False positive: Sophos Anti-Virus

[Aschwin]

Sophos Anti-Virus (http://www.sophos.com)

The scan engine ("C:\Program Files\Sophos SWEEP for
NT\SWEEPSRV.SYS"), the network engine ("C:\Program
Files\Sophos SWEEP for NT\SWNETSUP.EXE") and the network
update engine ("C:\Program Files\Sophos SWEEP for
NT\SWUPDATE.EXE") were detected as spyware. No need to say
they are not.
Aschwin

 

[Don Eilenberger]

Same problem. Every morning I get an alert about Sophos
since it updates itself almost daily. I have found no way
with MS-ASW to add it to an "allowed" list.

Anyone have any ideas?

 

[Bill Sanderson]

Does it give a name for the supposed spyware that these files are supposed
to be?

You can ping the folks at Sophos and ask them to use the False Positive
report form:

http://www.spynet.com/falsepositive.aspx


However, reporting here is probably enough

 

[Guest]

The user admin, has decided to allow the startup file
C:\Documents and Settings\All Users\Start
Menu\Programs\Startup\InterCheck Monitor.LNK to be added
to the startup directory

See above ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
and:

The startup file C:\Documents and Settings\All Users\Start
Menu\Programs\Startup\InterCheck Monitor.LNK has been
granted permission to be added to your startup programs

 

[Bill Sanderson]

Give me some background--I see the alert you are getting, but I don't know
what this is about--is this a legit app or something unexpected?