Red Gate forums :: View topic - Websense reporting RgSqbConvHelper.dll as a virus
Return to www.red-gate.com RSS Feed Available

Search  | Usergroups |  Profile |  Messages |  Log in  Register 
Go to product documentation

SQB2MTF GUI utility forum

Websense reporting RgSqbConvHelper.dll as a virus

Search in SQB2MTF GUI utility forum
Post new topic   Reply to topic
Jump to:  
Author Message
oderks



Joined: 30 Jul 2008
Posts: 46

PostPosted: Thu Sep 03, 2009 3:05 pm    Post subject: Websense reporting RgSqbConvHelper.dll as a virus Reply with quote

Just to let you know:
A hired developer received one of our databases (version 6 backup).
Since he only had the old converter, I was sending the version 6 converter via e-mail.
Our websense message scanning service quarantined the message:

Subject: Notification: virus : W32/Swizzor-based.2!Maximus : Emailing: RgSqbConvHelper.dll

I sent the link to the developer for him to download the tool himself, but maybe you want to know these kind of messages since it might scare some people (surely when 2 network administrators come to your desk asking questions).

PS: the tool was zipped when I emailed it. We tried all 3 files seperately and only the file stated above was stopped.
Back to top
View user's profile Send private message
RBA



Joined: 05 Jun 2009
Posts: 148
Location: Cambridge

PostPosted: Mon Sep 07, 2009 11:05 am    Post subject: Reply with quote

Hi Oderks,

Sorry to hear the file got flagged. I ran some tests which came back clean. Could you please confirm which version of the file you have?

The results below are for 6.2.0.134

SHA1(RgSqbConvHelper.dll)= 977495364415bd981818ab7e51756d6759342151
MD5(RgSqbConvHelper.dll)= 2d948f22fc515443c206b1004a97da25


_________________
Robin Anderson
Development
Red-Gate Software
Back to top
View user's profile Send private message Send e-mail
oderks



Joined: 30 Jul 2008
Posts: 46

PostPosted: Mon Sep 07, 2009 11:15 am    Post subject: Reply with quote

Version 6.2.0.134
MD5: 2D948F22FC515443C206B1004A97DA25

Edited: typo
Back to top
View user's profile Send private message
RBA



Joined: 05 Jun 2009
Posts: 148
Location: Cambridge

PostPosted: Mon Sep 07, 2009 11:22 am    Post subject: Reply with quote

Good, that's the official release.

I suspect that the virus scanner heuristically flagged a false positive. The DLL does contain executable code after all (albeit .NET), which can scare email scanners regardless of intent.

As a result of this, we're disucssing putting popular virus scanners in the build chain to look out for this kind of thing.
_________________
Robin Anderson
Development
Red-Gate Software
Back to top
View user's profile Send private message Send e-mail
Display posts from previous:   
Reply to topic All times are GMT + 1 Hour
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group