Detection and disinfection
Sophos software has a heuristic capability built into its standard detection methods which allows it to detect some virus variants which have not yet been analysed by the Sophos labs. However, because Sophos intelligently tempers its heuristic capability with other virus-detection technology it is less likely than some competing products to cause false alarms.

Once a virus has been detected, the Sophos virus engine automatically disinfects macro and boot sector viruses. The software can also disinfect common executable viruses.

Sophos's excellent detection rates are regularly recognised and certified by a wide variety of independent testing bodies including TruSecure ICSA Labs, West Coast Labs and Virus Bulletin. The software is also routinely commended by many industry magazines and journals.