Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3261093 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0

    Hi folks,

    Thankfully our policy was set to deny access only already, but I've followed the latest Advisory up until

    4.             Depending on the Cleanup configuration noted in point 1 follow the steps relevant to your configuration:

    Deny access only

    This seems to me to be saying to carry out these steps on each of the endpoints in the organisation. Am I reading it correctly? Why not simply open the EM quarantine and click Clear list? IS there any better way that doesn't involve having to log into each and every machine with the endpoint on it?

    :31333
Reply
  • 0

    Hi folks,

    Thankfully our policy was set to deny access only already, but I've followed the latest Advisory up until

    4.             Depending on the Cleanup configuration noted in point 1 follow the steps relevant to your configuration:

    Deny access only

    This seems to me to be saying to carry out these steps on each of the endpoints in the organisation. Am I reading it correctly? Why not simply open the EM quarantine and click Clear list? IS there any better way that doesn't involve having to log into each and every machine with the endpoint on it?

    :31333
Children
No Data