Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3260730 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0
    wineoh wrote:

    What about we chosen ones who had DELETE set? Where is our fix?

    Unfortunately, at this time the only option I know will work in this case is to reprotect. If you have a system that didn't delete the files with the same version of Sophos installed as the affected endpoints, then copying the needed files around should work as well. Again, a tool like PSEXEC could be used to push the files around (note that Application Control flags PSEXEC). If I come up with another idea, I'll be sure to post it here.

    :30493
Reply
  • 0
    wineoh wrote:

    What about we chosen ones who had DELETE set? Where is our fix?

    Unfortunately, at this time the only option I know will work in this case is to reprotect. If you have a system that didn't delete the files with the same version of Sophos installed as the affected endpoints, then copying the needed files around should work as well. Again, a tool like PSEXEC could be used to push the files around (note that Application Control flags PSEXEC). If I come up with another idea, I'll be sure to post it here.

    :30493
Children
No Data