How to recover a Sophos tamper protected system

4.5

Design

4.5/5

Feel and Look

4.5/5

Performance

4.5/5

Ease of Use

4.5/5

Relevancy

4.5/5

This tip applies to Sophos Security admins or anyone managing a Sophos security service or features such as Sophos Antivirus available at Sophos home or Central.

Sophos Home is business-grade cybersecurity and is available to every Zambian home users for free.

If you do not have access to Sophos Central the following steps can be used. To recover a tamper protected system, you must disable Enhanced Tamper Protection.

The following procedure will work:

1. Boot the system into Safe Mode.
   Click Start > Run > type services.msc > right-click Sophos Anti-Virus service > Properties > set the Startup type to Disabled > then click OK.
   Click Start > Run > type regedit and then click OK.
2. Go to the following location in the registry editor:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sophos MCS Agent and set the REG_DWORD Start to 0x00000004.
3. Go to the following location in the registry editor:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense\TamperProtection\Config and set the following REG_DWORD values SAVEnabled and SEDEnabled to 0 .
4. Go to the following location in the registry editor:
   HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Sophos\SAVService\TamperProtection and set the REG_DWORD Enabled to 0.
5. Reboot the system in normal mode.

Enhanced Tamper Protection is now disabled and you should now be able to access the system and make the necessary changes desired.

Feedback

If you have tips and suggestions don’t hesitate to contact me

More Posts That May Interest You:

You Can Now Install Sophos XG Firewall On Virtual Machines How to rebuild SYSVOL share and NETLOGON share Offer of the Day: MTN Home Pack Gets You100GB for Price of 20GB Protect your machine from Meltdown and Spectre Two out of three organizations fell victim to a cyberattack in 2018 Finally Chat will Put To Use My Thousand SMS Bonus How To Unlicense Office 365 MailBox User One UI 3 Upgrade Android 11 Full Changes Why iPhone 7 Product Red is not Popular in Zambia Are IT Managers in Zambia ready for work from home PowerShell commands to manage Business Central Types of IPv4 Addresses 5 Special IPv4 Address Blocks Qu’est-ce qu’une assurance ? Définition d’une assurance Here is the list for download of 30,000 teachers recruitment in Zambia in 2022 Security defaults replacing baseline protection policies in Azure AD How do i recover acces to my phone Astro Genesis Phab The First Phone That Introduced Me To Android OS Combating Coronavirus using technology Every Zambian Is Trying FaceApp