-01-27T14:14:07.119Z [ 1748:11376] [v6.1.356.0] INFO WindowsCloudAV: skipping decode: nothing to do
    2020-01-27T14:14:11.671Z [ 1748:11376] [v6.1.356.0] INFO WindowsCloudAV: downloaded suite version: 11.6.360, display version: 10.8.6.215
    2020-01-27T14:14:11.671Z [ 1748:11376] [v6.1.356.0] INFO WindowsCloudEncryption: skipping decode: nothing to do
    2020-01-27T14:14:16.240Z [ 1748:11376] [v6.1.356.0] INFO WindowsCloudEncryption: downloaded suite version: 1.20.70, display version: 2.0.70
    2020-01-27T14:14:16.241Z [ 1748:11376] [v6.1.356.0] INFO WindowsCloudHitmanProAlert: skipping decode: nothing to do
    2020-01-27T14:14:20.816Z [ 1748:11376] [v6.1.356.0] INFO WindowsCloudHitmanProAlert: downloaded suite version: 1.0.415, display version: 2.0.16
    2020-01-27T14:14:23.455Z [ 1748:11376] [v6.1.356.0] INFO Saving state.
    2020-01-27T14:14:23.458Z [ 1748:11376] [v6.1.356.0] INFO Overwriting state file C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
    2020-01-27T14:14:23.467Z [ 1748:11376] [v6.1.356.0] INFO Verified state file can be loaded.
    2020-01-27T14:14:23.468Z [ 1748:11376] [v6.1.356.0] INFO Installing products.
    2020-01-27T14:14:23.468Z [ 1748:11376] [v6.1.356.0] INFO Skipped installation of component 0253775E-970D-4876-959C-21B422420E5A 1.5.3
    2020-01-27T14:14:23.469Z [ 1748:11376] [v6.1.356.0] INFO Skipped installation of component 1129226C-32AB-4B72-85E1-A9CC8DFBC859 2.2.0.3371
    2020-01-27T14:14:23.470Z [ 1748:11376] [v6.1.356.0] INFO Skipped installation of component 1FE3E7DF-EFFA-408A-A1B0-89F15BA61F31 6.1.356.356
    2020-01-27T14:14:23.470Z [ 1748:11376] [v6.1.356.0] INFO Skipped installation of component 243DECCD-8080-410D-A45F-77F2182715EE 1.8.1.1
    2020-01-27T14:14:23.471Z [ 1748:11376] [v6.1.356.0] INFO Skipped installation of component 244E68BF-E1BB-4A6B-AC18-A492DE0134C0 3.7.15.446.446
    2020-01-27T14:14:23.471Z [ 1748:11376] [v6.1.356.0] INFO Skipped installation of component 3799FB3E-808A-4F7D-AC6A-0C74F931C386 4.11.127.0
    2020-01-27T14:14:23.472Z [ 1748:11376] [v6.1.356.0] INFO Skipped installation of component 3CE954A1-0F41-4D9B-B2F0-58AA75334DFD 2.3.12.0
    2020-01-27T14:14:23.473Z [ 1748:11376] [v6.1.356.0] INFO Skipped installation of component 3D8DC0A9-7F42-4CD5-AA7B-CF29296E7789 3.8.7.124
    2020-01-27T14:14:23.473Z [ 1748:11376] [v6.1.356.0] INFO Skipped installation of component 591706A7-9603-4255-A65F-EA49BB11E8AC 1.6.540.0
    2020-01-27T14:14:23.474Z [ 1748:11376] [v6.1.356.0] INFO Skipped installation of component 5CD1A7B6-812E-47A1-A986-3A6D5D5C19F5 1.7.631.0
    2020-01-27T14:14:23.474Z [ 1748:11376] [v6.1.356.0] INFO Skipped installation of component 642A6FD9-A9D6-482D-BD8C-46661F241A0E 1.0.1503.0
    2020-01-27T14:14:23.475Z [ 1748:11376] [v6.1.356.0] INFO Skipped installation of component 70FDD40E-986A-44E5-9620-2B894A06702A 1.5.3
    2020-01-27T14:14:23.476Z [ 1748:11376] [v6.1.356.0] INFO Skipped installation of component 7F682906-6E49-481B-89C5-2DCA36720F4F 2.6.0.2
    2020-01-27T14:14:23.476Z [ 1748:11376] [v6.1.356.0] INFO Skipped installation of component 8087796B-2289-4897-98A5-58FF23DAAFD0 1.9.2235.0.99
    2020-01-27T14:14:23.477Z [ 1748:11376] [v6.1.356.0] INFO Skipped installation of component CD297D6B-58A5-474F-8A0D-0A15803B8B50 1.1.0.0
    2020-01-27T14:14:23.477Z [ 1748:11376] [v6.1.356.0] INFO Skipped installation of component E17FE03B-0501-4aaa-BC69-0129D965F311 10.8.6.215
    2020-01-27T14:14:23.478Z [ 1748:11376] [v6.1.356.0] INFO Skipped installation of component F1DAD925-C973-4e5e-B172-78E97EB60689 1.20.70.0
    2020-01-27T14:14:23.478Z [ 1748:11376] [v6.1.356.0] INFO Skipped installation of component SDU RECOMMENDED
    2020-01-27T14:14:23.484Z [ 1748:11376] [v6.1.356.0] INFO Telemetry::LoadTelemetrySupplement 215: Telemetry Interval set to 86400 seconds
    2020-01-27T14:14:23.484Z [ 1748:11376] [v6.1.356.0] INFO Telemetry::LoadDocument 202: C:\ProgramData\Sophos\AutoUpdate\\Config\TelemetryConfig.json loaded
    2020-01-27T14:14:23.484Z [ 1748:11376] [v6.1.356.0] INFO Telemetry::LoadTelemetrySupplement 256: Telemetry Interval updated to 86400 seconds
    2020-01-27T14:14:23.484Z [ 1748:11376] [v6.1.356.0] INFO Telemetry::CalculateLastTelemtryTime 145: Telemetry last ran at 2020-01-26 14:20:46, Offset 7130, Offset Time 2020-01-26 16:19:36
    2020-01-27T14:14:23.484Z [ 1748:11376] [v6.1.356.0] INFO Telemetry::HasTelemetrySchedulePeriodElapsed 168: Telemetry schedule has not elapsed.
    2020-01-27T14:14:24.497Z [ 1748:11376] [v6.1.356.0] INFO Overwriting state file C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
    2020-01-27T14:14:24.521Z [ 1748:11376] [v6.1.356.0] INFO Verified state file can be loaded.
    2020-01-27T14:14:24.523Z [ 1748:11376] [v6.1.356.0] INFO SophosUpdate has completed with the result 0.
    2020-01-27T14:14:24.523Z [ 1748:11376] [v6.1.356.0] INFO SophosUpdate is exiting.

    And now ALC.log

     

    0x4 SophosUpdate 0x32 0x19bc 0x1 0x6 0x2660 0x5e2ee4d8
    0x4 Update 0x32 0x19bc 0x1 0x55 0x2660 0x5e2ee4e0 EndpointSecurityandControl Sophos
    0x4 Update 0x32 0x19bc 0x1 0x52 0x2660 0x5e2ee504
    0x4 Install 0x32 0x19bc 0x1 0x53 0x2660 0x5e2ee504 sed64
    0x4 Install 0x32 0x19bc 0x1 0x53 0x2660 0x5e2ee504 sau
    0x4 Install 0x32 0x19bc 0x1 0x53 0x2660 0x5e2ee504 uninstaller64
    0x4 Install 0x32 0x19bc 0x1 0x53 0x2660 0x5e2ee504 hmpa64
    0x4 Install 0x32 0x19bc 0x1 0x53 0x2660 0x5e2ee504 mcsep
    0x4 Install 0x32 0x19bc 0x1 0x53 0x2660 0x5e2ee504 shs
    0x4 Install 0x32 0x19bc 0x1 0x53 0x2660 0x5e2ee504 clean64
    0x4 Install 0x32 0x19bc 0x1 0x53 0x2660 0x5e2ee504 ui64
    0x4 Install 0x32 0x19bc 0x1 0x53 0x2660 0x5e2ee504 amsi64
    0x4 Install 0x32 0x19bc 0x1 0x53 0x2660 0x5e2ee504 sme64
    0x4 Install 0x32 0x19bc 0x1 0x53 0x2660 0x5e2ee504 esh64
    0x4 Install 0x32 0x19bc 0x1 0x53 0x2660 0x5e2ee504 ntp64
    0x4 Install 0x32 0x19bc 0x1 0x53 0x2660 0x5e2ee504 efw64
    0x4 Install 0x32 0x19bc 0x1 0x53 0x2660 0x5e2ee504 savxp
    0x4 Install 0x32 0x19bc 0x1 0x53 0x2660 0x5e2ee504 enc
    0x4 Install 0x32 0x19bc 0x1 0x53 0x2660 0x5e2ee504 sdu
    0x4 Install 0x32 0x19bc 0x1 0x68 0x2660 0x5e2ee504 sse64
    0x4 Install 0x32 0x19bc 0x1 0x4d 0x2660 0x5e2ee506 sse64
    0x4 Install 0x32 0x19bc 0x1 0x2e 0x2660 0x5e2ee506
    0x4 Install 0x32 0x19bc 0x1 0x68 0x2660 0x5e2ee506 sfs64
    0x4 Install 0x32 0x19bc 0x1 0x2e 0x2660 0x5e2ee50b
    0x4 Install 0x32 0x19bc 0x1 0x54 0x2660 0x5e2ee50b
    0x4 SophosUpdate 0x32 0x19bc 0x1 0x4c 0x2660 0x5e2ee50b
    0x4 SophosUpdate 0x32 0x6d4 0x1 0x6 0x2c70 0x5e2ef016
    0x4 Update 0x32 0x6d4 0x1 0x55 0x2c70 0x5e2ef01e EndpointSecurityandControl Sophos
    0x4 Update 0x32 0x6d4 0x1 0x52 0x2c70 0x5e2ef03f
    0x4 Install 0x32 0x6d4 0x1 0x53 0x2c70 0x5e2ef03f sse64
    0x4 Install 0x32 0x6d4 0x1 0x53 0x2c70 0x5e2ef03f sed64
    0x4 Install 0x32 0x6d4 0x1 0x53 0x2c70 0x5e2ef03f sau
    0x4 Install 0x32 0x6d4 0x1 0x53 0x2c70 0x5e2ef03f uninstaller64
    0x4 Install 0x32 0x6d4 0x1 0x53 0x2c70 0x5e2ef03f hmpa64
    0x4 Install 0x32 0x6d4 0x1 0x53 0x2c70 0x5e2ef03f mcsep
    0x4 Install 0x32 0x6d4 0x1 0x53 0x2c70 0x5e2ef03f shs
    0x4 Install 0x32 0x6d4 0x1 0x53 0x2c70 0x5e2ef03f clean64
    0x4 Install 0x32 0x6d4 0x1 0x53 0x2c70 0x5e2ef03f sfs64
    0x4 Install 0x32 0x6d4 0x1 0x53 0x2c70 0x5e2ef03f ui64
    0x4 Install 0x32 0x6d4 0x1 0x53 0x2c70 0x5e2ef03f amsi64
    0x4 Install 0x32 0x6d4 0x1 0x53 0x2c70 0x5e2ef03f sme64
    0x4 Install 0x32 0x6d4 0x1 0x53 0x2c70 0x5e2ef03f esh64
    0x4 Install 0x32 0x6d4 0x1 0x53 0x2c70 0x5e2ef03f ntp64
    0x4 Install 0x32 0x6d4 0x1 0x53 0x2c70 0x5e2ef03f efw64
    0x4 Install 0x32 0x6d4 0x1 0x53 0x2c70 0x5e2ef03f savxp
    0x4 Install 0x32 0x6d4 0x1 0x53 0x2c70 0x5e2ef03f enc
    0x4 Install 0x32 0x6d4 0x1 0x53 0x2c70 0x5e2ef03f sdu
    0x4 Install 0x32 0x6d4 0x1 0x54 0x2c70 0x5e2ef03f
    0x4 SophosUpdate 0x32 0x6d4 0x1 0x7b 0x2c70 0x5e2ef03f

     

    Thanks !

     

  • 0 in reply to Julian Cast

    Hi  

    Thank you for the logs, I can see that installation for several components has been skipped here. Would you please try the steps listed in this article and see if t helps to resolve the issue. 

    Shweta

    Community Support Engineer | Sophos Technical Support
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
    The New Home of Sophos Support Videos! - Visit Sophos Techvids
  • 0 in reply to Shweta

    Shweta said:

    Hi  

    Thank you for the logs, I can see that installation for several components has been skipped here. Would you please try the steps listed in this article and see if t helps to resolve the issue. 

     

     

    Hello i do it but after the restarting, same problem with sophos autoupdate :(

Unfiltered HTML