Thread Info
  • State Not Answered
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 6 replies
  • Subscribers 6 subscribers
  • Views 18490 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos (Endpoint) and “USB Safely Remove”.

Markus B

I do experience difficulties removing my external USB HDD drives from my computer. Somehow Sophos gets in the way.

I use the software “USB Safely Remove”. When started, it tells me that the HDDs can’t be removed, because of two services that still access the drive. These services are both from Sophos: “SavService” and “svchost”.

I certainly put my external drives on Sophos’ exclusion list. Yet this had no impact on how Sophos handled the external HDDs. Thus, I am unable to remove them.

I would be very grateful if you could help me with this ... and explain to me what I am doing wrong here.

Markus

Endpoint Security and Control =  10.6

Sophos Anti-Virus 10.6.3.537

SavService.exe 10.6.3.537 , size 285136 bytes 

Microsoft Windows 8.1 Pro

 



This thread was automatically locked due to age.
Parents
  • 0

    Hello Markus,

    SavService.exe does not interfere with the Windows' standard Eject or Safely Remove. The screenshot unfortunately shows only processes (what about svchost.exe?) and not which files. Can't say what USB Safely Remove considers geöffnete Dateien - at least one of the svchost.exe processes and savservice.exe normally have a File handle on \Device\HarddiskVolumen but this does not prevent Windows from stopping the device.
    These services are both from Sophos
    no, svchost.exe is definitely not from Sophos, it's part of the OS - what makes you think it's from Sophos?

    There's no evidence (other than the claim from USB Safely Remove) that Somehow Sophos gets in the way and in addition there's svchost.exe. It's likely the software - either misconfigured or incorrectly assessing the situation.

    Christian

  • 0 in reply to QC

    Hi Christian,

    Thanks a lot for your reply!

    Yes, you are certainly right. It is abundantly clear that Sophos is not the culprit.

    In any case, I believe that I now have managed to solve the problem. For about two weeks, I have no longer had any difficulties with removing my external hard drives from my computer. What did I do? Well, here is a list, and in it the name “Sophos”, quite unsurprisingly, does not pop up:

    • I verified (again) the USB power settings in the device manager (for all the devices that appear in the list).
    • I changed the settings for the page files of the all the HDDs that are attached to my computer.
    • I changed the settings for the Window’s file history function.
    • And two weeks ago, I installed “KeepAliveHD”, which keeps all the external hard drives spinning (and this really seems to be necessary for my two WD HDDs in particular).

    So thanks again!
    Markus

Reply
  • 0 in reply to QC

    Hi Christian,

    Thanks a lot for your reply!

    Yes, you are certainly right. It is abundantly clear that Sophos is not the culprit.

    In any case, I believe that I now have managed to solve the problem. For about two weeks, I have no longer had any difficulties with removing my external hard drives from my computer. What did I do? Well, here is a list, and in it the name “Sophos”, quite unsurprisingly, does not pop up:

    • I verified (again) the USB power settings in the device manager (for all the devices that appear in the list).
    • I changed the settings for the page files of the all the HDDs that are attached to my computer.
    • I changed the settings for the Window’s file history function.
    • And two weeks ago, I installed “KeepAliveHD”, which keeps all the external hard drives spinning (and this really seems to be necessary for my two WD HDDs in particular).

    So thanks again!
    Markus

Children
No Data
Unfiltered HTML