Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3261473 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0
    drdos256 wrote:

    Hi Nathan - we are using a batch file with the vbs on each XP endpoint - it does work as an administrator (we have given up on all other ways of rolling it out) - sometimes it works straight off, sometimes there is a repeating msiexec installation going on in the background (the faulty sophos update?) - is there an easy way to stop the old (repeating) msi ? we get there eventually but it is taking up a lot of our time.

    Good work by the way - learned a lot from this thread. 

    Perhaps call taskkill /IM msiexec.exe in your batch file prior to executing the script? I would suggest a logic check to see if that is necessary so the batch file doesn't error out if the process isn't found.

    :32293
Reply
  • 0
    drdos256 wrote:

    Hi Nathan - we are using a batch file with the vbs on each XP endpoint - it does work as an administrator (we have given up on all other ways of rolling it out) - sometimes it works straight off, sometimes there is a repeating msiexec installation going on in the background (the faulty sophos update?) - is there an easy way to stop the old (repeating) msi ? we get there eventually but it is taking up a lot of our time.

    Good work by the way - learned a lot from this thread. 

    Perhaps call taskkill /IM msiexec.exe in your batch file prior to executing the script? I would suggest a logic check to see if that is necessary so the batch file doesn't error out if the process isn't found.

    :32293
Children
No Data