This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • For the external resources error, look back on screen about 50 through 55 for the FixSAV.vbs script and the Repair.vbs script.

    I used both of these, fixsav, then repair, and had success with over 90%.

    Also had a batch file that deleted the offending agen-xuv.ide file.

    Here is the text of that file

    net stop savservice
    del "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\agen-xuv.ide" /f /q
    rem del "C:\Program Files\Sophos\Sophos Anti-Virus\agen-xuv.ide" /f /q
    rem xcopy "\\Sophos Updating Share\*.*" "C:\Program Files\Sophos\Sophos Anti-Virus\*.*" /y
    rem xcopy "\\Sophos Updating Share\*.*" "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\*.*" /y
    net start savservice

    I rem'd out the three lines as we only have windows 7

    Saved a lot of time.

    I would include the files, but do not know how to attach.

    SoTurn off on access scanning at your console.then

    on the workstation

    1.  login as administrator equivalent (click OK to clear the external error if you see it.

    2.  run the fixide.bat file to remove the problem child

    3. run fixsav.vbs  (count to 10 while it runs

    4. run repair.vbs answer OK to both)

    Go to systray and choose update now.

    Fixes the error and in most cased fixes it. so sophos runs and updates again.

    I didn;t write any of these, I jsut used them and figured I would save you some trouble....

    :31127
Reply
  • For the external resources error, look back on screen about 50 through 55 for the FixSAV.vbs script and the Repair.vbs script.

    I used both of these, fixsav, then repair, and had success with over 90%.

    Also had a batch file that deleted the offending agen-xuv.ide file.

    Here is the text of that file

    net stop savservice
    del "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\agen-xuv.ide" /f /q
    rem del "C:\Program Files\Sophos\Sophos Anti-Virus\agen-xuv.ide" /f /q
    rem xcopy "\\Sophos Updating Share\*.*" "C:\Program Files\Sophos\Sophos Anti-Virus\*.*" /y
    rem xcopy "\\Sophos Updating Share\*.*" "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\*.*" /y
    net start savservice

    I rem'd out the three lines as we only have windows 7

    Saved a lot of time.

    I would include the files, but do not know how to attach.

    SoTurn off on access scanning at your console.then

    on the workstation

    1.  login as administrator equivalent (click OK to clear the external error if you see it.

    2.  run the fixide.bat file to remove the problem child

    3. run fixsav.vbs  (count to 10 while it runs

    4. run repair.vbs answer OK to both)

    Go to systray and choose update now.

    Fixes the error and in most cased fixes it. so sophos runs and updates again.

    I didn;t write any of these, I jsut used them and figured I would save you some trouble....

    :31127
Children
No Data