The Sophos Virus Removal Tool is able to identify and remove malware from a single Windows endpoint computer (Windows XP SP2 and later, for Macs, take a look at Sophos Home for Mac). The tool comes with the latest identities included, to stay current with the latest detections, the tool should be downloaded again when a new scan is required.
This knowledge base article provides an overview of the tool. As it is a free tool, there will be no phone or email support for it. Any concerns related to the tool should be posted at Sophos Community. If you would like to see more information added to the article please use the feedback box at the bottom of the article.
Applies to the following Sophos product(s) and version(s) Sophos Virus Removal Tool
Operating systems Windows XP SP2 and later
The tool is available to both Sophos and non-Sophos customers alike.
Sophos customers are strongly advised to use the latest version of Sophos Anti-Virus in preference to this tool. The Sophos Virus Removal Tool offers no additional detection ability over that of Sophos Anti-Virus version 10. A managed installation of Sophos Anti-Virus however, offers additional benefits like real time scanning and central management.
If you need any assistance with using this tool post your question to the free tools forum.
The tool is a self contained on-demand malware scanner with the following features:
Note: It does not have an on-access scanner (i.e., the ability to scan files real time). Updating is only available in the 2.2 version of the tool.
You can download the tool from the link below.
Download: Virus Removal Tool - Free virus detection and removal.
This tool is only available for Windows:
The tool can be used in the following ways:
C:\Program Files (x86)\Sophos\Sophos Virus Removal Tool
C:\Program Files\Sophos\Sophos Virus Removal Tool
There are several command line options that can be passed to the command line tool. These are:
Note: If you are a licensed Sophos customer, you are welcome to use the tool (though we recommend you use the Sophos Endpoint Security and Control or the SAV32CLI). However, all support requests should be posted on the same free tool forum as non-Sophos customers.
When posting to the forum you may want to include the log of the scan, or an extract. The file SophosVirusRemovalTool.log can be found at the following:
C:\ProgramData\Sophos\Sophos Virus Removal Tool\Logs
C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Virus Removal Tool\Logs
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable for us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.