Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3261418 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0

    So if I understand this correctly, acknowledging an alert in the console does nothing on the client side (items will still remain in their local quarantine)?  Seems like a long overdue "feature" for something this basic, but whatever...

    I do know we still have the "cleanup" option.  So why not create a cleanup definition for Shh/Updater-B that automatically fixes this mess (moves files back to their original location, clears the quarantine, fixes the autoupdater, basically everything those scripts you are providing does but in 1 simple click in the console)?  Probably a moot point by now but just an idea to save hours and hours of work for admins.

    :32111
Reply
  • 0

    So if I understand this correctly, acknowledging an alert in the console does nothing on the client side (items will still remain in their local quarantine)?  Seems like a long overdue "feature" for something this basic, but whatever...

    I do know we still have the "cleanup" option.  So why not create a cleanup definition for Shh/Updater-B that automatically fixes this mess (moves files back to their original location, clears the quarantine, fixes the autoupdater, basically everything those scripts you are providing does but in 1 simple click in the console)?  Probably a moot point by now but just an idea to save hours and hours of work for admins.

    :32111
Children
No Data