Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3260884 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0
    KUSA wrote:

    Here's a quick VB script to restore files that were moved by quarantine to "Infected" folder.

    Disclaimer: Works for me, but use at your own risk.

    I have slightly improved upon KUSA's original script and placed it on our server for all to download

    Repair.VBS

    I have added automatic detection of xp/2003, added the moving of an additional file for ALmon, and set it to automatically restart  ALMon.exe after it is done.

    All credit for this goes to KUSA, i have just made minor changes.

    This script fixes a broken autoupdate system for sites that were set to MOVE infected files.  it is NOT intended to fix any other situations.  I sincerley hope it helps some people fix their issue!

    LEGAL DISCLAIMER: You are advised to read and understand the purpose of the script BEFORE running it on ANY system.  I take NO responsibility for any issues this script may cause.

    :30803
Reply
  • 0
    KUSA wrote:

    Here's a quick VB script to restore files that were moved by quarantine to "Infected" folder.

    Disclaimer: Works for me, but use at your own risk.

    I have slightly improved upon KUSA's original script and placed it on our server for all to download

    Repair.VBS

    I have added automatic detection of xp/2003, added the moving of an additional file for ALmon, and set it to automatically restart  ALMon.exe after it is done.

    All credit for this goes to KUSA, i have just made minor changes.

    This script fixes a broken autoupdate system for sites that were set to MOVE infected files.  it is NOT intended to fix any other situations.  I sincerley hope it helps some people fix their issue!

    LEGAL DISCLAIMER: You are advised to read and understand the purpose of the script BEFORE running it on ANY system.  I take NO responsibility for any issues this script may cause.

    :30803
Children
No Data