Solved!
Go to SolutionClosed
SOSinstaller
I use Windows built in firewall and antivirus software. I constantly get a message that SOSinstaller has been prevented from changing my system.
What is SOSinstaller and if it is a legitimate Dell program why is windows security blocking it?
0
0
Posted February 23rd, 2026 20:59
Hi, We’re now in 2026 and your question still hasn’t been answered :( I ran into the same situation today… !
The SOSInstaller/SOSInstallerTool.exe is a legitimate Dell component.
This tool is published by Dell Inc. and is used as part of SupportAssist OS Recovery, which prepares your system for recovery in case of operating‑system corruption or other critical issues.
Users in Dell’s own community have also confirmed that SOSinstaller is included within Dell’s SARemediation and SupportAssist tools, typically found in the Dell program folders on your PC.
It’s important to note that some antivirus programs may flag SOSInstaller because it performs system‑level actions—such as modifying recovery partitions—that can resemble suspicious behavior. However, these actions are normal and expected for Dell’s recovery tools, not an indication of malware.Antivirus like Harmony Endpoint by Check Point and Windows Defender sometimes block SOSinstaller because it performs actions associated with:
- modifying system-level components
- preparing or modifying the recovery partition
- interacting with boot-repair tools
These behaviors can resemble ransomware or unauthorized system modification attempts, which is why alerts occur.
How to verify it’s safe on your system:
- Make sure the file is located under a Dell directory, such as:
C:\Program Files\Dell\ - Ensure the file is digitally signed by Dell Inc. (right‑click → Properties → Digital Signatures).
If everything matches the above, you can consider it trusted and part of Dell’s legitimate support utilities.
SOSinstaller is tied to:
- SupportAssist OS Recovery
- SARemediation tools
- building/repairing the Dell recovery partition
Dell's SupportAssist documentation mentions OS recovery tools failing to install and requiring updates, showing how SOSinstaller fits into that ecosystem.
If you’re getting security warnings…Whitelisting the Dell folder is a common workaround only if you’ve verified the file is legit and signed by Dell:
C:\Program Files\Dell\
or temporaly disable the antivirus! good luck
OScar.2038
1
Posted July 15th, 2021 09:00
I am using Windows 10 not Windows 11. I just want to know what SOSinstaller is and why Windows 10 security keeps blocking it. Is sosinstaller a Dell product?
1993
0
Posted July 21st, 2021 05:00
anyone know what SOSinstaller is?
Konadreamer
1 Rookie
•
14 Posts
1197
0
Posted November 22nd, 2021 13:00
Not really sure what it does. I think it may be some sort of update tool used by Dell. It can be found here: C:\Program Files\Dell\SARemediation\plugin\