Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3261170 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0

    Nathan said: 

    For now, scripting the deletion of quarantine.xml is the only option to accomplish this without touching every system. That said, we are looking for alternatives.

    I am pleased to hear they are looking for alternatives to the script.

    I have decided on a manual approach. I am sure the script is good but with everything that has happened, I would prefer boots on the ground since I want the quarantine viewed to make sure nothing else has snuck in. I am the IT Director at a hospital research facility so I am being extra cautious here. 

    Again, thank you Nathan for your excellent communication - I have no doubt you would not have a problem finding a job elsewhere because I know I would hire you in heartbeat if I could. 

    :31515
Reply
  • 0

    Nathan said: 

    For now, scripting the deletion of quarantine.xml is the only option to accomplish this without touching every system. That said, we are looking for alternatives.

    I am pleased to hear they are looking for alternatives to the script.

    I have decided on a manual approach. I am sure the script is good but with everything that has happened, I would prefer boots on the ground since I want the quarantine viewed to make sure nothing else has snuck in. I am the IT Director at a hospital research facility so I am being extra cautious here. 

    Again, thank you Nathan for your excellent communication - I have no doubt you would not have a problem finding a job elsewhere because I know I would hire you in heartbeat if I could. 

    :31515
Children
No Data