This article describes how to create a text file listing managed endpoint computers that may be affected by the 'Shh/' false positive mentioned here in our advisory article. It also includes a batch file which will list files where an action has been taken for any 'Shh/' detection.
Note: This article may not longer be relevant. If you are still suffering wither detection or alerts of Shh/Updater-B, it is recommended you contact Support for the best course of action.
Known to apply to the following Sophos product(s) and version(s) Enterprise Console
fpc.bat > FpWithoutFix.txt
An additional batch file has been developed which can be used to create a report of files where an action has been taken, e.g. 'Deleted' or 'Moved'.
fpdf.bat > FpActionedFiles.txt
Note: The page: http://www.sophos.com/support/field-search.aspx has also been provided to help associate detected files with application provider and application.
Todos los comentarios enviados son leídos (por una persona), pero no podemos contestar a preguntas técnicas específicas. Si necesita soporte técnico, publique una pregunta en nuestra comunidad. Como alternativa, en el caso de los productos con licencia, abra una solicitud de soporte.