This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents

  • MJewell wrote:

    Nate - 

    I wish that was the case.. 

    since this message, I was able to get my core to update but now the endpoints are all telling me that the uninstall of the autoupdate failed so they won't do anything. I'm trying some of the other solutions that people have posted. 

    thanks, truly... 

    I honestly think that you are the ONLY one that is really trying to reach out to customers and help. I'd be all for putting in a GREAT word for you with the suits. 


    Sounds like you might have had the cleanup action set to delete. I think in your case you should try copying the contents of the \\server\sophos update\cids\s000\savscfxp\sau\program files\sophos\autoupdate folder to c:\program files\Sophos\autoupdate. That will replace the missing files and allow reprotecting to work again, or simply allow Autoupdate to work again and avoid the need to re-protect. Some others have posted some examples of how to do this.

    :31983
Reply

  • MJewell wrote:

    Nate - 

    I wish that was the case.. 

    since this message, I was able to get my core to update but now the endpoints are all telling me that the uninstall of the autoupdate failed so they won't do anything. I'm trying some of the other solutions that people have posted. 

    thanks, truly... 

    I honestly think that you are the ONLY one that is really trying to reach out to customers and help. I'd be all for putting in a GREAT word for you with the suits. 


    Sounds like you might have had the cleanup action set to delete. I think in your case you should try copying the contents of the \\server\sophos update\cids\s000\savscfxp\sau\program files\sophos\autoupdate folder to c:\program files\Sophos\autoupdate. That will replace the missing files and allow reprotecting to work again, or simply allow Autoupdate to work again and avoid the need to re-protect. Some others have posted some examples of how to do this.

    :31983
Children
No Data