uninstalling Sophos Anti-Virus

Page 1 of 3 123 LastLast

  1. Posts : 139
    Windows 10 home
       #1

    uninstalling Sophos Anti-Virus


    A few years ago I installed the Sophos Home Free version on this little Lenovo Thinkpad computer running windows 10 pro. Version 22H2 (OS Build 19045.4291)

    I tried to uninstall it the other day following steps from the sophos site using the control panel > programs and features. Well it is now gone, but Sophos is still running on the computer. If I go into task manager it shows that sophos endpoint defense software and sophos system protection are still running. If I go to services.msc they are both being shown their as well. If I try to end those items I get a message stating that access is denied - error . Windows could not stop the service on local computer.
    If I go into virus and threat protection it shows that sophos is running. The icon that use to be in the taskbar for sophos is gone and I can only access the home dashboard is to go to the web browser at https://my.sophos.com and log in that way. When I did that it states on the screen that Tamper Protection is off / disabled.
    I tried to find a way to access their community for help with getting this completely uninstalled but had issues with that too. I tried to log in to the community to see about getting some help but it keeps telling me that that authentication failed to please check my credentials and try again.
    I was finally able to access my dashboard via the web address after a few hours of issues with the same message and having to reset the password so I am concerned that if I click that I need to reset my password again, I may be locked out and it took me all day to get that far. The dashboard and a lot of other items are missing from my computer at this time.
    I even tried to find the free version that was installed on my computer a few years ago but they don't offer it anymore and the version that I can find to download is a trial before having to pay for it. I simply want to find a way to get rid of this software entirely.
    Can anyone please help?
    Thank you so very much
      My Computers


  2. Posts : 23,668
    Win 10 Home ♦♦♦19045.4529 (x64) [22H2]
       #2
      My Computer


  3. Posts : 6,992
    22H2 64 Bit Pro
       #3

    Also see:

    SophosZap

    Note   Note

    Only use SophosZap when all other uninstall options have failed.

    Tamper Protection must be disabled



    If it doesn't work then you might need to reinstall Sophos again before uninstalling it.
      My Computer


  4. Posts : 139
    Windows 10 home
    Thread Starter
       #4

    Thanks for the suggestions. Have started reading all that information and the steps to try and fix this annoying situation.

    I did think about trying to reinstall the program, but all I can find on their website is a paid version now. However, on my other computer (which I had not problem uninstalling the program from) I found the folder where I placed the original download (.exe) file so that should work to reinstall it.

    Will let you know how it all works out. Thanks Again

    - - - Updated - - -

    I went to link for the Client Removal Sophos Client Removal Tool - Discussions - Sophos Endpoint - Sophos Community and went to the link to try and uninstall via batch file since the tamper monkey is not enabled when checking the sophos dashboard when I log in via my web browser at https://my.sophos.com it states that tamper protection is disabled.

    But as per the steps
    Uninstall the Sophos Endpoint Agent from Windows' Apps & features. - it is not listed in there

    For Core Agent 2022.2 and older, run uninstallgui.exe from C:\Program Files\Sophos\Sophos Endpoint Agent. --- there is no sophos folder in that location

    For Windows 10 (x64) and Windows Server 2016 and later running Core Agent 2022.4 and later, run SophosUninstall.exe from C:\Program Files\Sophos\Sophos Endpoint Agent. ---- there is no sophos folder in that location either.

    So I am now going to try the information at at the link to use the zaptool and see if that resolves the issue.
      My Computers


  5. Posts : 139
    Windows 10 home
    Thread Starter
       #5

    I have tried all sorts of ways to get this installation of Sophos uninstalled on the computer.
    The information for Service and Support - uninstalling sophos endpoint security and control from the command line or batch file brings up a page Sorry, we cannot find the page.

    The information for Sophos Central Endpoint and Server: Recover a tamper protected system has steps for messing with the registry and I am not sure if I should do that.

    The dashboard icon is not in the taskbar and when I go to start and open the folder for sophos I can click sophos home, but it wants me to enter my password which is what I have been doing for awhile now with no luck. I also noticed that is is showing my other computer which I had no issue with uninstalling this program from in the name of the computer rather than the Lenovo.

    With a bunch of messing around I can get to a page to open the dashboard on the web by going to https://my.sophos.com and entering the password there.

    When I do it that way, it is showing the correct computer / device name.

    I have tried reinstalling the software even though it still shows as being on the computer and in control panel multiple times and after doing this more times than I can count the dashboard icon in in the taskbar, but I still cannot access it that way since it still tells me that the password is incorrect.
    I also do not have the screen as suggested at Just a moment... for disabling the tamper protection. ARGH!!!!!

    I then went to What if I cannot access the Sophos Home UI, or the above listed steps do not work?
    Please see: Disabling Tamper Protection when the Sophos Home user interface is not available. - Advanced Users Just a moment...

    Problem is that states to
    On the Windows sign-in screen, press and hold the Shift key while you select Power > Restart.

    On Choose an option, click Troubleshoot, then click Advanced options and Command Prompt:

    Following the restart, select an administrative account to continue and enter the password.

    Here is where the problem lies with trying to do it that way - I do not have a password on that computer so I have no idea what password then are talking about entering in order to continue the steps in that advanced command prompt information.

    When I first got it I had set one, but that was years ago and I removed it when it had to be sent in for service and I have no idea what that password was anymore.
    Last edited by lnjr; 4 Days Ago at 15:41.
      My Computers


  6. Posts : 6,992
    22H2 64 Bit Pro
       #6
      My Computer


  7. Posts : 139
    Windows 10 home
    Thread Starter
       #7

    Thanks, I will try those and see if I can get that annoying program to uninstall for me.

    Will keep you updated.

    - - - Updated - - -

    Just went to the links and regarding the first option - do I copy all of that and just copy and paste all of that into powershell (in safe mode)? Do I run powershell as an admin account?

    The second link says it is a .exe but when using downloaded arrow Windows antivirus is stopping it and saying it is a threat. I temporarily disabled the antivirus and could download it but as soon as I re-enabled the security I get a message that it is a trojan
    Attached Thumbnails Attached Thumbnails uninstalling Sophos Anti-Virus-capture.jpg  
      My Computers


  8. Posts : 6,992
    22H2 64 Bit Pro
       #8

    I can download it without any problem.

    uninstalling Sophos Anti-Virus-sophos-removal-tool.jpg

    As for the script just copy and paste into Powershell.

    uninstalling Sophos Anti-Virus-powershell.jpg
      My Computer


  9. Posts : 6,992
    22H2 64 Bit Pro
       #9

    As for the trojan message I reckon that you will just have to allow it to run.
      My Computer


  10. Posts : 139
    Windows 10 home
    Thread Starter
       #10

    The program quarantined the download but after I tried again (3rd or 4th time - LOL), I disabled the anti-virus program and when the download completed, I moved it into a folder and then enabled the anti-virus program again.
    I was not sure about running it with that alert but it is still in a folder so I can use it.
    I was thinking that if this does not work, that I am going to do a factory reset on that computer since that computer is only really used when I am having issues with my desktop computer and when the neighbor is up here so that he can play some games that are appropriate for a 5 year old anyway.

    I will let you know how it all goes. Thanks Again!

    - - - Updated - - -

    I just turned on the computer with the issue of trying to uninstall the sophos anti-virus and downloading those files and this computer is blocking that download as well stating virus detected and removed.... grrr... but at least I was able to download the one at this link - Sophos-Removal-Tool/Sophos Removal Tool.ps1 at master . ayeskatalas/Sophos-Removal-Tool . GitHub so I will just restart in safe mode and try running it in powershell. Which option for powershell should I be using? Windows Powershell (x86); Windows Powershell; Windows Powershell ISE or Windows Powershell ISE (x86)?
    Attached Thumbnails Attached Thumbnails uninstalling Sophos Anti-Virus-downloads.jpg   uninstalling Sophos Anti-Virus-quarantined.jpg   uninstalling Sophos Anti-Virus-protection-history.jpg   uninstalling Sophos Anti-Virus-powershell.png  
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 06:05.
Find Us




Windows 10 Forums