Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3261462 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0

    Health Admin, I've had some success with this script.

    mkdir "%allusersprofile%\temp\sophos"
    copy %~dp0fixupdate.vbs "%allusersprofile%\temp\sophos" /y
    copy %~dp0javab-jd.ide "%allusersprofile%\temp\sophos" /y
    cd "%allusersprofile%\temp\sophos"
    cscript //nologo "FixUpdate.vbs" /fixIssues:true /cid:\\sophos\SophosUpdate\CIDs\S000\SAVSCFXP\ /updateNow:true /verbose:true

    rmdir /s /q "%allusersprofile%\temp\sophos"

    NOTE: I didn't use %temp% because some of my servers were resolving to C:\Users\username\AppData\Local\Temp\2

    :32255
Reply
  • 0

    Health Admin, I've had some success with this script.

    mkdir "%allusersprofile%\temp\sophos"
    copy %~dp0fixupdate.vbs "%allusersprofile%\temp\sophos" /y
    copy %~dp0javab-jd.ide "%allusersprofile%\temp\sophos" /y
    cd "%allusersprofile%\temp\sophos"
    cscript //nologo "FixUpdate.vbs" /fixIssues:true /cid:\\sophos\SophosUpdate\CIDs\S000\SAVSCFXP\ /updateNow:true /verbose:true

    rmdir /s /q "%allusersprofile%\temp\sophos"

    NOTE: I didn't use %temp% because some of my servers were resolving to C:\Users\username\AppData\Local\Temp\2

    :32255
Children
No Data