Websense reporting RgSqbConvHelper.dll as a virus

[oderks]

Just to let you know:
A hired developer received one of our databases (version 6 backup).
Since he only had the old converter, I was sending the version 6 converter via e-mail.
Our websense message scanning service quarantined the message:

Subject: Notification: virus : W32/Swizzor-based.2!Maximus : Emailing: RgSqbConvHelper.dll

I sent the link to the developer for him to download the tool himself, but maybe you want to know these kind of messages since it might scare some people (surely when 2 network administrators come to your desk asking questions).

PS: the tool was zipped when I emailed it. We tried all 3 files seperately and only the file stated above was stopped.

[RBA]

Hi Oderks,

Sorry to hear the file got flagged. I ran some tests which came back clean. Could you please confirm which version of the file you have?

The results below are for 6.2.0.134

SHA1(RgSqbConvHelper.dll)= 977495364415bd981818ab7e51756d6759342151
MD5(RgSqbConvHelper.dll)= 2d948f22fc515443c206b1004a97da25


_________________
Robin Anderson
Development
Red-Gate Software

[oderks]

Version 6.2.0.134
MD5: 2D948F22FC515443C206B1004A97DA25

Edited: typo

[RBA]

Good, that's the official release.

I suspect that the virus scanner heuristically flagged a false positive. The DLL does contain executable code after all (albeit .NET), which can scare email scanners regardless of intent.

As a result of this, we're disucssing putting popular virus scanners in the build chain to look out for this kind of thing.
_________________
Robin Anderson
Development
Red-Gate Software