This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • ---------- HAPPY DAYS -----------

    I just did this and it worked

    Dowloaded the latest defs from http://downloads.sophos.com/downloads/ide/480_ides.zip

    copied them to a group folder on the network

    created a this batch file and placed it on the group drive

    net stop savservice
    del "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\agen-xuv.ide" /f /q
    del "C:\Program Files\Sophos\Sophos Anti-Virus\agen-xuv.ide" /f /q
    xcopy "\\update file location\*.*" "C:\Program Files\Sophos\Sophos Anti-Virus\*.*" /y
    xcopy "\update file location\*.*" "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\*.*" /y
    net start savservice

    sent an email to all staff to run this batch file

    *********************************************************************************************************************************************

    It's down to helpful people like this that we all end up with a solution. There are lots more people on here who have done ther uttermost to get everyone back up and running as quick as possible. It brings out the best in people and shows what a forum community can do when the crap hits the fan. :smileyhappy:

    I have to say, I too am bitterly disappointed there is no news flash (at last time of looking) on the Sophos web site. I spent the first half an hour working out if the forum or other sites were bogus, telling everyone it's a false alarm. A sort of negative false positive. I deleted a number of files on my workstation before deciding to check further due to the sheer number of files being found, but conversely with the apparent no ill effect of my system. Very unvirus like!

    I needed to spend this evening on a ongoing Exchange 2003 - 2010 transition problem, but ended up spending four hours on this!

    :30791
Reply
  • ---------- HAPPY DAYS -----------

    I just did this and it worked

    Dowloaded the latest defs from http://downloads.sophos.com/downloads/ide/480_ides.zip

    copied them to a group folder on the network

    created a this batch file and placed it on the group drive

    net stop savservice
    del "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\agen-xuv.ide" /f /q
    del "C:\Program Files\Sophos\Sophos Anti-Virus\agen-xuv.ide" /f /q
    xcopy "\\update file location\*.*" "C:\Program Files\Sophos\Sophos Anti-Virus\*.*" /y
    xcopy "\update file location\*.*" "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\*.*" /y
    net start savservice

    sent an email to all staff to run this batch file

    *********************************************************************************************************************************************

    It's down to helpful people like this that we all end up with a solution. There are lots more people on here who have done ther uttermost to get everyone back up and running as quick as possible. It brings out the best in people and shows what a forum community can do when the crap hits the fan. :smileyhappy:

    I have to say, I too am bitterly disappointed there is no news flash (at last time of looking) on the Sophos web site. I spent the first half an hour working out if the forum or other sites were bogus, telling everyone it's a false alarm. A sort of negative false positive. I deleted a number of files on my workstation before deciding to check further due to the sheer number of files being found, but conversely with the apparent no ill effect of my system. Very unvirus like!

    I needed to spend this evening on a ongoing Exchange 2003 - 2010 transition problem, but ended up spending four hours on this!

    :30791
Children
No Data