Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3260719 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0

    I can't complain because we have under 20 stations but I feel sorry for you big timers who have hundreds, maybe thousands of clients with logs that look like ours:

    20120919 202103    Infected file "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe" has been deleted.
    20120919 202534    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\AutoUpdate\inetconn.dll". Cleanup unavailable.
    20120919 202534    Infected file "C:\Program Files\Sophos\AutoUpdate\inetconn.dll" has been deleted.
    20120919 203356    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\AutoUpdate\swlocale.dll". Cleanup unavailable.
    20120919 203356    Infected file "C:\Program Files\Sophos\AutoUpdate\swlocale.dll" has been deleted.
    20120919 211022    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\AutoUpdate\ALsvc.exe". Cleanup unavailable.
    20120919 211022    Infected file "C:\Program Files\Sophos\AutoUpdate\ALsvc.exe" has been deleted.
    20120919 211024    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\AutoUpdate\AUAdapter.dll". Cleanup unavailable.
    20120919 211024    Infected file "C:\Program Files\Sophos\AutoUpdate\AUAdapter.dll" has been deleted.
    20120919 211028    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\SCC\SUM\SUMService.exe". Cleanup unavailable.
    20120919 211028    Infected file "C:\Program Files\Sophos\SCC\SUM\SUMService.exe" has been deleted.
    20120919 211116    Web Protection is no longer functional. The filtering driver has been bypassed or unloaded.

    :30463
Reply
  • 0

    I can't complain because we have under 20 stations but I feel sorry for you big timers who have hundreds, maybe thousands of clients with logs that look like ours:

    20120919 202103    Infected file "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe" has been deleted.
    20120919 202534    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\AutoUpdate\inetconn.dll". Cleanup unavailable.
    20120919 202534    Infected file "C:\Program Files\Sophos\AutoUpdate\inetconn.dll" has been deleted.
    20120919 203356    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\AutoUpdate\swlocale.dll". Cleanup unavailable.
    20120919 203356    Infected file "C:\Program Files\Sophos\AutoUpdate\swlocale.dll" has been deleted.
    20120919 211022    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\AutoUpdate\ALsvc.exe". Cleanup unavailable.
    20120919 211022    Infected file "C:\Program Files\Sophos\AutoUpdate\ALsvc.exe" has been deleted.
    20120919 211024    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\AutoUpdate\AUAdapter.dll". Cleanup unavailable.
    20120919 211024    Infected file "C:\Program Files\Sophos\AutoUpdate\AUAdapter.dll" has been deleted.
    20120919 211028    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\SCC\SUM\SUMService.exe". Cleanup unavailable.
    20120919 211028    Infected file "C:\Program Files\Sophos\SCC\SUM\SUMService.exe" has been deleted.
    20120919 211116    Web Protection is no longer functional. The filtering driver has been bypassed or unloaded.

    :30463
Children
No Data