I support a user who was given Webroot to install from HSBC bank. He already had Sophos Endpoint installed.
During the latest sophos update it appears that Webroot took exception to something in the update and alerted the user who instructed Webroot to clean it.
Logs below
Automated Cleanup Engine
Starting Cleanup at 19/04/2018 - 10:36:08 GMT
Starting Routine> Removing c:programdatasophosautoupdatecachedecodedclean64setup.dll...#(PX5: 8166FC8950520DAAF5DE0E09DDBD01008B5C5A4D - MD5: 15CE4EDEE2870FDBCC012E63B4047509 - UniqueID: 06D182B8)...
Deleting File> c:programdatasophosautoupdatecachedecodedclean64setup.dll
Automated Cleanup Engine
Starting Cleanup at 19/04/2018 - 10:40:12 GMT
Starting Routine> Removing c:programdatasophosautoupdatecachedecodedclean64setup.dll...#(PX5: 8166FC8950520DAAF5DE0E09DDBD01008B5C5A4D - MD5: 15CE4EDEE2870FDBCC012E63B4047509 - UniqueID: 06D91970)...
Deleting File> c:programdatasophosautoupdatecachedecodedclean64setup.dll
Automated Cleanup Engine
Starting Cleanup at 19/04/2018 - 11:05:36 GMT
Starting Routine> Removing c:programdatasophosautoupdatecachedecodedclean64setup.dll...#(PX5: 8166FC8950520DAAF5DE0E09DDBD01008B5C5A4D - MD5: 15CE4EDEE2870FDBCC012E63B4047509 - UniqueID: 0499C3A0)...
Deleting File> c:programdatasophosautoupdatecachedecodedclean64setup.dll
Now even with Webroot deactivated we're having problems reruning the Sophos update.
Is it possible to configure Webroot to leave sophos alone? Cannot see an option to exclude folders from scanning.
Page 1 / 1
The "Sohphos Auto Update" was misindentified. Our threat team has resolved this earlier today so you should be good to go. You might need to restore from quarantine and re-run, however this should not affect any other devices now that the reversal is in place. If you should need anything further, please feel free to contact our support team by phone (1-866-254-8400), or open a ticket (https://detail.webrootanywhere.com/servicewelcome.asp).@ wrote:
I support a user who was given Webroot to install from HSBC bank. He already had Sophos Endpoint installed.
During the latest sophos update it appears that Webroot took exception to something in the update and alerted the user who instructed Webroot to clean it.
Logs below
Automated Cleanup Engine
Starting Cleanup at 19/04/2018 - 10:36:08 GMT
Starting Routine> Removing c:programdatasophosautoupdatecachedecodedclean64setup.dll...#(PX5: 8166FC8950520DAAF5DE0E09DDBD01008B5C5A4D - MD5: 15CE4EDEE2870FDBCC012E63B4047509 - UniqueID: 06D182B8)...
Deleting File> c:programdatasophosautoupdatecachedecodedclean64setup.dll
Automated Cleanup Engine
Starting Cleanup at 19/04/2018 - 10:40:12 GMT
Starting Routine> Removing c:programdatasophosautoupdatecachedecodedclean64setup.dll...#(PX5: 8166FC8950520DAAF5DE0E09DDBD01008B5C5A4D - MD5: 15CE4EDEE2870FDBCC012E63B4047509 - UniqueID: 06D91970)...
Deleting File> c:programdatasophosautoupdatecachedecodedclean64setup.dll
Automated Cleanup Engine
Starting Cleanup at 19/04/2018 - 11:05:36 GMT
Starting Routine> Removing c:programdatasophosautoupdatecachedecodedclean64setup.dll...#(PX5: 8166FC8950520DAAF5DE0E09DDBD01008B5C5A4D - MD5: 15CE4EDEE2870FDBCC012E63B4047509 - UniqueID: 0499C3A0)...
Deleting File> c:programdatasophosautoupdatecachedecodedclean64setup.dll
Now even with Webroot deactivated we're having problems reruning the Sophos update.
Is it possible to configure Webroot to leave sophos alone? Cannot see an option to exclude folders from scanning.
Reply
Login to the community
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.