This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

This thread was automatically locked due to age.

0 Dave56 over 13 years ago

Yes, I'm seeing the same thing. I'm hoping this is a false positive.
:29725
Cancel
Vote Up 0 Vote Down

Cancel
0 BHSCT over 13 years ago

Yes started to see them after server scan kicked in at 9. Over 100 so far....
Michael
:29727
Cancel
Vote Up 0 Vote Down

Cancel
0 jhuntley over 13 years ago

Yup Im getting spammed by all these alerts as well :smileymad:
:29729
Cancel
Vote Up 0 Vote Down

Cancel
0 MikeStrode over 13 years ago

Yes, I am seeing this as well. Looks like Sophos got a bit too sensitive
:29731
Cancel
Vote Up 0 Vote Down

Cancel
0 keith_co over 13 years ago

seeing this on almost all my machines, for a variety of dll items.
SynapseUpdateModule.dll
Hewlett-Packard\Headless Server Registry Update\HeadlessUpdateVersion.dll
Hewlett-Packard\CK-804 chipset - PLX bridge\CK804FixVersion.dll
:29733
Cancel
Vote Up 0 Vote Down

Cancel
0 markinh over 13 years ago

yes, here too.
Its google Chrome Updater?
:29735
Cancel
Vote Up 0 Vote Down

Cancel
0 Maestro over 13 years ago

Yep they're coming in fast and furious on my network now. So far it's flagged the Apple Software Update, Google Updater, and its own updater as having this spyware. I'm thinking somebody fat fingered a definition update somehow.
:29737
Cancel
Vote Up 0 Vote Down

Cancel
0 rteguy over 13 years ago

Yes, this just started happening for us. All PCs. It quarantined two Sophos updater files and a Flash file. The shh/Updater-B when you click the name, doesn't showup on Sophos as a valid search term. Charles
:29739
Cancel
Vote Up 0 Vote Down

Cancel
0 tcingle over 13 years ago

Also seeing it. I have to believe this is an error.
:29741
Cancel
Vote Up 0 Vote Down

Cancel
0 daveywilks over 13 years ago

I've just started seeing these about 5 mins ago
:29743
Cancel
Vote Up 0 Vote Down

Cancel