Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3261308 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0
    dspigelman wrote:

    Azurus - Your batch file worked GREAT for all the machines running Windows XP. But on Windows 7 machines, it fails with ALMon.exe causing "error loading external resources (0x8007007e)" Any thoughts?

    Did you check the staging server to make sure ALMon.exe exists where it should and isn't quarantined itself? It sounds like it could be a missing .dll dependency somewhere. I would make sure to copy a good working directory to the staging server as well. Did you also make sure On-access is configured with the correct exceptions or temporarily turned off?  I would also check all permissions and paths. If it works on XP but not on Win7, I would think it's a path or permission issue, since it works for me on both XP and Win 7 machines, both 32-bit and 64-bit.

    :31819
Reply
  • 0
    dspigelman wrote:

    Azurus - Your batch file worked GREAT for all the machines running Windows XP. But on Windows 7 machines, it fails with ALMon.exe causing "error loading external resources (0x8007007e)" Any thoughts?

    Did you check the staging server to make sure ALMon.exe exists where it should and isn't quarantined itself? It sounds like it could be a missing .dll dependency somewhere. I would make sure to copy a good working directory to the staging server as well. Did you also make sure On-access is configured with the correct exceptions or temporarily turned off?  I would also check all permissions and paths. If it works on XP but not on Win7, I would think it's a path or permission issue, since it works for me on both XP and Win 7 machines, both 32-bit and 64-bit.

    :31819
Children
No Data