Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3261440 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0

    Nice, Hambone

    If alerts have already been acknowledged the computers will not appear in the ComputerListData2 view.

    Thought of something like

    SELECT DISTINCT
            c.Name
            FROM
              (SELECT ComputerID, Threatname FROM Threatsarchive

              UNION SELECT ComputerID, Threatname FROM Threats) as t
            JOIN Computersanddeletedcomputers as c ON t.ComputerID= c.ID 

            WHERE t.ThreatName LIKE 'SHH/%'

    seems to give correct results on my system (don't criticize my SQL skills - there are none :smileywink:)

    Christian

    :32193
Reply
  • 0

    Nice, Hambone

    If alerts have already been acknowledged the computers will not appear in the ComputerListData2 view.

    Thought of something like

    SELECT DISTINCT
            c.Name
            FROM
              (SELECT ComputerID, Threatname FROM Threatsarchive

              UNION SELECT ComputerID, Threatname FROM Threats) as t
            JOIN Computersanddeletedcomputers as c ON t.ComputerID= c.ID 

            WHERE t.ThreatName LIKE 'SHH/%'

    seems to give correct results on my system (don't criticize my SQL skills - there are none :smileywink:)

    Christian

    :32193
Children
No Data