Sophos Vs. Regular Method
As can be seen in this illustration, it takes a lot more time to match a file against all known virus signatures than it does to recompute a checksum and compare it. The full scan has to be performed once in the beginning in order to determine if the file is free of viruses.
Learn more about Sophos