Perhaps the following may discover whatever junk happened to gain
access to your macOS, whenever/whatever brought Sophos AV into the
mix. Almost like something else may be masquerading there, instead?
Had thought you could get & try EtreCheck (free version/download) as
that probably may show some anomalous cause. Or left-over 'funkware
debris' that cannot be removed by Sopho's own re-moval tools.
"EtreCheck is a FREE simple little diagnostic tool to display the
important details of your system configuration, and allow you
to copy that information to the Clipboard. ~ It is meant to be
used to share with Apple Support Communities to help people
help you with your Mac. ~ It will not display any personal info.."
EtreCheck can generate a report of your system & leaves nothing
to cause issues. The report can tell quite a bit about Mac's status.
This can help troubleshoot/remove items that can affect macOS.
A report with detail of what's happening in mac is highly desired.
..Enter the report here using the Icon in bottom of reply window;
one that looks like a word document. So we can read it online.
• About EtreCheck - details, how it works, & more info
https://etrecheck.com/
These etrecheck reports are lengthy; this allows larger file copy
to open in separate window, from a box inside this space..
Good luck & happy computing!🌞
