Cannot disable Sophos 10 LSP

Question

We're having issues disabling the Sophos 10 64-bit LSP using the following command:

C:\ProgramData\Sophos\Web Intelligence\swi_lsp32_util.exe -u -d swi_ifslsp_64.dll

This works on he 32-bit version, but not the 64. After running the above command we get the following error:

retrieveLSPGUID: LoadLibraryA(swi_ifslsp_64.dll) failed: 193

Has anyone run into this before? Google didn't have much to say about that error.

Thanks in advance.

EDIT:

I forgot to add that I also tried using Windows 7 regsvr32 /u, but it did not work. I got the following error:

The module "C:\Program Data\Sophos\Web Intelligence\swi_ifslsp_64.dll" failed to load.

Make sure the binary is stored at the specified path or debug it to check for problems with the binary or dependent .DLL files.

The specified module could not be found.

This thread was automatically locked due to age.

jak · Accepted Answer

Hello,

As an example, on Win7, if I open the SAV UI and go to Configure - Anti-Virus - Web protection, and set both to Off.

Then if enabled turn off Web control, via: Configure - Web control and disable that.

Under:
hklm`software`wow6432node`sophos`web Intelligence`

(assume 64-bit) there should be a dword value called SwiUpdateAction, and will be set to 3.

Starting the service:

Sophos web intelligene update service

will read that value and remove the LSP.

This action can be confirmed by running:

netsh winsock show catalog > cat.txt

cat.txt will have no reference to Sophos if the LSP is removed.

Another way of removing the LSPs is to run:

netsh winsock reset

But be careful with this one, it will return winsock to the default state, i.e. remove all LSPs including any other third party ones.

Checking the cat.txt first would allow you to see if there are any others.

Regards