Sophos Anti-Virus: Unknown scanning status- Event ID 13

Issue
When you open the Sophos Anti-Virus main application, on-access scanning status is displayed as 'Unknown'. Typically this will also display as 'inactive' in the Enterprise Console.

In the Windows event viewer you may also see:

Event ID 13 - The requested component ICmanager is in a failure state the component will not be returned

First seen in
Sophos Anti-Virus for Windows 2000+ 7.6.21

What to do

On the affected computer:

1. Click Start | Run | Type: cmd.exe | Press return.
2. In the command prompt window type:
   • Windows 32-bit: del "c:\Program Files\Sophos\Sophos Anti-Virus\savsync.upd"
   • Windows 64-bit: del "c:\Program Files (x86)\Sophos\Sophos Anti-Virus\savsync.upd"
   NOTE: No confirmation is shown in the command prompt if the file was successfully deleted. To confirm the file has been removed successfully type: dir savsync.upd and ensure File Not Found is displayed on screen.
3. In the command prompt window type:
   • Windows 2000/2003/XP 32-bit:
     MsiExec.exe /i "c:\Program Files\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi" REINSTALL=ALL REINSTALLMODE=voums UPDATEDRIVERS=0 /l*v c:\msi.log /qb
   • Windows 2003/XP 64-bit:
     MsiExec.exe /i "c:\Program Files (x86)\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi" REINSTALL=ALL REINSTALLMODE=voums UPDATEDRIVERS=0 /l*v c:\msi.log /qb
   • Windows Vista/2008/7:
     MsiExec.exe /i "c:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi" REINSTALL=ALL REINSTALLMODE=voums UPDATEDRIVERS=0 /l*v c:\msi.log /qb