Enterprise Console: error A0500012 'Suspicious behavior detection encountered an error' reported for some endpoint computers
Issue
The status page in Enterprise Console displays the following error for some of your endpoint computers:
A0500012: Suspicious behavior detection encountered an error
This error is also reported in the SAV.TXT log on affected endpoint computers.
Sophos product and version
Sophos Anti-Virus for Windows 2000+
Operating system
Microsoft Windows 2000+
Technical Information
On April 14, 2009, Microsoft released a security update described in MS09-012: Vulnerabilities in Windows Could Allow Elevation of Privilege (959454). A component of the security update (KB956572) caused a conflict with version 2.1.6 of the Sophos Anti-Virus HIPS rules set.
What to do
Sophos have resolved this issue and have issued a new set of HIPs rules. These new HIPs rules were released to the Sophos databanks on Monday, 20 April at 8:40am GMT. If you see these alerts in Enterprise Console, please check when you last updated. If you need to, update from Sophos now. If you have any remaining alerts, you can safely acknowledge them.
If you need more information or guidance, then please contact technical support.
- Article ID: 57159
- Created: 17 Apr 2009
- Last updated: 13 May 2010


