Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3261265 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0
    Pec wrote:

    Since the action taken against Shh/Updater-B on all machines is either "None or "Blocked", then none of these files should have been moved from their original locations? 

    So there should be no problems with deleting the quarantine file on all machines and acknowledging the alerts to clear them?

    Correct. If your cleanup policy was Non or Block, then you can should clear the file and you should be fine. Unfortunately, we had ours set to Block and Move.....

    :31731
Reply
  • 0
    Pec wrote:

    Since the action taken against Shh/Updater-B on all machines is either "None or "Blocked", then none of these files should have been moved from their original locations? 

    So there should be no problems with deleting the quarantine file on all machines and acknowledging the alerts to clear them?

    Correct. If your cleanup policy was Non or Block, then you can should clear the file and you should be fine. Unfortunately, we had ours set to Block and Move.....

    :31731
Children
No Data