Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3261247 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0
    Azurus wrote:

    Chadster you have to temporarily turn off On-Access scanning for the script to work... OR

    You can keep it on if you choose, but you must add these exclusions:

    C:\Documents and Settings\All Users\Application Data\Sophos\

    C:\Program Files\Sophos\

    C:\Program Files (x86)\Sophos\

    C:\ProgramData\sophos\


    Keep in mind that this false positive breaks things outside of those exceptions, so if you turn On-Access scanning on with these exceptions, the false positive will still break adobe flash and acrobat updaters, google apps related updaters, sprint and various others. Our scripts will try to move the files back but if the false positive will probably just quarantine those files again, so weigh your options.

    :31709
Reply
  • 0
    Azurus wrote:

    Chadster you have to temporarily turn off On-Access scanning for the script to work... OR

    You can keep it on if you choose, but you must add these exclusions:

    C:\Documents and Settings\All Users\Application Data\Sophos\

    C:\Program Files\Sophos\

    C:\Program Files (x86)\Sophos\

    C:\ProgramData\sophos\


    Keep in mind that this false positive breaks things outside of those exceptions, so if you turn On-Access scanning on with these exceptions, the false positive will still break adobe flash and acrobat updaters, google apps related updaters, sprint and various others. Our scripts will try to move the files back but if the false positive will probably just quarantine those files again, so weigh your options.

    :31709
Children
No Data