Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3261484 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0
    xTiNcTion wrote:

    Hi,

    Server seem to be updated. I see endpoint with error:

    leftout wrote:

    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

    If i try to "protect" them I get other error:

    leftout wrote:

    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

    help here!

    Sounds like your endpoint hasn't been updated yet. Have you followed all of the steps in the advisory KBA 118311 yet? If not, give that a shot first and let me know how you make out. Specially note the temporary changes to your OnAccess policy.

    :32325
Reply
  • 0
    xTiNcTion wrote:

    Hi,

    Server seem to be updated. I see endpoint with error:

    leftout wrote:

    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

    If i try to "protect" them I get other error:

    leftout wrote:

    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

    help here!

    Sounds like your endpoint hasn't been updated yet. Have you followed all of the steps in the advisory KBA 118311 yet? If not, give that a shot first and let me know how you make out. Specially note the temporary changes to your OnAccess policy.

    :32325
Children
No Data