Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Subscribers 3 subscribers
  • Views 18092 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[Solved] Sophos Protection Updating Failed : Download of SAVXP failed from server

Febrianto Fitranto

Hi all,

I've sophos management console running sophos protection version: 10.7.2.VE3.69.2

When it perform auto update an error has occurred said : Download of SAVXP failed from server http://[server_address]/updatemgr/CIDs/S066/SAVSCFXP/  with error code: 0000006b ,

While status on update manager from enterprise console is up to date.

Here is the log from (ALUpdate) log in %ProgramData%\Sophos\AutoUpdate\Logs\

<quote>

Trace(2017-Sep-04 17:24:07): UpdateCoordinator::UpdateNow: Entering
Trace(2017-Sep-04 17:24:07): PopulateCache: Entering
Trace(2017-Sep-04 17:24:07): UpdateCoordinator::UpdateNow: current platform is WIN_2008_R2_SVR_X64
Trace(2017-Sep-04 17:24:07): ProductFactory::Create: SimpleProduct: {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx}
Trace(2017-Sep-04 17:24:07): ProductFactory::Create: SimpleProduct: {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx}
Trace(2017-Sep-04 17:24:07): ProductFactory::Create: SimpleProduct: {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx}
Trace(2017-Sep-04 17:24:07): ProductFactory::Create: Clean Product
Trace(2017-Sep-04 17:24:07): ProductFactory::Create: SAU Product
Trace(2017-Sep-04 17:24:07): ProductFactory::Create: SimpleProduct: {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx}
Trace(2017-Sep-04 17:24:07): ProductFactory::Create: SimpleProduct: {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx}
Trace(2017-Sep-04 17:24:07): ProductFactory::Create: SimpleProduct: {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx}
Trace(2017-Sep-04 17:24:07): IntelligentUpdateSourceLocatorImpl::AugmentUpdateSources() entered.
Trace(2017-Sep-04 17:24:07): Rediscovering update locations...
Trace(2017-Sep-04 17:24:07): Intelligent Updating using port number 51235
Trace(2017-Sep-04 17:24:12): Discovery resulted in 1 update source:
Trace(2017-Sep-04 17:24:12):   http://[Sophos_update_server]/updatemgr/CIDs/S066/SAVSCFXP,8000,,0
Trace(2017-Sep-04 17:24:12): Measurement and filtering resulted in 0 update sources.
Trace(2017-Sep-04 17:24:12): RelativeCidUpdateSourceLocator::AugmentUpdateSources: Entering
Trace(2017-Sep-04 17:24:12): Processing CID update location: http://[Sophos_update_server]/updatemgr/CIDs/S066/SAVSCFXP/
Trace(2017-Sep-04 17:24:12): Added relative CID location: http://[Sophos_update_server]/updatemgr/CIDs/S066/OPMHMPA
Trace(2017-Sep-04 17:24:12): Added special product {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx} to relative CID location http://[Sophos_update_server]/updatemgr/CIDs/S066/OPMHMPA
Trace(2017-Sep-04 17:24:12): Added special product {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx} to relative CID location http://[Sophos_update_server]/updatemgr/CIDs/S066/OPMHMPA
Trace(2017-Sep-04 17:24:12): RelativeCidUpdateSourceLocator::AugmentUpdateSources: Finished. Number of new locations added: 1
Trace(2017-Sep-04 17:24:12): UpdateCoordinator::UpdateNow: About to Sync list of products
Trace(2017-Sep-04 17:24:12): UpdateLocationFacade::SyncProduct: Last Update Mechanism = CID
Trace(2017-Sep-04 17:24:12): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Started:
Trace(2017-Sep-04 17:24:12): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, creating update location
Trace(2017-Sep-04 17:24:12): Calling package_source_init
Trace(2017-Sep-04 17:24:12): TrySyncProduct, Calling BeginSync
Trace(2017-Sep-04 17:24:12): Custom certificate already present.
Trace(2017-Sep-04 17:24:12): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\escdp.dat
Trace(2017-Sep-04 17:24:12): Remote connection over HTTP.
Trace(2017-Sep-04 17:24:12): Read file master.upd (Remote).
Trace(2017-Sep-04 17:24:12): Synchronised file root.upd (Remote).
Trace(2017-Sep-04 17:24:12): Synchronised file escdp.dat (Local).
Trace(2017-Sep-04 17:24:12): No file expired_credential.dat.
Trace(2017-Sep-04 17:24:12): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\ProductID.dat
Trace(2017-Sep-04 17:24:12): Synchronised file ProductID.dat (Local).
Trace(2017-Sep-04 17:24:12): ParseCustomerIDFile: completed: 0
Trace(2017-Sep-04 17:24:12): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Calling SyncProduct with {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx}
Trace(2017-Sep-04 17:24:12): CIDUpdateLocation::SyncProduct - Updating Product: RMSNT
Trace(2017-Sep-04 17:24:12): CIDUpdate(SyncProduct.Start): RMSNT, http://[Sophos_update_server]/updatemgr/CIDs/S066/SAVSCFXP/
Trace(2017-Sep-04 17:24:12): Checksum found in master.upd matches cached cidsync.upd : 5935f9d4. Skipping download
Trace(2017-Sep-04 17:24:12): CIDUpdate(PrimarySuccess):
Trace(2017-Sep-04 17:24:15): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, SyncProduct returned - 1
Trace(2017-Sep-04 17:24:15): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Ended - 1
Trace(2017-Sep-04 17:24:15): UpdateLocationFacade::SyncProduct: Last Update Mechanism = CID
Trace(2017-Sep-04 17:24:15): CIDUpdateLocation::SyncProduct - Updating Product: SAVXP
Trace(2017-Sep-04 17:24:15): CIDUpdate(SyncProduct.Start): SAVXP, http://[Sophos_update_server]/updatemgr/CIDs/S066/SAVSCFXP/
Trace(2017-Sep-04 17:24:15): CIDUpdateLocation::Sync - Updating from http CID: http://[Sophos_update_server]/updatemgr/CIDs/S066/SAVSCFXP/savxp
Trace(2017-Sep-04 17:24:15): CIDSync(CidSyncMessage):
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SAVAdminService.exe
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): vdl68.vdb
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): osdp.dll
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): msil-kea.ide
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): pdfu-cij.ide
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): Sophos Anti-Virus.msi
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\WSC_X64\WSCClient.exe
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): wow64ext.dll
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): xvdl59.vdb
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): svf.xml
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): xvdl145.vdb
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): xvdl14.vdb
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): xvdl66.vdb
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): xvdl186.vdb
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): xvdl110.vdb
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): xvdl79.vdb
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): drivers\kms\wxp_i386\skmscan.sys
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): drivers\sdcfilter\wxp_i386\sdcfilter.sys
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): drivers\sdcfilter\win7_i386\sdcfilter.sys
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): xvdl26.vdb
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): delf-gdf.ide
Trace(2017-Sep-04 17:24:30): CIDSync(CidSyncMessage): xvdl20.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): msil-kgw.ide
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): CommonAppData\Sophos\Sophos Anti-Virus\Config\bootstrap.xml
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): vdl38.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): xvdl40.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): xvdl29.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): xvdl149.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): xvdl31.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): xvdl183.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): savsync.upd
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): trikbo-c.ide
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): xvdl140.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): vdl76.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): diagnose\sducli.exe
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): pdfu-ckc.ide
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): vdl06.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): trickb-c.ide
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): xvdl168.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): xvdl100.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): rans-eqj.ide
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): xvdl99.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): vdl40.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): drivers\onaccess\win7_i386\sav.cat
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): sophos_detoured_x64.dll
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): syncct-a.ide
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): xvdl139.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SavShellExt.dll
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): locky-zx.ide
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): vdl42.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): xvdl185.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): xvdl67.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\ApplicationManagement.dll
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): xvdl114.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): xvdl87.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): emote-ge.ide
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\WSC_Win32\WSCClient.exe
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): vdl49.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): vdl79.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): xvdl127.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): xvdl49.vdb
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): diagnose\setup.dll
Trace(2017-Sep-04 17:24:31): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): xvdl47.vdb
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): dwnl-uff.ide
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\integrity.dat
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): proci-ae.ide
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\difxapi.dll
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SavResJap.dll
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): xvdl107.vdb
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): google-a.ide
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): docd-jte.ide
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): emote-fm.ide
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): xvdl95.vdb
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): docd-jue.ide
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\ComponentManager.dll
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.sys
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): fare-doj.ide
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): diagnose\szip.dll
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): xvdl181.vdb
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): vdl56.vdb
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): xvdl19.vdb
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): pdfu-cei.ide
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SAVHelpFra.chm
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): xvdl88.vdb
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SAVCleanupService.exe
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): ps_rootca.crt
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\ps_rootca.crt
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): drivers\onaccess\wlh_i386\savonaccess.sys
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): xvdl147.vdb
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): drivers\kms\win7_i386\skm.cat
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): xvdl154.vdb
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): phis-aty.ide
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): xvdl72.vdb
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): xvdl71.vdb
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Persistance.dll
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): vdl57.vdb
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): vdl45.vdb
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): xvdl164.vdb
Trace(2017-Sep-04 17:24:32): CIDSync(CidSyncMessage): sxlconfig.dat
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): CommonAppData\Sophos\Sophos Anti-Virus\Config\SAVIConfigFile.xml
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): vdlsync.upd
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcr90.dll
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): lethi-bv.ide
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): xvdl125.vdb
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): pdfu-cmu.ide
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\ScanEditExports.dll
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\ICAdapter.dll
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): CommonAppData\Sophos\Sophos Anti-Virus\Config\Quarantine.xml
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): xvdl25.vdb
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): xvdl129.vdb
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): emote-dd.ide
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): SDCService.exe
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.dll
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): filfro-a.ide
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): xvdl64.vdb
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): xvdl196.vdb
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): diagnose\uploader.exe
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): trikbo-i.ide
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): lock-aaa.ide
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): xvdl188.vdb
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): sophtlib.dll
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): vbinj-qy.ide
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SAVControl.dll
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): sus01.vdb
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): drivers\onaccess\wlh_i386\sav.cat
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): diagnose\manifest.dat
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\DriveProcessor.dll
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SavShellExtX64.dll
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): cerb-ans.ide
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SavSecurity.dll
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\ssr32.exe
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): pdfdoc-q.ide
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): docd-jwx.ide
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): decep-as.ide
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): drivers\onaccess\wnet_amd64\savonaccessfilter.sys
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): vb-jnq.ide
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): xvdl175.vdb
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): drivers\onaccess\win7_amd64\sav.cat
Trace(2017-Sep-04 17:24:33): CIDSync(CidSyncMessage): SDCDevConx64.exe
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SAVUserContext.dll
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): xvdl37.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): savmscm.dll
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): xvdl94.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): xvdl118.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): xvdl134.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): public.pem
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\public.pem
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): spy-amk.ide
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): xvdl43.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SAVTelem.exe
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): vdl78.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SIPSManagement.dll
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Sophos Anti-Virus (es).URL
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): xvdl106.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): emote-fy.ide
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): limit-px.ide
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): vdl54.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): vdl20.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): msil-ket.ide
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): fare-dpc.ide
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): fare-dmj.ide
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): xvdl97.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): xvdl179.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): phis-awq.ide
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): vdl74.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): xvdl192.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): xvdl124.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Sophos Anti-Virus (de).URL
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): xvdl69.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): msil-kgf.ide
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): xvdl82.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): fare-dlt.ide
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): htadl-bu.ide
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): vdl01.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): xvdl172.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): vdl.dat
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): xvdl178.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): malra-aw.ide
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): phis-auv.ide
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): vdl24.vdb
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): drivers\boottasks\win7_amd64\sophosbootdriver.cat
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\DataControlPlugin.dll
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): drivers\sdcfilter\wxp_i386\sdcfilter.cat
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): drivers\sdcfilter\win7_i386\sdcfilter.cat
Trace(2017-Sep-04 17:24:34): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): xvdl152.vdb
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): xvdl83.vdb
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): drivers\kms\win7_i386\skmscan.inf
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\swi_callout.inf
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.inf
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): msili-oj.ide
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): remcos-y.ide
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): vdl80.vdb
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): xvdl105.vdb
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): phis-aum.ide
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): xvdl120.vdb
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Configuration.dll
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): phis-axl.ide
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): zbot-ltd.ide
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): emote-ea.ide
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SAVHelpChs.chm
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\DesktopMessaging.dll
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): xvdl143.vdb
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): drivers\kms\wxp_i386\skm.cat
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SophtainerAdapter.dll
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): manifest.dat
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): engsync.upd
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\DCManagement.dll
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): edl01.vdb
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): docd-jyz.ide
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): xvdl15.vdb
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): diagnose\sduconfig.xml
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): vdl30.vdb
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): vdl13.vdb
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): xvdl128.vdb
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): fare-dlq.ide
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): docd-jst.ide
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): msil-ken.ide
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): vdl25.vdb
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SavResFra.dll
Trace(2017-Sep-04 17:24:35): CIDSync(CidSyncMessage): Setup.dll
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter_64.dll
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): xvdl144.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\ThreatManagement.dll
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): xvdl163.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): injec-ud.ide
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SophosOfficeAV.dll
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): xvdl126.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): xvdl01.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): diagnose\sdugui.exe
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): age-awvf.ide
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): xvdl121.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): xvdl133.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): xvdl07.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): xvdl86.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): recam-r.ide
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): drivers\onaccess\win7_i386\savonaccessdriv.inf
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): drivers\onaccess\win7_amd64\savonaccessdriv.inf
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): xvdl81.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): nanoc-sq.ide
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): xvdl16.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): fare-dkt.ide
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): xvdl130.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): xvdl137.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): spy-amg.ide
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Categories.dll
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): xvdl50.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): andro-sx.ide
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): fare-dml.ide
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): xvdl169.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\AuthorisedLists.dll
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\FilterProcessors.dll
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): xvdl146.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): xvdl36.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): vvf.xml
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): vdl28.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): vdl43.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): xvdl17.vdb
Trace(2017-Sep-04 17:24:36): CIDSync(CidSyncMessage): xvdl122.vdb
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): xvdl11.vdb
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): sdc-integrity.dat
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): xvdl191.vdb
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\scf.dat
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Safestore32.dll
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): vdl44.vdb
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\EEConsumer.dll
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): phis-awf.ide
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): drivers\onaccess\win7_amd64\savonaccess.sys
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): vdl23.vdb
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): zbot-lth.ide
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): xvdl136.vdb
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): xvdl141.vdb
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): xvdl58.vdb
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): emotme-a.ide
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): ConfigureSAV.exe
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): vdl02.vdb
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\ScanManagement.dll
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): xvdl57.vdb
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): xvdl68.vdb
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): xvdl132.vdb
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SavResCht.dll
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SavResEsp.dll
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Sophos Anti-Virus (ja).URL
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): vb-jny.ide
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): vdl47.vdb
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): veex.dll
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): vdl39.vdb
Trace(2017-Sep-04 17:24:37): CIDSync(CidSyncMessage): xvdl190.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): pdfu-cgf.ide
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): xvdl123.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): xvdl10.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SWIManagement.dll
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): age-awvp.ide
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): xvdl75.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): pdfu-cgg.ide
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): xvdl80.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): xvdl162.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): xvdl05.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): locky-zt.ide
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\BackgroundScanning.dll
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\scs-integrity.dat
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): spy-amp.ide
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): xvdl184.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): vdl16.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): vdl22.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Intelligence\mime.txt
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): vdl14.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): xvdl96.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): vdl65.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): xvdl45.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): vdl09.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): phis-aue.ide
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): drivers\boottasks\wxp_i386\SophosBootTasks.exe
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): drivers\boottasks\win7_i386\SophosBootTasks.exe
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): xvdl35.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): xvdl177.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\swi_callout.cat
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): vdl33.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Intelligence\integrity.dat
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): zbot-lte.ide
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): inje-crr.ide
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SAVHelpIta.chm
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): xvdl27.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): vdl35.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): xvdl166.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): xvdl74.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): xvdl92.vdb
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcp90.dll
Trace(2017-Sep-04 17:24:38): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): recam-w.ide
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): HIPSRules-10-3-221-1.bdl
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): darkc-fs.ide
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): bckd-rvb.ide
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): xvdl195.vdb
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): gozi-jv.ide
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): xvdl73.vdb
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): lethi-bw.ide
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): xvdl44.vdb
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): drivers\boottasks\win7_i386\sophosbootdriver.cat
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): vdl61.vdb
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\SystemInformation.dll
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): banl-cra.ide
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): vdl48.vdb
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): drivers\kms\win7_i386\skmscan.sys
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): xvdl174.vdb
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): pdfj-ajn.ide
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): program files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_ifslsp.dll
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): vdl26.vdb
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): injec-tz.ide
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): bank-guc.ide
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): diagnose\sof.dat
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): delf-gdh.ide
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): vdl46.vdb
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): xvdl55.vdb
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): emote-fj.ide
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): pdfu-cnu.ide
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): phis-ayh.ide
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): docd-kfi.ide
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): elenoo-b.ide
Trace(2017-Sep-04 17:24:39): CIDSync(CidSyncMessage): docd-kfm.ide
Trace(2017-Sep-04 17:24:40): CIDSync(CidSyncMessage): pdfu-coa.ide
Trace(2017-Sep-04 17:24:40): CIDSync(CidSyncMessage): delf-gdz.ide
Trace(2017-Sep-04 17:24:40): CIDSync(CidSyncMessage): delf-gdy.ide
Trace(2017-Sep-04 17:24:40): CIDSync(CidSyncMessage): injec-us.ide
Trace(2017-Sep-04 17:24:41): CIDSyncCallback, SynchronisationTerminated - Code = -2147217659
Trace(2017-Sep-04 17:24:41): CIDSyncCallback, SynchronisationTerminated - MapFile = C:\ProgramData\Sophos\AutoUpdate\cache\savxp.map
Trace(2017-Sep-04 17:24:41): AddSpecialRootFiles: theFile = savxp.map theRoot = C:\ProgramData\Sophos\AutoUpdate\cache
Trace(2017-Sep-04 17:24:42): CIDUpdateLocation::SyncProduct: Failed to update product (SAVXP) from "http://[Sophos_update_server]/updatemgr/CIDs/S066/SAVSCFXP/", Error is :CIDSYNC_E_CIDSWAPERROR (Could not swap temporary and local CID directories.)
Trace(2017-Sep-04 17:24:42): CIDUpdate(CIDDownloadFailed): SAVXP, http://[Sophos_update_server]/updatemgr/CIDs/S066/SAVSCFXP/
Trace(2017-Sep-04 17:24:46): UpdateLocationFacade::SyncProduct: Last Update Mechanism = CID
Trace(2017-Sep-04 17:24:46): CIDUpdateLocation::SyncProduct - Updating Product: Sophos AutoUpdate
Trace(2017-Sep-04 17:24:46): CIDUpdate(SyncProduct.Start): Sophos AutoUpdate, http://[Sophos_update_server]/updatemgr/CIDs/S066/SAVSCFXP/
Trace(2017-Sep-04 17:24:46): Checksum found in master.upd matches cached cidsync.upd : fcd5700. Skipping download
Trace(2017-Sep-04 17:24:46): CIDUpdate(PrimarySuccess):
Trace(2017-Sep-04 17:24:49): CIDUpdateLocation::Prepare... entered
Trace(2017-Sep-04 17:24:49): CheckManifest completed successfully
Trace(2017-Sep-04 17:24:49): CustomFileMap::CustomFileMap.  CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
Trace(2017-Sep-04 17:24:49): CustomFileMap::Read: Subfolder = sau productID = {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx}
Trace(2017-Sep-04 17:24:49): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\sau.custom
Trace(2017-Sep-04 17:24:49): CustomFileMap::Read: File exists and appears valid.
Trace(2017-Sep-04 17:24:49): UpdateLocationFacade::SyncProduct: Last Update Mechanism = CID
Trace(2017-Sep-04 17:24:49): CIDUpdateLocation::SyncProduct - Updating Product: Sophos System Protection
Trace(2017-Sep-04 17:24:49): CIDUpdate(SyncProduct.Start): Sophos System Protection, http://[Sophos_update_server]/updatemgr/CIDs/S066/SAVSCFXP/
Trace(2017-Sep-04 17:24:49): Checksum found in master.upd matches cached cidsync.upd : 59d2646f. Skipping download
Trace(2017-Sep-04 17:24:49): CIDUpdate(PrimarySuccess):
Trace(2017-Sep-04 17:24:52): UpdateLocationFacade::SyncProduct: Last Update Mechanism = CID
Trace(2017-Sep-04 17:24:52): CIDUpdateLocation::SyncProduct - Updating Product: Sophos Network Threat Protection
Trace(2017-Sep-04 17:24:52): CIDUpdate(SyncProduct.Start): Sophos Network Threat Protection, http://[Sophos_update_server]/updatemgr/CIDs/S066/SAVSCFXP/
Trace(2017-Sep-04 17:24:52): Checksum found in master.upd matches cached cidsync.upd : ca3f0de0. Skipping download
Trace(2017-Sep-04 17:24:52): CIDUpdate(PrimarySuccess):
Trace(2017-Sep-04 17:24:55): UpdateLocationFacade::SyncProduct: Last Update Mechanism = CID
Trace(2017-Sep-04 17:24:55): CIDUpdateLocation::SyncProduct - Updating Product: Sophos Endpoint Defense
Trace(2017-Sep-04 17:24:55): CIDUpdate(SyncProduct.Start): Sophos Endpoint Defense, http://[Sophos_update_server]/updatemgr/CIDs/S066/SAVSCFXP/
Trace(2017-Sep-04 17:24:55): Checksum found in master.upd matches cached cidsync.upd : ec1b32a5. Skipping download
Trace(2017-Sep-04 17:24:55): CIDUpdate(PrimarySuccess):
Trace(2017-Sep-04 17:24:59): UpdateLocationFacade::SyncProduct: Last Update Mechanism = Unknown
Trace(2017-Sep-04 17:24:59): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Started:
Trace(2017-Sep-04 17:24:59): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, creating update location
Trace(2017-Sep-04 17:24:59): Calling package_source_init
Trace(2017-Sep-04 17:24:59): TrySyncProduct, Calling BeginSync
Trace(2017-Sep-04 17:24:59): Custom certificate already present.
Trace(2017-Sep-04 17:24:59): Not primary update location. Will not process license, credentials and product id files.
Trace(2017-Sep-04 17:24:59): Remote connection over HTTP.
Trace(2017-Sep-04 17:24:59): Read file master.upd (Remote).
Trace(2017-Sep-04 17:24:59): Synchronised file root.upd (Remote).
Trace(2017-Sep-04 17:24:59): ParseCustomerIDFile: completed: 0
Trace(2017-Sep-04 17:24:59): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Calling SyncProduct with {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx}
Trace(2017-Sep-04 17:24:59): CIDUpdateLocation::SyncProduct - Updating Product: Sophos HitmanPro Alert
Trace(2017-Sep-04 17:24:59): CIDUpdate(SyncProduct.Start): Sophos HitmanPro Alert, http://[Sophos_update_server]/updatemgr/CIDs/S066/OPMHMPA
Trace(2017-Sep-04 17:24:59): Checksum found in master.upd matches cached cidsync.upd : 4fcd922a. Skipping download
Trace(2017-Sep-04 17:24:59): CIDUpdate(PrimarySuccess):
Trace(2017-Sep-04 17:25:02): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, SyncProduct returned - 1
Trace(2017-Sep-04 17:25:02): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Ended - 1
Trace(2017-Sep-04 17:25:02): UpdateLocationFacade::SyncProduct: Last Update Mechanism = CID
Trace(2017-Sep-04 17:25:02): CIDUpdateLocation::SyncProduct - Updating Product: Sophos Clean
Trace(2017-Sep-04 17:25:02): CIDUpdate(SyncProduct.Start): Sophos Clean, http://[Sophos_update_server]/updatemgr/CIDs/S066/OPMHMPA
Trace(2017-Sep-04 17:25:02): Checksum found in master.upd matches cached cidsync.upd : 1d576557. Skipping download
Trace(2017-Sep-04 17:25:02): CIDUpdate(PrimarySuccess):
Trace(2017-Sep-04 17:25:05): ALUpdate(DownloadEnded):
Trace(2017-Sep-04 17:25:05): UpdateCoordinator::UpdateNow: About to Action list of products
Trace(2017-Sep-04 17:25:05): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
Trace(2017-Sep-04 17:25:05): Null update
Trace(2017-Sep-04 17:25:05): ALUpdate(Action.Skipped): RMSNT
Trace(2017-Sep-04 17:25:05): CIDUpdateLocation::OnNullUpdate...
Trace(2017-Sep-04 17:25:05): CustomFileMap::CustomFileMap.  CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: Subfolder = rms productID = {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx}
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\rms.custom
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: File exists and appears valid.
Trace(2017-Sep-04 17:25:05): CIDUpdateLocation::OnNullUpdate complete.
Trace(2017-Sep-04 17:25:05): Updating plugin cache for RMSNT
Trace(2017-Sep-04 17:25:05): Successfully updated plugin cache for RMSNT
Trace(2017-Sep-04 17:25:05): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==false numfilestocahce 1 Actiontype SetupNot preinstalled product
Trace(2017-Sep-04 17:25:05): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
Trace(2017-Sep-04 17:25:05): Null update
Trace(2017-Sep-04 17:25:05): ALUpdate(Action.Skipped): Sophos HitmanPro Alert
Trace(2017-Sep-04 17:25:05): CIDUpdateLocation::OnNullUpdate...
Trace(2017-Sep-04 17:25:05): CustomFileMap::CustomFileMap.  CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: Subfolder = hmpa64 productID = {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx}
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\hmpa64.custom
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: File exists and appears valid.
Trace(2017-Sep-04 17:25:05): CIDUpdateLocation::OnNullUpdate complete.
Trace(2017-Sep-04 17:25:05): Updating plugin cache for Sophos HitmanPro Alert
Trace(2017-Sep-04 17:25:05): Successfully updated plugin cache for Sophos HitmanPro Alert
Trace(2017-Sep-04 17:25:05): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype CleanActionNot preinstalled product
Trace(2017-Sep-04 17:25:05): Null update
Trace(2017-Sep-04 17:25:05): ALUpdate(Action.Skipped): Sophos Clean
Trace(2017-Sep-04 17:25:05): CIDUpdateLocation::OnNullUpdate...
Trace(2017-Sep-04 17:25:05): CustomFileMap::CustomFileMap.  CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: Subfolder = clean64 productID = {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx}
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\clean64.custom
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: File exists and appears valid.
Trace(2017-Sep-04 17:25:05): CIDUpdateLocation::OnNullUpdate complete.
Trace(2017-Sep-04 17:25:05): Updating plugin cache for Sophos Clean
Trace(2017-Sep-04 17:25:05): Successfully updated plugin cache for Sophos Clean
Trace(2017-Sep-04 17:25:05): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
Trace(2017-Sep-04 17:25:05): Null update
Trace(2017-Sep-04 17:25:05): ALUpdate(Action.Skipped): Sophos AutoUpdate
Trace(2017-Sep-04 17:25:05): Updating subscription information from product ID data.
Trace(2017-Sep-04 17:25:05): Rigid name: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Trace(2017-Sep-04 17:25:05): Version: 10.7.2.3.3692.1
Trace(2017-Sep-04 17:25:05): CIDUpdateLocation::OnNullUpdate...
Trace(2017-Sep-04 17:25:05): CustomFileMap::CustomFileMap.  CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: Subfolder = sau productID = {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx}
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\sau.custom
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: File exists and appears valid.
Trace(2017-Sep-04 17:25:05): CIDUpdateLocation::OnNullUpdate complete.
Trace(2017-Sep-04 17:25:05): Updating plugin cache for Sophos AutoUpdate
Trace(2017-Sep-04 17:25:05): Successfully updated plugin cache for Sophos AutoUpdate
Trace(2017-Sep-04 17:25:05): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
Trace(2017-Sep-04 17:25:05): Null update
Trace(2017-Sep-04 17:25:05): ALUpdate(Action.Skipped): Sophos System Protection
Trace(2017-Sep-04 17:25:05): CIDUpdateLocation::OnNullUpdate...
Trace(2017-Sep-04 17:25:05): CustomFileMap::CustomFileMap.  CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: Subfolder = ssp productID = {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx}
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\ssp.custom
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: File exists and appears valid.
Trace(2017-Sep-04 17:25:05): CIDUpdateLocation::OnNullUpdate complete.
Trace(2017-Sep-04 17:25:05): Updating plugin cache for Sophos System Protection
Trace(2017-Sep-04 17:25:05): Successfully updated plugin cache for Sophos System Protection
Trace(2017-Sep-04 17:25:05): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
Trace(2017-Sep-04 17:25:05): Null update
Trace(2017-Sep-04 17:25:05): ALUpdate(Action.Skipped): Sophos Network Threat Protection
Trace(2017-Sep-04 17:25:05): CIDUpdateLocation::OnNullUpdate...
Trace(2017-Sep-04 17:25:05): CustomFileMap::CustomFileMap.  CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: Subfolder = ntp64 productID = {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx}
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\ntp64.custom
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: File exists and appears valid.
Trace(2017-Sep-04 17:25:05): CIDUpdateLocation::OnNullUpdate complete.
Trace(2017-Sep-04 17:25:05): Updating plugin cache for Sophos Network Threat Protection
Trace(2017-Sep-04 17:25:05): Successfully updated plugin cache for Sophos Network Threat Protection
Trace(2017-Sep-04 17:25:05): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
Trace(2017-Sep-04 17:25:05): Null update
Trace(2017-Sep-04 17:25:05): ALUpdate(Action.Skipped): Sophos Endpoint Defense
Trace(2017-Sep-04 17:25:05): CIDUpdateLocation::OnNullUpdate...
Trace(2017-Sep-04 17:25:05): CustomFileMap::CustomFileMap.  CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: Subfolder = sed64 productID = {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx}
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\sed64.custom
Trace(2017-Sep-04 17:25:05): CustomFileMap::Read: File exists and appears valid.
Trace(2017-Sep-04 17:25:05): CIDUpdateLocation::OnNullUpdate complete.
Trace(2017-Sep-04 17:25:05): Updating plugin cache for Sophos Endpoint Defense
Trace(2017-Sep-04 17:25:05): Successfully updated plugin cache for Sophos Endpoint Defense
Trace(2017-Sep-04 17:25:09): RMSMessageHandler: ALUpdateEnd
Trace(2017-Sep-04 17:25:09): Sending message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate"><ErrorMessage><ID>CIDDownloadFailed</ID><StringID>107</StringID><Sender>CIDUpdate</Sender><Insert>SAVXP</Insert><Insert>http://[Sophos_update_server]/updatemgr/CIDs/S066/SAVSCFXP/</Insert></ErrorMessage><ReadableMessage>ERROR:   Download of SAVXP failed from server http://[Sophos_update_server]/updatemgr/CIDs/S066/SAVSCFXP/</ReadableMessage></Config>
Trace(2017-Sep-04 17:25:09): IPCSender::Write: Writing message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate"><ErrorMessage><ID>CIDDownloadFailed</ID><StringID>107</StringID><Sender>CIDUpdate</Sender><Insert>SAVXP</Insert><Insert>http://[Sophos_update_server]/updatemgr/CIDs/S066/SAVSCFXP/</Insert></ErrorMessage><ReadableMessage>ERROR:   Download of SAVXP failed from server http://[Sophos_update_server]/updatemgr/CIDs/S066/SAVSCFXP/</ReadableMessage></Config>
Trace(2017-Sep-04 17:25:09): IPCSender::ProcessSend: Send message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate"><ErrorMessage><ID>CIDDownloadFailed</ID><StringID>107</StringID><Sender>CIDUpdate</Sender><Insert>SAVXP</Insert><Insert>http://[Sophos_update_server]/updatemgr/CIDs/S066/SAVSCFXP/</Insert></ErrorMessage><ReadableMessage>ERROR:   Download of SAVXP failed from server http://[Sophos_update_server]/updatemgr/CIDs/S066/SAVSCFXP/</ReadableMessage></Config>
Trace(2017-Sep-04 17:25:09): IPCSender::ProcessSend: No messages in queue, starting to wait
Trace(2017-Sep-04 17:25:10): IPCSender::ProcessSend exiting
Trace(2017-Sep-04 17:25:10): ALUpdate finished

</quote>

 

From log above, I belived the problem is caused by Error is :CIDSYNC_E_CIDSWAPERROR (Could not swap temporary and local CID directories.) and it shown the troubleshooting on this link . But as I following the instructions, I couldn't find the service called 'Windows Search' and attempting to update manually keep failing. FYI our management is running on WIN_2008_R2_SVR_X64. FYI the downloading link for SAVXP could be access via web browser.

 

Is there any idea to solve this problem?

 

 

Best regards,

Febrianto



This thread was automatically locked due to age.
  • 0

    Hello Febrianto,

    you are correct regarding the error, Windows Search is or was just a prime suspect when the article was written.
    There's likely a lock on the folder, or a folder/file under ...\Cache\savxp\ or \tempsavxp\. I'd first try Process Explorer using Find → Handle or DLL → \AutoUpdate\Cache\ instead of Process Monitor. If the error occurs on every update attempt this usually helps to identify the process which prevents the swapping.

    Christian

    .

  • 0 in reply to QC

    Hello Christian,

     

    Thanks for replying, I've run Process Explorer as your suggestion, and here is the results :

     

    Other ALUpdate, the folder is being processed by explorer.exe , any idea why it's preventing the swapping?

     

    Regards,

     

    Febrianto

  • +1 in reply to Febrianto Fitranto

    Hello Febrianto,

    it looks like the \diagnose folder (the one containing SDU, the log collection utility) is open in an Explorer window. This would prevent the swap.

    Christian

  • 0 in reply to QC

    Hi Christian,

     

    Those suggestion is resolve the problem, so for swapping error best approach is to look the other application running specific folder required for sophos update... What I'am doing is close the handle of mentioned folder using process explorer. and running the sophos Anti-virus update.

    Thankyou.

     

    Best regards,

     

    Febrianto

Unfiltered HTML