View Full Version : Computers SOPHOS effs up hardcore

09-20-2012, 10:14 AM
So yesterday Sophos dropped a huge bomb on companies and it's thinking all kinds of stuff are viruses which are actually not.
I'm talking the auto quarantine and deletion of necessary .exe files.

For us it's affecting: ipass, vpn, citrix, java, among other applications.

This is a big deal for large companies using Sophos.

09-20-2012, 10:17 AM

09-20-2012, 10:18 AM
Sophos products experience false positive: Shh/Updater-B [ Edited ]
Thu 20-Sep-2012 13:42 - edited Thu 20-Sep-2012 14:25

As you are aware, Sophos experienced a serious false positive issue yesterday. An update published by SophosLabs at 18:48:35 (UTC) on Wednesday, 19 September resulted in false positive reports of Shh/Updater-B on customers' Windows systems.

Although the underlying cause has been fixed, many customers are still experiencing issues as a result. Our support and engineering teams are treating this with the utmost urgency and will continue to update the Sophos Knowledgebase Article (http://www.sophos.com/en-us/support/knowledgebase/118311.aspx) as we learn more. Sophos experts are also actively working on solutions to assist customers, and our sales and channel teams are reaching out proactively to key accounts.

An update to the problem was released and published at 21:32 (UTC) on Wednesday, 19 September, and should now be available to the majority of customers.

More details, and advice for customers who are impacted by the issue, are available at http://www.sophos.com/en-us/support/knowledgebase/118311.aspx

Sophos experts are working on more ways to resolve the issue for impacted users who are unable to update their systems.

Sophos technical support is currently experiencing a very high level of calls, but is endeavouring to assist each affected customer as quickly as possible.

Sophos customers are advised to follow @SophosSupport on Twitter, or visit the discussion forums in this community for updates, discussions and assistance.

We would like to apologise for all of the disruption caused to our many customers and partners worldwide. We recognise the issue is very serious, and are doing everything we can to resolve it.

We are launching a full investigation to analyse how this happened to ensure that it never happens again, and will provide further information on the analysis in due course.

More information:
SophosTalk community manager
Sophos, Abingdon, UK
For more online Support:

English and localised knowlegdebases.
Follow us on Twitter @SophosSupport.
The Sophos Support video library.