This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents

  • KUSA wrote:

    Here's a quick VB script to restore files that were moved by quarantine to "Infected" folder.

    Disclaimer: Works for me, but use at your own risk.

    <SNIP>


    this is a FANTASTIC SCRIPT to fix sites that were set to MOVE - EVERYONE should run it!

    note that on XP/2003 you must change infectedpath to

    infectedPath = "C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\INFECTED\"

    Also, i had to add the following in before everything started working again


    If objFSO.FileExists(infectedPath & "almonres.dll.000") And Not objFSO.FileExists(progPath & "en\almonres.dll") Then
    objFSO.MoveFile infectedPath & "almonres.dll.000" , progPath & "en\almonres.dll"
    End If

    :30723
Reply

  • KUSA wrote:

    Here's a quick VB script to restore files that were moved by quarantine to "Infected" folder.

    Disclaimer: Works for me, but use at your own risk.

    <SNIP>


    this is a FANTASTIC SCRIPT to fix sites that were set to MOVE - EVERYONE should run it!

    note that on XP/2003 you must change infectedpath to

    infectedPath = "C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\INFECTED\"

    Also, i had to add the following in before everything started working again


    If objFSO.FileExists(infectedPath & "almonres.dll.000") And Not objFSO.FileExists(progPath & "en\almonres.dll") Then
    objFSO.MoveFile infectedPath & "almonres.dll.000" , progPath & "en\almonres.dll"
    End If

    :30723
Children
No Data