The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
You computer is responding slower than usual after changes were made relating to Sophos Anti-Virus. This may be the result of changes to the Anti-virus and HIPS policy, newly configured scans or a new deployment. Upon investigation, it maybe discovered that a Sophos process/service is consuming a higher than expected percentage of CPU resource or generating increased amounts of disk based activity.
In summary this guide will move you through the following areas:
Operating System Microsoft Windows 2000 and above
Known to apply to the following Sophos product(s) and version(s) Enterprise Console 4.7.1Enterprise Console 5.0.0Enterprise Console 5.1.0Enterprise Console 5.2.0
This article here, reviews the hardware impact on the performance of Sophos Anti-Virus.
This assumes that there is one possibly two active policies in use on your network.
From the server with an Enterprise Console installed.
Sophos Control Center: Configure scanning | on-access scanning | Scanning tab | on-access scanning behavior
From a performance standpoint, Read has the most impact followed by Write and then Rename. The scanning defaults in Sophos Anti-Virus 10 are to have all three enabled for best protection. In all cases, a well defined exclusion is recommended over disabling a category of on-access scanning. See this article for detailed information about scanning recommendations and there protection value.
Sophos Control Center: Configure scanning | on-access scanning | Scanning tab | Scanning options
Sophos Control Center: Configure scanning | Web scanning is
Download scanning can cause minor delays whilst a portion of the data from the site is scanned before delivery to the end user's internet browser, some websites may be adversely affected by this.
Once the computer has been restarted, the Sophos Web Intelligence LSP will be uninstalled, to confirm it has been uninstalled run the following command in a command prompt window to confirm:
netsh winsock show catalog | find "Sophos"
The proceeding line should be empty (Returning no results).
Note: This setting is unavailable in Sophos Control Center, but will be available in the local configuration.
Performance in some applications can be adversely affected by file and process scanning, see this article for links to articles containing common third party exclusions recommendations.
In order to raise a case for technical support, we will require the following information and logging to characterize and investigate the problem for you:
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.