Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 1679 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is anyone seeing this.....

Varum

Shh/Updater-B.

Number of Computers with alerts - Viruses/spyware went down by 1.

Something started working on my system.

Time 18:10.

:30401


This thread was automatically locked due to age.
  • 0

    Hi,

    Thank you for your post, we have the below advisory on the issue and steps you can take to remedy;

    http://www.sophos.com/en-us/support/knowledgebase/118311.aspx

    Apologies for any inconvience this has caused.

    Scott

    :32069
  • 0

    Thank you Scott,

    Unfortunately neither of those solutions worked for me.

    I was lucky it got our computers when users went home already and only 39 machines were affected.
    All of them had Sophos, Adobe, Google, etc. updater files moved to quarantined location. Some had only one file, some more.

    Because I couldn’’’’t make the update working I printed locations for the Sophos files from a clean workstation, mapped drives on each computer, renamed the Sophos files and moved / copied them to proper locations.

    Tedious work but most worked. I have 2 Win 7s left and 3 XPs that I have to visit, log in as admin and see what is going on with them. One is across the border, so visiting it not feasible.

    Good it is only one left from this location.

    Please, let me know if it was not a way to do it and I missed something there that caused my manual work.


    Everchanging story,     as of now I have:


    1 updated on 19/09/2012 at 5:22:45 pm,
    3 updated on 19/09/2012 6:42:44 pm,
    2 updated on 20/09/2012 at 5:50:30 pm,
    2 updated on 20/09/2012 at 7:40:31 pm.
    All (GMT-05:00) Eastern Time (US & Canada) time.

    These are the files affected on one I left for testing:

    googlecrashhander.exe.000
    googlecrashhander64.exe.000
    goopdate.dll.000
    npgoogleupdate3.dll.000
    EMLibUpdateAgentNT.exe.000
    cidsync.dll.000
    AUAdapter.dll.000
    ALUpdate.exe.000
    ALMonres.dll.000
    ALsvc.exe.000 – this file running the Sophos update service was the only moved to quarantine on some computers.
    swi_update_64.exe.000
    GoogleUpdate.exe.000
    UpdateBrowserData.exe.000
    AdobeUpdater.dll.000
    Adobe_Updater.exe.000
    jusched.exe.000

    The worst out if is it that on some Win XPs the Windows installer is popping up every few seconds and disappears .

    No info if this is related to this Shh/Updater-B case or it is a gift from Microsoft to keep people employed.

    If it is the second case, I would say, thank you Microsoft, couldn’’’’t you wait till next week? I might have no fires around which will make this like a cold shower.

    P.S.

    Only three updates from 19th left right now.

    Please, let me know if there is something I should do better in this case.

    Thank you.

    :32179