Sophos Antivirus

What is Sophos?

Sophos is the antivirus that Husson provides for all staff, student, and faculty machines.

Sophos runs by itself in the background of most Husson machines. You do not need to start Sophos or interact with it in any real fashion. In most cases, the only reason you should even know it is there is because of a warning message.


Sophos Available for Free Home and Personal Use

A free, fully-functional version of Sophos is available to all Husson faculty, staff, and students for their own personal use. 

To install Sophos on a personal Windows-based computer

  1. Log into your Husson Gmail account here:
  2. Click here to save the file to your computer.
  3. Open this file and run  "SophosEndpoint.exe" inside. 
  4. Immediately after installing, you will need to leave your computer connected to the Internet for several minutes so that Sophos can run updates.

To download Sophos for a Mac, visit sophos.com.


Running an antivirus scan with Sophos

You can open the Sophos panel by typing “Sophos Endpoint Security and Control” or simply “Sophos” into the search bar on the start menu.



When you open Sophos, you’ll be presented with a number of options. You’ll notice that one of these options is “tamper protection.” This means that you can click around and explore this program as freely as you’d like with no risk of damage to the software. To run an antivirus scan, simply click “Scan my Computer.”



You will get a popup box that looks like this:




Sophos will prompt you to quarantine, delete, or remove any infected files it finds. Follow the prompts in order to do so. 

To scan only one item at a time, right-click that item and select "scan with Sophos." 


What does a real warning look like?

Real warning messages look like this:



Clicking on this message will bring up a box that looks like this: (click for full size image)



It will contain the name and details of the virus detected, along with available actions. Most of the time, Sophos will auto-clean a virus file without needing any user assistance. The virus above was only on this list for a few seconds before being cleaned off the system. If no infected files are present on your hard drive, Sophos will display a “no items to display” message.

If you get a popup message it is probably best to run an antivirus scan with Sophos, just to make sure your PC is really clean.


Beware of FAKE antivirus messages!

These messages are examples of fake antiviruses:



Source


Source


Fake antivirus messages look something like this. If you aren’t sure if an antivirus message is legitimate, here are a few telltale signs of a fake:

1. Different headers. Look at the popup in the above image. The header for the window is blue, like the headers for windows in Windows XP. If the header on the message does not look like the header on other windows, the message is probably a fake.

2. Poor spelling and grammar. Most viruses come from overseas, so it will be easy to spot grammar and spelling mistakes including incorrect capitalization, punctuation, or verb usage.

3. Unusually urgent or specific messages. Fake antivirus popups will use a sense of urgency to try to frighten you into clicking on them. They will state that software on your computer is doing something specific, such as stealing your credit card information or copying your private data. They will use capitalization, bright colors, and exclamation points to insist that you run a scan or download a program immediately.

4. Asking you to register, upgrade, or download software. Sophos is paid for by the school and updated automatically. It will never ask you for your personal information or credit card number.

False antivirus programs are themselves viruses. They try to get you to download programs which are actually just more viruses and spyware. “Purchasing” these antivirus programs simply gives your credit card information to scammers and thieves. If you see these popups on your computer, it is likely that you are already infected with malicious software, and you should run a real antivirus scan with Sophos, right away.

A rather detailed list of fake antivirus information can be found HERE.

If you still aren't sure, contact the Information Resources office and we will be happy to take a look.