Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3261396 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0

    Nathan,

    I've had a look at the script posted in the KB above. We can deploy the script using our management software but all the machines are at remote sites and the update location provided to all the clients is an HTTP link.

    If we put this HTTP update location (eg http://sophos.company.com/sophos) in the UNC path will the script pick up the required files from this location?

    Our PC policy had a 'delete' action while server had 'deny access'. It's strange because not all PC's deleted the Sophos FP.

    Cheers,

    Gregor

    :32013
Reply
  • 0

    Nathan,

    I've had a look at the script posted in the KB above. We can deploy the script using our management software but all the machines are at remote sites and the update location provided to all the clients is an HTTP link.

    If we put this HTTP update location (eg http://sophos.company.com/sophos) in the UNC path will the script pick up the required files from this location?

    Our PC policy had a 'delete' action while server had 'deny access'. It's strange because not all PC's deleted the Sophos FP.

    Cheers,

    Gregor

    :32013
Children
No Data