MacBook Pro (late 2011), Yosemite 10.10.3, SAV Home Ed. 9.2.4
In the last few days, my MB Pro would not sleep fully. When put to sleep, the display would turn off and it appeared most processes paused, but the power LED remained on and the fan continued to run. This meant that some background processes stayed active, so every so often the fans would spin up as some housekeeping event took place - kinda annoying when the Mac is in the room where you're trying to sleep. Rebooting the Mac had no effect - this has happened occasionally in the past, but a reboot always fixed it
Some trawling through the logs showed that the Mac was entering the DarkSleep state rather than system sleep, due to a process refusing to allow the system sleep request. Using the Terminal command:
pmset -g assertions
I got the following response:
Assertion status system-wide:
BackgroundTask 0
ApplePushServiceTask 0
UserIsActive 1
PreventUserIdleDisplaySleep 0
PreventSystemSleep 1
ExternalMedia 0
PreventUserIdleSystemSleep 0
NetworkClientActive 0
Listed by owning process:
pid 75315(SophosAVAgent): [0x0000559000070880] 96:41:28 PreventSystemSleep named: "Sophos On-Demand Scan"
pid 105(hidd): [0x00059561000907ea] 00:55:04 UserIsActive named: "com.apple.iohideventsystem.queue.tickle"
Timeout will fire in 3593 secs Action=TimeoutActionRelease
No kernel assertions.
So, SophosAVAgent had set the PreventSystemSleep flag. I tried turning off on-demand scanning, but the flag remained asserted until I quit SophosAVAgent via Activity Monitor.
The flag stayed 0 after I re-enabled on-demand scanning, because SophosAVAgent doesn't run until needed. When I forced a scan of a file, thus reactivating SophosAVAgent, the flag was set again. Once I closed the scan window, SophosAVAgent quit and the assertion was cleared.
So, it appears that SophosAVAgent asserts PreventSystemSleep, presumably to make sure the system doesn't sleep during a scan. It is supposed to quit once it has finished the scan, which would clear the assertion, but it is occasionally failing to do so.
This may possibly be related to some odd behaviour that SAV has been exhibiting - reported threats, which then vanish from Quarantine Manager before they can be cleaned, then get reported again within a few minutes. Is there perhaps a probem with the SophosAVAgent in the current version of SAV?
This thread was automatically locked due to age.
