I have a client machine here that was brought in because sophos started to fail on updating. According to the student who brought it in, sophos was running happily for quite some time, and then simply started getting a failed update notification. About three different work-study techs looked at this before it landed on my desk. Some of the things they checked were to run several virus/malware/rootkit scanning utilities to ensure the system was virus-free, Checked that no other AV programs remained, ran system file checker to ensure that windows files were all intact, and did a complete uninstall of Sophos including post-uninstall scrubbing of the registry of all Sophos entries, deleting any remaining sophos files from windows/temp, program files\sophoos, and all users\application data\sophos\ .
As it stands now, it appears that when sophos installs, it only installs the auto-updater, and then fails. When it gets to the screen that says "Installing Sophos antivirus for windows --Installing package 1 of 2", that takes a bit, and then immediately following the "package 1 of 2" step, the window closes out and the icon shows "Updating - Failed" with a red X on the shield.
When right-clicking the notifier in the system tray, the option to open sophos endpoint security and control is greyed out, and subsequently choosing update sophos results in a repeat of the above.
After the failed intall, the following services have been started according to the windows services utilty:
Sophos Agent
Sophos AutoUpdate Service
Sophos Message Router
LOG:
From the program installation directory, autoupdate/logs, is the update log, which i loaded into pastebin: http://pastebin.com/pP4jFQ9Z
The system is running Windows XP Home Edition sp3
I hope i've given enough information to get this started. I've turned on email notifications for this thread so I'll be right on top of things to add more information, etc, throughout the day.
Thanks in advance,
Here's all the log files from the windows/temp directory related to sophos. Figured you can pick the ones you want to look at, in case any of the other ones shed light on it for you. A couple were too large for the 512k pastebin max, so I uploaded the txt files to another host:
Sophos Anti-Virus CustomActions Log_110329_063435: http://ifile.it/nao5mqw
Sophos Anti-Virus Install Log_110329_063435: http://pastebin.com/RHZuQfHr
*edit*Sophos AutoUpdate install log: http://ifile.it/ba0ywpn
Sophos Client Firewall install log: http://pastebin.com/eGk96zX0
Sophos RMS install log: http://pastebin.com/epApLe37
Sophos RMS Install Log_20110329_133417: http://pastebin.com/hMisRfqT
HI,
I suspect you've hit the nail on the head. the windows folder on the registry returns a "Cannot open Windows. Error while opening key." when I navigate to the path you mentioned above. I should be able to take it from here, thanks!