Sophos Anti-Virus

Sophos Anti-Virus

by Sophos Limited

What is Sophos Anti-Virus?

Sophos Anti-Virus is software application developed by Sophos Limited. It is most commonly found on computers running Windows 7 with nearly 56.67% of installations running this operating system. Sophos Anti-Virus's installer is typically 3.00 MB in size and installs around 156 files. The most common release is 10.3.15 with 13.69% of all installations currently using this version.

Sophos Anti-Virus is most popular in the United States with 59.66% of installations residing in this country.

Sophos Anti-Virus adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Sophos Anti-Virus is known to create 1 firewall exception to allow inbound and outbound connectivity.

Software Behaviors

Services:
  • SAVAdminService.exe runs as a service named 'Sophos Anti-Virus status reporter' (SAVAdminService) "Provides information to Windows Security Center on whether Sophos Anti-Virus is up to date and whether on-access scanning is enabled.".
  • SAVCleanupService.exe runs as a service named 'Sophos Cleanup Service' (SAVCleanupService) "Performs cleanup functions.".
  • SavService.exe runs as a service named 'Sophos Anti-Virus' (SAVService) "Performs threat scanning and cleanup functions.".
  • swi_service.exe runs as a service named 'Sophos Web Intelligence Service' (swi_service) "Protects against threats from malicious websites.".
  • swc_service.exe runs as a service named 'Sophos Web Control Service' (Sophos Web Control Service) "Manages Web Control policy.".
  • swi_filter.exe runs as a service named 'Sophos Web Filter' (swi_filter) "Ensures web usage is safe and consistent with policy.".
Firewall:
  • SavMain.exe is added as a firewall exception for '%programfiles%\Sophos\Sophos Anti-Virus\SavMain.exC:*:enableC:SophosAV'.
Scheduled tasks:
  • BackgroundScanClient.exe is scheduled as a task named 'Hebdo Vendredi 12h30' (runs weekly on Fridays at 12:30).
  • SavMain.exe is scheduled as a task with the class '{F732D63F-29E3-4E57-B48F-154965ED74AD}' (runs on registration).

Software Details

URL:
https://www.sophos.com
Support:
https://www.sophos.com/support
Installation path:
C:\Program Files\Sophos\Sophos Anti-Virus\
Uninstaller:
MsiExec.exe /X{9ACB414D-9347-40B6-A453-5EFB2DB59DFA}
Size:
3.00 MB
Language:
English

Sophos Anti-Virus Executable Details

Primary executable:
SAVAdminService.exe
Name:
Sophos Anti-Virus
Path:
C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe
MD5:
791ee9f4a82fc4e13133f107c1c4c286
SHA-1:
–
SHA-256:
–
Files installed by Sophos Anti-Virus
File Type Filename MD5
DLL
wcmresit.dll
8a24dc26498fc06522717ff779444e2b
DLL
wcmreschs.dll
6ecfa1a65d5388f035feb2c3911992fc
DLL
wcmrescht.dll
ba8cf637c02aae84abd11fda84b12a1f
EXE
swi_service.exe
f4b0621f958bdf8e01eaa5423a3fe905
DLL
swi_filter.dll
e19530e3733ba538b85ecb4aa7f8b144
EXE
swi_lsp32_util.exe
2681ed2e9a6c19b49c49a2a49b018ab9
DLL
swi_ifslsp.dll
a49840a88e265c1aa905e2e764690497
EXE
swi_lspdiag.exe
7d94b2da240ed08065379a2fb81b85f2
DLL
configuration.dll
a93572dac141d99ff297cb3c689964b3
DLL
Security.dll
c275b22e6f55e6abc8dd26714aafde8d