Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 2347 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Live Protection error?

towe

Sophos related Microsoft error message poping up at login?

Really dodgy error messages, especially since Sophos Live Protection is disabled in the policy - anyone seen this before?

----

Proxy configuration
Proxy configuration has encountered a problem and needs to close. WE are sorry for the inconvenience.
If you were in the middle of something, the information you were working on might be lost. For more information about this error, click here. Debug / Close
----

Sophos Web Intelligence
Sophos WEb Intelligence has encountered a problem and needs to close. We are sorry for the inconvenience.
If you were in the middle of something...[same as above]
----


Regards,

:10377


This thread was automatically locked due to age.
Parents
  • 0

    HI,

    That component is used to populate the registry key:
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos\SAVService\SophosProxy\

    specifically the values: "SophosProxy" and "SophosProxyBypass" with proxy information on login, Almon.exe (the process behind the tray icon) launches it seems having run Process Monitor.

    If in a command prompt you execute it, you might get more information.  I get:

    C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProxy.exe
    Name  : 127.0.0.1:3128
    Bypass: <local>
    Writing SAV proxy settings...
    Settings written.

    Process Monitoring the process I see it read:

    HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer

    and 

    HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride

    to gain these values.

    Maybe you could see what is in these keys on your machine where you get this error.

    As a temporary workaround to prevent the popup, you could create a software restriction policy under a GPO to prevent the execution of:

    C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProxy.exe

    C:\Program Files\Sophos\Sophos Anti-Virus\SavProxy.exe

    I hope this throws some light on it


    Regards,

    Jak

    :10421
Reply
  • 0

    HI,

    That component is used to populate the registry key:
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos\SAVService\SophosProxy\

    specifically the values: "SophosProxy" and "SophosProxyBypass" with proxy information on login, Almon.exe (the process behind the tray icon) launches it seems having run Process Monitor.

    If in a command prompt you execute it, you might get more information.  I get:

    C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProxy.exe
    Name  : 127.0.0.1:3128
    Bypass: <local>
    Writing SAV proxy settings...
    Settings written.

    Process Monitoring the process I see it read:

    HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer

    and 

    HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride

    to gain these values.

    Maybe you could see what is in these keys on your machine where you get this error.

    As a temporary workaround to prevent the popup, you could create a software restriction policy under a GPO to prevent the execution of:

    C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProxy.exe

    C:\Program Files\Sophos\Sophos Anti-Virus\SavProxy.exe

    I hope this throws some light on it


    Regards,

    Jak

    :10421
Children
No Data
Unfiltered HTML