This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • What is the solution for those of that had delete set for files that couldn't be cleaned?  I have 50+ workstations, potentially many more,  that deleted not just ALmon.exe, but also inetconn.dll, sharedres.dll, ilogres.dll, and many many more from the Sophos AutoUpdate folder.  

    I have tried uninstalling Sophos completely, including using the Microsoft Fix IT Uninstaller to remove Sophos AutoUpdate, which will not remove via the usual uninstaller anymore.  I then tried restarting the PC and reinstalling Sophos, but this does not seem to work either.  For some reason the install seems to hang from the console point of view, and on the client it seems to not want to update still.  Is there a tool that can be used to reinstall/fix just the AutoUpdater and replace all the missing files?

    :31265
Reply
  • What is the solution for those of that had delete set for files that couldn't be cleaned?  I have 50+ workstations, potentially many more,  that deleted not just ALmon.exe, but also inetconn.dll, sharedres.dll, ilogres.dll, and many many more from the Sophos AutoUpdate folder.  

    I have tried uninstalling Sophos completely, including using the Microsoft Fix IT Uninstaller to remove Sophos AutoUpdate, which will not remove via the usual uninstaller anymore.  I then tried restarting the PC and reinstalling Sophos, but this does not seem to work either.  For some reason the install seems to hang from the console point of view, and on the client it seems to not want to update still.  Is there a tool that can be used to reinstall/fix just the AutoUpdater and replace all the missing files?

    :31265
Children
No Data