Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3261137 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0
    ITAssist wrote:
    lucas wrote:

    Is anyone else seeing this behavior?

    From console... Resolve alerts for computers, then their "Primary server" becomes blank, effectively preventing me from triggering a manual "update now".


    lucas,

    Yes I had the same problem in that both my Primary and Secondary locations were blank in the update tab in the EC.

    Through trial and error I have found that restarting the Sophos Agent service on the affected PC puts the info back in the Enterprise Console after about 10 seconds or so.

    Hope this helps

    Richard

    I've been having the local technicians reboot the machines. 

    To answer Nathan's question, the updater disappears in SEC, not on the client. It's as if clearing the alert blanks out that field in the database or something. On a hunch, I tried the "clean envelopes folder" trick, to no avail.

    :31439
Reply
  • 0
    ITAssist wrote:
    lucas wrote:

    Is anyone else seeing this behavior?

    From console... Resolve alerts for computers, then their "Primary server" becomes blank, effectively preventing me from triggering a manual "update now".


    lucas,

    Yes I had the same problem in that both my Primary and Secondary locations were blank in the update tab in the EC.

    Through trial and error I have found that restarting the Sophos Agent service on the affected PC puts the info back in the Enterprise Console after about 10 seconds or so.

    Hope this helps

    Richard

    I've been having the local technicians reboot the machines. 

    To answer Nathan's question, the updater disappears in SEC, not on the client. It's as if clearing the alert blanks out that field in the database or something. On a hunch, I tried the "clean envelopes folder" trick, to no avail.

    :31439
Children
No Data