Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3260499 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0

    If it s a live lookup detection, AutoUpdate will not need to update to get the update.

    Beyond the alerts, as long as you don't have SAV configured to move/delete files if they fail to be cleaned it should be ok.

    Maybe turn off live lookups (live protection) in the SAV policy for the short term (i.e. 30 mins to prevent new detections)

    Remember things in the QM have not been moved by default they are still in their original location.

    Regards,

    Jak

    :30013
Reply
  • 0

    If it s a live lookup detection, AutoUpdate will not need to update to get the update.

    Beyond the alerts, as long as you don't have SAV configured to move/delete files if they fail to be cleaned it should be ok.

    Maybe turn off live lookups (live protection) in the SAV policy for the short term (i.e. 30 mins to prevent new detections)

    Remember things in the QM have not been moved by default they are still in their original location.

    Regards,

    Jak

    :30013
Children
No Data