This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents

  • Nathan wrote:

    lknada0d83k wrote:

    I show computers in the SEC that show as up to date and have the javab-jd.ide file listed in "IDEs installed" but are still listed as having "Virus/spyware detected" is this expected or should it automatically be removed once these are no longer an issue?  


    Yes, that is expected. You'll need to acknowledge the alerts manually.


    Can you post your script on the KB rather than having to copy paste it from the forum and not knowing if it is your latest version?  We have 1000+ endpoints to address.

    Also, after setting exclusions for the Sophos program folders we still cannot update from the console.  Turning on access scanning off is not an option as our groups are large and comptuers are often not connected.

    Is there a mechanism for Platinum Support members to get priority calls back since the queue is still broken?  

    :30963
Reply

  • Nathan wrote:

    lknada0d83k wrote:

    I show computers in the SEC that show as up to date and have the javab-jd.ide file listed in "IDEs installed" but are still listed as having "Virus/spyware detected" is this expected or should it automatically be removed once these are no longer an issue?  


    Yes, that is expected. You'll need to acknowledge the alerts manually.


    Can you post your script on the KB rather than having to copy paste it from the forum and not knowing if it is your latest version?  We have 1000+ endpoints to address.

    Also, after setting exclusions for the Sophos program folders we still cannot update from the console.  Turning on access scanning off is not an option as our groups are large and comptuers are often not connected.

    Is there a mechanism for Platinum Support members to get priority calls back since the queue is still broken?  

    :30963
Children
No Data