Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3261545 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
Parents
  • 0
    kurbycar32 wrote:

    I have 3 CID folders, all have the alsvc file.  Here is the command i executed:

    cscript //nologo FixUpdate.vbs /fixIssues:true /cid:\\sophos-server\SophosUpdate\CIDs\S000\SAVSCFXP /updateNow:true

    Per documentation i attempted to run this manually before deploying it and it hasnt been able to fix anything yet.

    Is the script encountering errors? If so, please post them here and I will see if I can help. To my knowledge, any time the script has been run successfully the endpoint is resolved. Please let me know what you are seeing that isn't fixed if it is running without error for you.

    Ps. Please be sure you are running the latest version of the script. Version 1.6. If not, the download link in KBA 118323 has been updated with the latest version which includes improvements and additional features. Please see the readme in the archive and the details in the KBA.

    :32549
Reply
  • 0
    kurbycar32 wrote:

    I have 3 CID folders, all have the alsvc file.  Here is the command i executed:

    cscript //nologo FixUpdate.vbs /fixIssues:true /cid:\\sophos-server\SophosUpdate\CIDs\S000\SAVSCFXP /updateNow:true

    Per documentation i attempted to run this manually before deploying it and it hasnt been able to fix anything yet.

    Is the script encountering errors? If so, please post them here and I will see if I can help. To my knowledge, any time the script has been run successfully the endpoint is resolved. Please let me know what you are seeing that isn't fixed if it is running without error for you.

    Ps. Please be sure you are running the latest version of the script. Version 1.6. If not, the download link in KBA 118323 has been updated with the latest version which includes improvements and additional features. Please see the readme in the archive and the details in the KBA.

    :32549
Children
No Data