This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents

  • DougFromMaine wrote:

    Nathan: I reviewed our "update manager details" and find that as far back as history is available - 9/5/12 - all updates have been failing. The wIndows event log error associated with update attempt appears below. Is it possible our subscription has lapsed? I wouldn't think so, because, how would we have obtained the update that caused the issue? Thanks again.

    Synchronize operation failed when synchronizing product release 'F26F7EC0-1302-4DA7-8B6B-A5383051D41A'. Details: Couldn't authenticate user for resource with host server. URL was: http://dci.sophosupd.net/update/


    It's possible. There is definitely something amiss there, but I would need more details to dig further. Support is your best bet.


    Many apologies to those on hold with support. As of about 5 minutes ago, the queue is 65 deep. Our engineers are working through the calls as quickly as possible. If you are on hold currently, please be patient and we will get to you as soon as possible. If you would like to use our call-back option, I would recommend doing so.

    :30669
Reply

  • DougFromMaine wrote:

    Nathan: I reviewed our "update manager details" and find that as far back as history is available - 9/5/12 - all updates have been failing. The wIndows event log error associated with update attempt appears below. Is it possible our subscription has lapsed? I wouldn't think so, because, how would we have obtained the update that caused the issue? Thanks again.

    Synchronize operation failed when synchronizing product release 'F26F7EC0-1302-4DA7-8B6B-A5383051D41A'. Details: Couldn't authenticate user for resource with host server. URL was: http://dci.sophosupd.net/update/


    It's possible. There is definitely something amiss there, but I would need more details to dig further. Support is your best bet.


    Many apologies to those on hold with support. As of about 5 minutes ago, the queue is 65 deep. Our engineers are working through the calls as quickly as possible. If you are on hold currently, please be patient and we will get to you as soon as possible. If you would like to use our call-back option, I would recommend doing so.

    :30669
Children
No Data