Applies to: Sophos Home for Windows
Some games behave in ways that might trigger antivirus protections, which will block them from running. For Sophos Home, this is typically related to our Exploit module, due to which, a new feature Game Detection has been introduced since the Windows CIXHOME 2023.2 release on May 8, 2024.
How to enable Game Mode
- Log in to your Sophos Home dashboard
- Open the impacted device
- Navigate to PROTECTION-> General -> Game Detection
- Click on the toggle to activate it (right position: active, left position: disabled
- Reboot the computer and launch the game again.
If the game continues to be blocked, refer to Adding local exclusions/Allowing Installations and/or applications to run to create an exclusion, or see below for a list of game examples that could require manual exclusions. The recommended workarounds are listed in each scenario:
⚠️Attack Intercepted when using Easy Anti Cheat (EAC)
We are aware that when launching games using Easy Anti Cheat (EAC), Sophos Home may trigger "Attack Intercepted" alerts on launch.
Our Product team is working on improving game compatibility in the future. The expected date for a compatibility update is Mid 2024.
WORKAROUND
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the game executable path (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
Path examples:
C:\Program Files\Epic Games\Fortnite\FortniteGame\Binaries\Win64\FortniteClient-Win64-Shipping.exe
C:\Program Files\EA Games\Battlefield 2042\BF2042.exe
C:\Program Files (x86)\iRacing\iRacingSim64DX11.exe
- Paste it under "Add local exclusion" > Select open
- Restart your computer to apply the changes
⚠️Attack Intercepted when launching Steam Games
We are aware that some Windows Steam games might trigger "Attack Intercepted" alerts on launch.
Our Product team is working on improving game compatibility in the future. The expected date for a compatibility update is Mid 2024.
Example of detection
WORKAROUND
- Click Manage to access your Sophos Home Dashboard
- On the detection, click Show Advanced Options
- Click Allow and Unblock via Did we get this wrong? to whitelist the game
- Choose Allow Behavior (preferred option), or if desired Allow application (this will whitelist any mitigation coming from this application from now on).
- Restart your computer to apply the changes
If the problems persist, add a local exclusion for the affected games using these steps as a reference
Add a local exclusion
Battlefield 2042
Symptoms:
Sophos Home will report APC Violation malicious behaviors are being prevented while trying to play Battlefield 2042.
Solution:
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the game executable path (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
Path example:
C:\Program Files\EA Games\Battlefield 2042\BF2042.exe
- Paste it under "Add local exclusion" > Select open
- Restart your computer to apply the changes
Call of Duty games
Call of Duty Warzone and COD Modern Warfare
Symptoms: When attempting to launch Warzone it will not respond
Follow these steps to add a local exclusion:
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the game executable path (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
Path examples:
C:\Program Files (x86)\Call of Duty Modern Warfare\ModernWarfare.exe
C:\Program Files (x86)\Activision\Call of Duty Modern Warfare\ModernWarfare.exe
- Paste it under "Add local exclusion" > Select open
- Restart your computer to apply the changes
Call Of Duty: Vanguard
If you experience issues with this game, try these steps:
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the game executable path (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
Path example:
C:\Program Files (x86)\Call of Duty Vanguard\Vanguard.exe
- Paste it under "Add local exclusion" > Select open
- Restart your computer to apply the changes
Call Of Duty: Black Ops Cold War
If you experience issues with this game, try these steps:
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the game executable path (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
Path example:
C:\Program Files (x86)\Call of Duty Black Ops Cold War\BlackOpsColdWar.exe
- Paste it under "Add local exclusion" > Select open
- Restart your computer to apply the changes
Call Of Duty: Modern Warfare 2
If you experience issues with this game, try these steps:
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the game executable path (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
Path example:
C:\Program Files (x86)\Call of Duty Modern Warfare 2\ModernWarfare2.exe
- Paste it under "Add local exclusion" > Select open
- Restart your computer to apply the changes
Please note: If you are launching the game through the Activision Blizzard Launcher, additional exclusions may be required, similar to the following:
C:\Games\Blizzard\Call of Duty Modern Warfare 2\_retail_\Call of Duty Modern Warfare 2.exe
C:\Games\Blizzard\Call of Duty Modern Warfare 2\_retail_\Call of Duty Modern Warfare 2-loader.dll
C:\Games\Blizzard\Call of Duty Modern Warfare 2\Call of Duty Modern Warfare 2 Launcher.exe
Deathloop
Symptoms:
Launching Deathloop will be blocked by Sophos Home with Kernel 32 Trap detection.
Solution:
Adding a local exclusion for the following game executable paths will resolve this issue.
Workaround steps:
1. Open Sophos Home application system tray
2. Click on "Help" on the left side
3. Select "Troubleshooting"
4. Click on "Add local exclusion"
5. Copy the game executable path, depending on where the game is installed the directories may vary:
(For example, copy- D:\Xbox\DEATHLOOP\Content\bin\win64-vc141-shipping-d3d12-xboxlive-ltcg\Deathloop.exe)
D:\Xbox\DEATHLOOP\Content\bin\win64-vc141-shipping-d3d12-xboxlive-ltcg\Deathloop.exe
D:\Xbox\DEATHLOOP\Content\gamelaunchhelper.exe
C:\Program Files\WindowsApps\BethesdaSoftworks.ProjectPrism_1.6.0.0_x64_ROW_3275kfvn8vcwc\bin\win64-vc141-shipping-d3d12-xboxlive-ltcg\Deathloop.exe
C:\Program Files\WindowsApps\BethesdaSoftworks.ProjectPrism_1.6.0.0_x64_ROW_3275kfvn8vcwc\GameLaunchHelper.exe
6. Paste it under "Add local exclusion" > Select open
7. Restart your computer to apply the changes
Diablo II Resurrected
Symptoms: During gameplay, you may get a Dynamic Shell Code detection for Diablo II Resurrected
Solution: Adding a local exclusion for the game executable (D2R.exe) path will resolve this issue.
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the game executable path (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
- Paste them under "Add local exclusion" > Select open
- Restart your computer to apply the changes
Diablo 3
Symptoms:
On Windows 7 6.1.7601 SP1 build 7601 Diablo 3 will crash on launch if Sophos Home's Exploit Mitigation is active. This is due to a conflict between these applications in this environment.
Solution:
This can be resolved by adding a local exclusion for the path of the game executable (Diablo III64.exe).
This issue is not present on Windows 10.
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the Diablo III64.exe executable path (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
- Paste them under "Add local exclusion" > Select open
- Restart your computer to apply the changes
Elder Scrolls Online
Symptoms:
After launching Elder Scrolls Online, it immediately closes due to a conflict with Sophos Home's exploit mitigation feature.
Solution:
This can be resolved by adding a local exclusion for the path of the game executable.
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the Elder Scrolls Online executable path (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
- Paste them under "Add local exclusion" > Select open
- Restart your computer to apply the changes
Fallout 76
Symptoms:
Launching Fallout 76 will be blocked by Sophos Home if Exploit Mitigation protection is active.
Solution:
Adding a local exclusion for the game executable (Project76_GamePass.exe) path will resolve this issue. NOTE: You may not able to add a local exclusion directly by selecting the game executable (Project76_GamePass.exe) path because of a file permission issue.
Workaround steps:
1. Open Sophos Home application system tray
2. Click on "Help" on the left side
3. Select "Troubleshooting"
4. Click on "Add local exclusion"
5. Copy the game executable path:
(For example, copy- C:\Program Files\WindowsApps\Mutable\BethesdaSoftworks.Fallout76-PC_1.0.30.0_x64__3275kfvn8vcwc\Project76_GamePass.exe)
6. Paste it under "Add local exclusion" > Select open
7. Restart your computer to apply the changes
FiveM mod for GTA 5
Symptoms:
This mod will be prevented from running by Sophos Home's Exploit mitigation feature.
Solution:
This can be resolved by adding a local exclusion for the path of the FiveM executable (typically C:\Users\{{UserName}}\AppData\Local\FiveM\FiveM.app\cache\subprocess\FiveM_GTAProcess.exe
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the GTAProcess.exe executable path (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
- Paste them under "Add local exclusion" > Select open
- Restart your computer to apply the changes
For Honor
Symptoms:
Launching For Honor will be blocked by Sophos Home with Malicious Code detection such as in below screenshot.
Solution:
Adding a local exclusion for the following game executable paths will resolve this issue.
Workaround steps:
1. Open Sophos Home application system tray
2. Click on "Help" on the left side
3. Select "Troubleshooting"
4. Click on "Add local exclusion"
5. Copy the game executable path, depending on where the game is installed the directories may vary:
(For example, copy- C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\ForHonor\forhonor.exe)
C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\ForHonor\forhonor.exe
6. Paste it under "Add local exclusion" > Select open
7. Restart your computer to apply the changes
Fortnite
Symptoms:
Sophos Home will report APC Violation malicious behaviors are being prevented while trying to play Fortnite.
Solution:
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the game executable path (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
Path example:
C:\Program Files\Epic Games\Fortnite\FortniteGame\Binaries\Win64\FortniteClient-Win64-Shipping.exe
- Paste it under "Add local exclusion" > Select open
- Restart your computer to apply the changes
Forza Horizon games
Symptoms:
You are unable to launch Forza Horizon games due to Sophos Home blocking it, or nothing happening. For example: Launching Forza Horizon 4 will be blocked by Sophos Home if Risk Reduction protection is active.
Solution:
Adding a local exclusion for the game executable (for example: ForzaHorizon4.exe) path will resolve this issue.
NOTE: You may not be able to add a local exclusion directly by selecting the game executable (for example: ForzaHorizon4.exe) path because of a file permission issue.
You'll need to find the game executable file, and add the entire path (which may change from computer to computer) -
Path examples for Forza Horizon games
These paths may slightly change from computer to computer, however, the .exe file will be the same.
Local Exclusions
Forza Horizon 3:
C:\Program Files\WindowsApps\Microsoft.OpusPG_1.0.125.2_x64_8wekyb3d8bbwe\forza_x64_release_final.exe
Forza Horizon 4:
C:\Program Files\WindowsApps\Microsoft.SunriseBaseGame_1.474.687.2_x64_8wekyb3d8bbwe\ForzaHorizon4.exe
Follow these steps to add the Local exclusion:
1. Open Sophos Home application system tray
2. Click on "Help" on the left side
3. Select "Troubleshooting"
4. Click on "Add local exclusion"
5. Copy the game executable path from the C: drive (this will exist regardless of where the actual game installation is located- Refer to Path examples for ideas where to search)
6. Paste it under "Add local exclusion" > Select open
7. Restart your computer to apply the changes
Genshin Impact
Symptoms:
Launching Genshin impact will be blocked by Sophos Home with Malicious code detection.
Solution:
Adding a local exclusion for the following game executable paths will resolve this issue.
Workaround steps:
1. Open Sophos Home application system tray
2. Click on "Help" on the left side
3. Select "Troubleshooting"
4. Click on "Add local exclusion"
5. Copy the game executable path, depending on where the game is installed the directories may vary:
(For example, copy- J:\Genshin Impact\Genshin Impact game\GenshinImpact.exe)
J:\Genshin Impact\Genshin Impact game\GenshinImpact.exe
6. Paste it under "Add local exclusion" > Select open
7. Restart your computer to apply the changes
Halo Infinite
Symptoms: When attempting to launch Halo Infinite, it may not respond/crash
Follow these steps to add a local exclusion for HaloInfinite.exe:
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy
HaloInfinite.exe
executable path
Path example:
C:\Program Files\WindowsApps\Microsoft.254428597CFE2_1.3242.15531.0_x64__8wekyb3d8bbwe\HaloInfinite.exe
- Paste it under "Add local exclusion" and click Open
- Restart your computer to apply the changes
Hitman 3
Symptoms: When attempting to launch Hitman 3, it may not respond/crash
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy
Hitman3.exe
executable path
Path example:
C:\Program Files\WindowsApps\IOInteractiveAS.PC-HITMAN3-BaseGame_1.0.16.0_x64__6h0y724g59e1w\Retail\hitman3.exe
6. Paste it under "Add a local exclusion" and click Open
7. Restart your computer to apply the changes
iRacing
Symptoms:
Sophos Home will report APC Violation malicious behaviors are being prevented while trying to play iRacing.
Solution:
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the game executable path (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
Path example:
C:\Program Files (x86)\iRacing\iRacingSim64DX11.exe
- Paste it under "Add local exclusion" > Select open
- Restart your computer to apply the changes
League of Legends
Symptoms:
When attempting to launch League of Legends, it will not start, or will crash shortly after trying to start.
Solution:
Adding a local exclusion for the game executable (C:\Riot Games\League of Legends\Game\League of Legends.exe) path will resolve this issue.
NOTE: If you have installed the game to a different location, you will want to use that location instead.
Workaround steps:
1. Open Sophos Home application system tray
2. Click on "Help" on the left side
3. Select "Troubleshooting"
4. Click on "Add local exclusion"
5. Copy the game executable path:
(For example, copy- C:\Riot Games\League of Legends\Game\League of Legends.exe)
6. Paste it under "Add local exclusion" > Select open
7. Restart your computer to apply the changes
Mass Effect Legendary Edition
Symptoms:
Launching Mass Effect Legendary Edition will be blocked by Sophos Home if Prevent code cave utilization is active.
Solution:
Adding a local exclusion for the game executable (MassEffectLauncher.exe) path will resolve this issue
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy
HaloInfinite.exe
executable path
- . Paste it under "Add local exclusion" > Select open
- Restart your computer to apply the changes
Overwatch 2
Symptoms:
Overwatch 2 will crash a couple seconds after start up with Sophos Home installed.
Solution:
Adding a local exclusion for the following paths should resolve this issue:
C:\Games\Blizzard\Overwatch\_retail_\Overwatch.exe
C:\Games\Blizzard\Overwatch\_retail_\Overwatch-loader.dll
C:\Games\Blizzard\Overwatch\Overwatch Launcher.exe
Note: Overwatch 2 may be installed to a different location than C:\Games\Blizzard\Overwatch\
on your system. Other common locations include C:\Program Files (x86)\
, C:\Program Files\
, and additional drives besides C:
(such as D:
, E:
, or other letters).
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the game executable paths (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
- Paste them under "Add local exclusion" > Select open
- Restart your computer to apply the changes
Sea of Thieves
Symptoms:
After launching Sea of Thieves, it immediately closes due to a conflict with Sophos Home's exploit mitigation feature.
Solution:
This can be resolved by adding a local exclusion for the path of the game executable.
(After the exclusion is added, restart your computer to apply the changes)
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the Sea of Thieves game executable path (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
- Paste them under "Add local exclusion" > Select open
- Restart your computer to apply the changes
Sims 4
Symptoms:
When launching Sims 4 through origin the game crashes.
Solution:
This can be resolved by adding a local exclusion for the path of the game executable (typically c:\program files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe) OR by toggling off 'Prevent code cave utilization' under the advanced settings for exploit mitigation (this last option is the least recommended, as it will leave the computer vulnerable to code cave attacks).
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the TS4_x64.exe executable path (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
- Paste them under "Add local exclusion" > Select open
- Restart your computer to apply the changes
Star Citizen
Symptoms:
Sophos Home will report APC Violation malicious behaviors are being prevented while trying to play Star Citizen.
Solution:
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the game executable path (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
Path example:
C:\StarCitizen\StarCitizen\PTU\Bin64\StarCitizen.exe
- Paste it under "Add local exclusion" > Select open
- Restart your computer to apply the changes
Star Wars - Rogue Squadron on EA Origin
Symptoms:
Updating Star Ware Squadrons in EA Origin will fail with Sophos Home's ransomware protection enabled.
Solution:
The workaround is to temporarily disable this feature. This is done at the user's discretion with the understanding that you may not be protected against Ransomware while this feature is disabled and should be immediately turned back on once the update is completed.
This is done by toggling the Ransomware setting to the left (off) on the Ransomware tab of your Sophos Home Dashboard for the affected device.
Tom Clancy's Rainbow Six Siege
Symptoms:
The game will close itself with no detections or errors while trying to play the online mode of Tom Clancy's Rainbow Six Siege
Solution:
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Replace the 'USERNAME' in the game path below with the current username logged into the computer. Copy the game executable path
Path example:
C:\Users\USERNAME\AppData\Local\Ubisoft\r6siege\RainbowSix.exe
- Paste it under "Add local exclusion" > Select open
- Restart your computer to apply the changes
Tom Clancy's The Division 2
Symptoms:
Sophos Home will report APC Violation malicious behaviors are being prevented while trying to play Tom Clancy's The Division 2.
Solution:
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the game executable path (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
Path example:
C:\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's The Division 2\TheDivision2.exe
- Paste it under "Add local exclusion" > Select open
- Restart your computer to apply the changes
World of Warcraft (WoW)
Symptoms:
On Windows 7 6.1.7601 SP1 build 7601 WoW will crash on launch if Sophos Home's Exploit Mitigation is active. This is due to a conflict between these applications in this environment.
Solution:
This can be resolved by adding a local exclusion for the path of the game executable (Wow.exe). This issue is not present on Windows 10.
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the game executable path (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
Path example:
C:\Program Files (x86)\World of Warcraft\_retail_\wow*
- Paste it under "Add local exclusion" > Select open
- Restart your computer to apply the changes
XDefiant
Symptoms:
XDefiant will crash on launch (Or after being open for a few minutes) if Sophos Home's Exploit Mitigation is active.
Solution:
This can be resolved by adding a local exclusion for the path of the game executable (XDefiant.exe).
- Open Sophos Home application system tray
- Click on "Help" on the left side
- Select "Troubleshooting"
- Click on "Add local exclusion"
- Copy the game executable path (if you are using a drive other than C:, the exclusion will not appear, but it WILL work)
Path example:
C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\XDefiant\XDefiant.exe
- Paste it under "Add local exclusion" > Select open
- Restart your computer to apply the changes