Well, I've think I've cleaned up all of the Shh/Updater-B mess from my network, but have discovered an oddity along the way. On one machine (only), "Endpoint Security and Control" appears to be locked down, and most of the options under the "Configure" are grayed out. And if you go to "Manage Quarantine", all the actions say insufficient rights (approximately - the quarantine is empty now, so I can't see the message).
The user is a local admin.
I'm just trying to figure out where this might be controlled.
Thanks,
-Robert
This thread was automatically locked due to age.