Sophos Endpoint: How to using Sophos ZAP Tool to uninstall Endpoint or Server Protection on Windows machine


SophosZap is a last resort command line clean-up tool focused on uninstalling Sophos Endpoint products to revert a device to a clean state

SophosZap can remove problematic setups involving:

  • HitmanPro Alert (HMPA)
  • HitmanPro (HMP)
  • Sophos Central Endpoint
  • Sophos Central Message Relay
  • Sophos Central Server
  • SEC managed endpoint
  • Sophos Home
  • Sophos Anti-Virus (standalone)
  • Sophos Clean
  • Update Cache
  • Other Sophos standalone products

How to configure

Disable Tamper Protection

  • Log in to Sophos Central by Admin account -> Select the workstation or server you want to remove Sophos software
  • Click Disable Tamper Protection

Download Sophos ZAP Tool

  • Click the link to register and download the Sophos ZAP file
  • Enter your information

Open Command Prompt with Administrator privilege

  • Go to the location where the Sophos ZAP file is saved with cd command
  • Run the file with the command SophosZap –confirm

Reboot the machine

  • After rebooting -> Open cmd again with Administrator privilege -> Go to the place where the Sophos ZAP file is stored -> Run the SophosZap –confirm one more time

Reboot the workstation again -> The uninstallation is complete

1 Comment

  1. Can anyone tell me how on earth I can get rid of a bit of Sophos software stuck in my iMac even after a clean install.
    I’ve tried everything I think but I can’t find the zap tool for Mac ! Is there one?
    Any help would be much appreciated , she’s getting angry in there and she needs to go. !!!

    Many thanks in anticipation

    Ian Francis

Leave a Reply

Your email address will not be published.


This site uses Akismet to reduce spam. Learn how your comment data is processed.