Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 3234 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Client computers getting error messages

Drew415

I have client systems (XP PRO) that are throwing an error: "performs virus scanning and disinfection functions encountered a problem and needed to close" This error pops up sparactically throughout the day. The console shows that the machines are same as policy and are up to date. I checked firewalls, added ports, Remote Desk Top, etc. But still can't get it to work correcty. Am I missing something? Thanks in advance!

:3963


This thread was automatically locked due to age.
  • 0

    Hi Drew415,

    How many machines are exhibiting this behaviour?

    Can you advise if there are any scheduled scans running on these machines? Are you able to run a scan on these machines?

    Are there any further errors in the Event logs just after this error comes up?

    Regards

    MMs

    :3967
  • 0

    That I know of, there are at least 8-10 systems. Could be more that users are not telling about. I verified that the scheduled scans are present  in the Scheduled Tasks in some systems and others are not. On the systems that ran the scheduled scan, it finished within 4 minutes. (Doesn't seem right) The systems that did not have the scheduled scan, I could not open  SESC. They are getting error like: "Error requesting data control manager"  "Error configuring Data Control Manager" Error requesting component BHO manager"  :Faulting application SavService.exe. faulting module kernel32.dll.

    Sent the logs over to Sophos Monday morning and still waiting for a response from tech support...was hoping to get an answer sooner, but I'm back here hoping someone on here can shed some light.

    Thanks

    :4115
  • 0

    Thanks for the information.

    From the errors that you have reported here, this looks like it might be the Web Content Scanner that could be the cause. Depending on the version of Anti-Virus installed, you might want to try disabling this and see if there is any further errors.

    Here are some articles that will help on how to disable the Web Content Scanner.

    http://www.sophos.com/support/knowledgebase/article/31205.html

    http://www.sophos.com/support/knowledgebase/article/36265.html

    Did you get a reply from Tech Support in regards to the logs sent in?

    Regards

    MMs

    :4211
  • 0

    Thank for the reply MMs. My account rep assigned someone to look at my case. We went through some things on the console, and double checked things like "Scan remote files" was unchecked and other variants that could be slowing down the system. But still not an answer on how to fix the error. He said, the logs show that the system was under alot of stress during the logs, like a big file was being uploaded\downloaded. Not sure how he figured that out looking through logs. Ok..so what now? I had one of the users, disable the "on-access scanning" on his local machine and he was still getting Sophos errors. There was a "SIPS manager error" which myself or Sophos support could not find any info on. My account rep seems that the upgrade to 9.5 will fix everything. Scheduled for upgrade Aug 4th. I hope it works. It is a good product...when it works.  Hopefully we can get this squared away soon.

    :4310
  • 0

    SIPS manager error can be caused by a number of different things but one reason is the permissions. Please follow the instruction below, I hope they help.

    Open DCOM (start -> run -> dcomcnfg -> Component Services -> My Computer -> Dcom Config)
    Select the SIPSManagement.
     Open the Properties and click on the security tab
      Please check the settings for each.

        Launch and Activation Permissions
         Use Default should be selected.
           When set to customize and click edit, permissions should be
              Administrators -> All
              Interactive -> All
              Internet guest account -> All
              Launch IIS Process Account ->All
              System -> All
          Set back to Use Default if the settings are all correct.
         Access Permissions
          Use Default should be selected.
            When set to customize and click edit, permissions should be
              Self -> All
              System -> Local Access
            Set back to Use Default if the settings are all correct.
         Configuration Permissions
          Customize should be set
           Click on edit, permissions should be
              Administrators -> All
              Authenticated Users-> Read, Special Permissions
              Creator Owner-> Special Permissions
              Server Operators->Read, Special Permissions
              System -> All
    :4315
  • 0

    I tried it but everything was ok. I upgraded the server today to 4.5 and looks like that may have done the trick. I'll wait a little longer to verfiy it working. Thanks all.

    :4414
Unfiltered HTML