This afternoon I reproduced symptoms almost identical to those seen on Snow Leopard, with Mac OS X 10.7.2 Lion on a brand new MacBook Air.
Neither FileVault 1 nor FileVault 2 was used.
Shortly after logging in, immediately after a click on the Sophos menu icon, the system became completely unusable; I could move the mouse, but that was about the end of it. No response to clicks, and so on.
A difference, compared to behaviour on Snow Leopard: this afternoon with Mac OS X 10.7.2 I was able to connect remotely via ssh, so I ran sysdiagnose. Not all parts of the routine completed — I had to interrupt the allmememory part, to sudo shutdown restart then remove Sophos Anti-Virus; install ClamXav and ClamXav sentry; and finally hand the computer to the person who was waiting for it.
From this afternoon's incident:
— at a glance I see nothing personal within the files, so I'm happy to share these.
If it helps: I used launchctl to unload three Sophos-related daemons but still, no go. Also, after I killed SystemUIServer it did not restart.
