Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1178 replies
  • Subscribers 1 subscriber
  • Views 3260365 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is any one else seing this alert - Shh/Updater-B False positives

leftout

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

:29723


This thread was automatically locked due to age.
  • 0

    I'm at 134 reported clients within the last few minutes - what's going on here??

    :29765
  • 0

    We had roughly 40% "infection" rate here in about a ten minute span of time... a few hundred machines...

    OTP w/ them now, they said it was a "falso Positive, and that it should be resolved in the next update...

    :29767
  • 0

    Ours started at 3:16 CST - every pc on the network is getting the update and the alert message - I've received 90 email in 20 minutes

    :29769
  • 0

    Yes, wow, every machine.

    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe". Cleanup unavailable.

    As well as other .exe's and .dll files.

    Their North American 1 781 494 5800 is busy/down as well.  What the hell Sophos?

    :29771
  • 0

    All of my enterprise is getting hammered with two virus alerts.  One says the following and doesn't indicate it's been deleted: 

    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Updater.api". Cleanup unavailable.

    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\updater.api".

    The first one that hit says this and it does indicate it was cleaned. 

    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe". Cleanup unavailable.

    Infected file "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe" has been deleted.

    Can't ascertain if we have a BIG problem or not.  Anyone familiar with this?

    :29773
  • 0

    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\AutoUpdate\ALsvc.exe". Cleanup unavailable.

    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files (x86)\Sophos\AutoUpdate\inetconn.dll". Cleanup unavailable.

    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Google\Update\GoogleUpdate.exe".

    Virus/spyware 'Shh/Updater-B' has been detected in "C:\PROGRAM FILES\Google\Update\1.3.21.123\goopdate.dll". Cleanup unavailable.

    Virus/spyware 'Shh/Updater-B' has been detected in "C:\PROGRAM FILES\Google\Update\1.3.21.123\GOOPDATERES_EN.DLL". Cleanup unavailable.

    Virus/spyware 'Shh/Updater-B' has been detected in "C:\PROGRAM FILES\Google\Update\1.3.21.123\goopdate.dll". Cleanup unavailable.

    Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Google\Update\1.3.21.123\goopdate.dll". Cleanup unavailable.

    :29775
  • 0

    Yep, same here!  Trying to exclude these files from on-access scanning, as a band-aid...

    :29777
  • 0

    @chrisRumore  lets hope the push the update soon. my inbox is getting pretty full! :smileysad:

    :29779
  • 0

    Misery loves company.  I've just started seeing this reported from all of my workstations; scads of emails.  The Sophos tech support number is giving a "fast busy" signal, as everyone calls to ask "wtf?".

    :29781
  • 0

    At first it scared the crap out of me, now I'm getting irritated!

    :29783