Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3260532 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0

    I suspect this particular "threat" is an internal test that should not have been propagated out.  The number of different items detected seem to indicate that it is far too broad to be a normal virus detection key.  That, and the fact that the name Shh/Updater-B is mostly finding software that performs updates makes me believe that it is a test pattern used when testing quarantine responses in Sophos.

    :30079
Reply
  • 0

    I suspect this particular "threat" is an internal test that should not have been propagated out.  The number of different items detected seem to indicate that it is far too broad to be a normal virus detection key.  That, and the fact that the name Shh/Updater-B is mostly finding software that performs updates makes me believe that it is a test pattern used when testing quarantine responses in Sophos.

    :30079
Children
No Data