Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3261126 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0
    lucas wrote:

    Is anyone else seeing this behavior?

    From console... Resolve alerts for computers, then their "Primary server" becomes blank, effectively preventing me from triggering a manual "update now".

    This is the first report of this behavior I've heard. Does the primary server information show on the policy when viewed in SEC, or is it gone from there as well? If the policy is intact on SEC, try performing a comply with > group updating policy to see if that sorts the endpoint. (don't push all policies as that will just unnecessarily increase network load) If that doesn't work, please phone in to support.

    :31419
Reply
  • 0
    lucas wrote:

    Is anyone else seeing this behavior?

    From console... Resolve alerts for computers, then their "Primary server" becomes blank, effectively preventing me from triggering a manual "update now".

    This is the first report of this behavior I've heard. Does the primary server information show on the policy when viewed in SEC, or is it gone from there as well? If the policy is intact on SEC, try performing a comply with > group updating policy to see if that sorts the endpoint. (don't push all policies as that will just unnecessarily increase network load) If that doesn't work, please phone in to support.

    :31419
Children
No Data