Sophos (Anti-Virus)

[September 25, 2012] This page has been updated to reflect the new tool for resolving the Sophos Anti-virus false alerts. Below you will find the link and instructions for using the FixSophosFP.exe tool. We will leave the manual method instructions available as well. 

Sophos released a virus definition on September 19, 2012 that caused false virus alerts on many Microsoft Windows-based computers. These false alerts were incorrectly reporting that Sophos had detected a virus on the computer. Sophos has now released an update that corrects this issue. Note: There have not been any reports of this impacting Apple Mac computers. 

FixSophos Tool To Resolve Sophos Anti-virus False Alerts

This link to the FixSophosFP.exe Tool will open up a browser window to a public Blackboard webpage that is hosting the FixSophosFP.exe file. To download the file from this page:

1. After opening the Blackboard page hosting the FixSophosFP.exe file, select the checkbox next to the file name and then select either of the "Download Package" buttons located above and below the file. The image below shows the checkbox and "Download Package" buttons.

2. You should download the file to your Windows desktop which will allow you to easily select it to run.

For Computers Running Vista & Windows 7

3. Locate the FixSophosFP.exe file on the desktop of your computer.

4. Right click with your mouse on the FixSophosFP.exe and select "Run as administrator". If you do not have administrator rights for your computer, see your local IT support or person who does have administrator rights on your computer.

5. Once the program finishes, the Sophos Anti-virus false alert issue should be corrected and your quarantine will be cleared. It is a good idea to reboot your computer at this point. If you experience any issues running this program please contact the VCU helpIT Center (828-2227, helpIT@vcu.edu) with any questions.

For Computers Running Windows 2000 & XP 

3. Locate the FixSophosFP.exe file on the desktop of your computer.

4. Double click the FixSophosFP.exe file with your mouse. You will need to have administrator rights to the computer in order to run the tool. If you do not have administrator rights for your computer, see your local IT support or person who does have administrator rights on your computer.

5. Once the program finishes, the Sophos Anti-virus false alert issue should be corrected and your quarantine will be cleared. It is a good idea to reboot your computer at this point. If you experience any issues running this program, please contact the VCU helpIT Center (828-2227, helpIT@vcu.edu) with any questions.

Notes

After running the FixSophosFP Tool, if you have previously deleted quarantined files you may see that the Sophos shield in the system tray is missing and receive the error:

Almon Error loading external resources (ox8007007e).

Just click "OK" to dismiss the error and contact the VCU helpIT Center (828-2227, helpIT@vcu.edu) for assistance.

Manual Method To Resolve Sophos Anti-virus False Alerts

If Sophos on your MS Windows computer has presented the virus alerts, here are the steps below to correct the issue:

  1. Open Sophos by right clicking the Sophos shield found in the lower left of your desktop.
  2. Click "Open Sophos Endpoint Security and Control"
  3. On the Sophos main screen click "Configure anti-virus and HIPS"
  4. On the Configure screen click "On-access scanning"
  5. On the "On-Access scan settings for this computer" window select the "Scanning" tab and click the box to remove the check for "Enable on-access scanning for this computer". (By removing this check you are disabling Sophos protection.)
  6. Click the "OK" button at the bottom of the Window.
  7. Click the "Yes" button on the warning message that states; "You have chosen to disable on-access scanning. If you do so, there is no on-access protection against threats. Do you want to continue?"
  8. Close the Sophos application screens
  9. Right click the Sophos shield and click "Update now".
  10. Once the update is complete open Sophos and enable on-access protection by repeating these steps and check the box in step 5 above.

If the Sophos shield does not return to your task bar tray, please contact the VCU helpIT Center (828-2227, helpIT@vcu.edu) with any questions.

 ______________________________________________________________________________

Technology Services provides Sophos Anti-Virus software for free, while one is enrolled or employed by VCU. The software is used to protect your computer from viruses, spyware, adware and potentially unwanted applications. The software can be used on Mac and Windows versions, for more details see Download Anti-Virus Software.



This article was updated: 07/2/2013

Suggested reading for Sophos (Anti-Virus)