Is any one else seing this alert - Shh/Updater-B False positives

This process has been confirmed here.

Machines updated, alerts/errors have not returned.

Seems "On-Access Scanning" was the culprit preventing the machines from updating...including the update server.  Once disabled, everything started flowing through okay.

Aside from the error happening in the first place, thanks and kudos to all who contributed to this fix.

Hey thank you very much. I figured if I had information that would help everyone with this headache, why not share the love. I'm glad it helped you, made my day!

Thanks for the fix but is anyone getting "Unkown" under update field?

Do the machines need a reboot?

Sorry if I have missed something as it is getting late in the UK :-)

I got the console to update with your help, and i tried to push the update to all the pc's, and then acknowledge the error, but I'm still getting re-occuring desktops saying they've infected, and they say "failed to install savxp: An unknown exception has occured." Tried rebooting a couple pc's but i don't think that has done anything.

What to do with the quarantined files if not deleted or moved ???

swi_update.exe

SingleGUIPlugin.dll

inetconn.dll

ALsvc.exe

LukeMurphy, I tried your steps, but only with mixed success.

For some reason, not all machines would accept the updated policy (with on access disabled). When I logged into these, almon.exe had also crashed, coincidentally (?)

I had to manually disable on access scanning, update, re-enable on access scanning, and then no more errors.

Also, for me, the local quarantine was not cleared.

Still can't get the services to start.

Sophos Update Manager Service

Runtime Error

Program: c:\program files\sophos\update manager\sumservice.exe

This application has requested the runtime to terminate it in an unusual way.

Please contact the application's support team for more information.

>Run the update manager on the server and check for an update.

Just get "software delivery failed" when try to run update.

One of my employees deleted files in quarantine. Not sure what that will do?

Another workstation completely froze up and will not restart. Any ideas?
Help!

I cant even log into my server to try any fixes!! I just shut it down and upped its hardware stats and it is still not logging in. I guess I will just have to wait until it decides to fully load! :smileymad: