Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3260873 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0
    jkrous wrote:

    Not sure what you mean by "error that the endpoints get".

    Our clients seem unable to get the AutoUpdate service running again, even with moving the files back in place and rebooting.  AutoUpdate keeps trying to reinstall, but it is unsucessful.  "Configure Updating" on the clients is not behaving either.  You cannot see the log or sometimes the entire updating options do not even appear int he client configuration screen. 

    Ah, ok. When the entire updating section is missing, that is due to ALMon.exe not running. You can re-launch almon from the program files\sophos\autoupdate directory.

    In task manager, do you see the process alsvc.exe? If so, Autoupdate has started.

    :30775
Reply
  • 0
    jkrous wrote:

    Not sure what you mean by "error that the endpoints get".

    Our clients seem unable to get the AutoUpdate service running again, even with moving the files back in place and rebooting.  AutoUpdate keeps trying to reinstall, but it is unsucessful.  "Configure Updating" on the clients is not behaving either.  You cannot see the log or sometimes the entire updating options do not even appear int he client configuration screen. 

    Ah, ok. When the entire updating section is missing, that is due to ALMon.exe not running. You can re-launch almon from the program files\sophos\autoupdate directory.

    In task manager, do you see the process alsvc.exe? If so, Autoupdate has started.

    :30775
Children
No Data