Sophos Anti-Virus for Windows 2000+: upgrading to version 7.6.5 causes Enterprise Console to display un-decoded error messages
Issue
When upgrading to Sophos Anti-Virus for Windows 2000+ version 7.6.5 a number of un-decoded error messages may be displayed in the console.
e03d0055 Event Decode Unavailable (Event Number: '-532873131' Message Code: 'SAVXP.3762094165' Inserts: '', 'E\EN\CTXMUIUI.DLL', '1c9a181e51e5716', 'wfica32.exe', '')
e03d0052 Event Decode Unavailable (Event Number: '-532873134' Message Code: 'SAVXP.3762094162' Inserts: '', '1c9a10dd7eb08c4', 'T.VC80.CRT_1FC8B3B9A1E18E3B_8.0.50', '', '')
e03d0051 Event Decode Unavailable (Event Number: '-532873135' Message Code: 'SAVXP.3762094161' Inserts: '', '\Device\HarddiskV', '1c9a10dd7eb08c4', 'wfica32.exe', '')
Sophos product and version
Sophos anti-virus for Windows 2000+, version 7.6.5
What to do
One or two of these alerts per client may just indicate that the Sophos Anti-Virus service may have been busy checking a large or complex file, or was under a heavy system load at the time. No further action is required. However if numerous alerts are received, do one of the following according to whether you have Enterprise Console or the Sophos Control Center (for small businesses).
Enterprise Console
To decode the messages:
- Close enterprise console.
- On the computer where the console is installed, rename %programfiles%\Sophos\Enterprise Console\SavProviders\XP\SavRes.dll to SAVRes.dll.old
- From a client computer running the latest version of Sophos Anti-Virus, make a copy of %programfiles%\Sophos\Sophos Anti-Virus\SavRes.dll
- Take the file you have copied and save it to the location and computer described in step 2 above.
- Re-launch enterprise console, the messages will be decoded.
To suppress the messages being sent to Enterprise Console refer to the knowledgebase article Enterprise Console: centrally configuring the filtering of messages from workstations.
Sophos Control Center
To decode the messages: ·
- Close Sophos Control Center.
- On the computer where the console is installed, rename %programfiles%\Sophos\SCC\SavProviders\XP\SavRes.dll to SAVRes.dll.old
- From a client computer running the latest version of Sophos Anti-Virus, make a copy of %programfiles%\Sophos\Sophos Anti-Virus\SavRes.dll
- Take the file you have copied and save it to the location and computer described in step 2 above.
- Re-launch Sophos Control Center, the messages will be decoded.
If you need more information or guidance, then please contact technical support.
- Article ID: 54678
- Created: 16 Mar 2009
- Last updated: 17 Jan 2011


