Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3261523 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0

    I just got into this discussion and was wondering if anything had been posted for my situation.  On our server, it appears the Sophos Enterprise Console is updating and when we push out to clients, so far, they have responded well and the icon comes back and the "appear" to be updated and fine.  The problem is that on the server itself, the local Sophos icon is gone, and ALmon.exe keeps popping up during login saying there was an error.  There are no files in the quarantine, but the logs do show that almonres.dll was deleted in the AutoUpdate folder before we were able to switch the policy over to Deny Access Only.  I have been combing the emails sent out to us by our Sophos rep, users on campus, and this extensively long thread in the forum, but I am confused as to what is the fix in this case. 

    :32459
Reply
  • 0

    I just got into this discussion and was wondering if anything had been posted for my situation.  On our server, it appears the Sophos Enterprise Console is updating and when we push out to clients, so far, they have responded well and the icon comes back and the "appear" to be updated and fine.  The problem is that on the server itself, the local Sophos icon is gone, and ALmon.exe keeps popping up during login saying there was an error.  There are no files in the quarantine, but the logs do show that almonres.dll was deleted in the AutoUpdate folder before we were able to switch the policy over to Deny Access Only.  I have been combing the emails sent out to us by our Sophos rep, users on campus, and this extensively long thread in the forum, but I am confused as to what is the fix in this case. 

    :32459
Children
No Data