Sophos Anti-Virus: the Sophos Temp directory is full of $$$ files

  • Article ID: 43698
  • Rating:
  • 38 customers rated this article 3.7 out of 6
  • Updated: 19 May 2015

Important: This issue was fixed in VE 3.57.4 December 2014. In order to benefit from the fix, you must ensure that you are using the latest version of the engine.


You have one or more files with a $$$ file extension that are very large in one of the following locations:

  • C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Temp
  • C:\ProgramData\Sophos\Sophos Anti-Virus\Temp

First seen in
Sophos Anti-Virus for Windows 2000+


These are temporary files that have been extracted by the scanning engine while scanning an archive file larger than 1MB and are normally removed when the scan has successfully completed.

If a scan has been forcibly terminated (not cancelled) through ending a Sophos process then the file(s) will remain and must be removed manually.

We are investigating this issue as DEF50386 to see if the files can be automatically cleaned up.

What To Do

  1. Stop the Sophos Anti-Virus service (SavService.exe).
  2. Delete the $$$ files.
  3. Restart the Sophos Anti-Virus service.

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent