Sophos EndUser Protection

[leftout]

Virus/spyware 'Shh/Updater-B' has been detected in "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe". Cleanup unavailable. This is trickling in as alerts but at an alarming rate.

[Dave56]

Yes, I'm seeing the same thing.  I'm hoping this is a false positive.

[BHSCT]

Yes started to see them after server scan kicked in at 9. Over 100 so far....

Michael

[jhuntley]

Yup Im getting spammed by all these alerts as well  

[MikeStrode]

Yes, I am seeing this as well. Looks like Sophos got a bit too sensitive

[keith_co]

seeing this on almost all my machines, for a variety of dll items.

SynapseUpdateModule.dll

Hewlett-Packard\Headless Server Registry Update\HeadlessUpdateVersion.dll

Hewlett-Packard\CK-804 chipset - PLX bridge\CK804FixVersion.dll

[markinh]

yes, here too.

Its google Chrome Updater?

[Maestro]

Yep they're coming in fast and furious on my network now.  So far it's flagged the Apple Software Update, Google Updater, and its own updater as having this spyware.  I'm thinking somebody fat fingered a definition update somehow.

[rteguy]

Yes, this just started happening for us. All PCs. It quarantined two Sophos updater files and a Flash file. The shh/Updater-B when you click the name, doesn't showup on Sophos as a valid search term. Charles

[tcingle]

Also seeing it.  I have to believe this is an error.