BloodHound virus-alert after Performance Profiler update?

Espenb

Hi guys,

Not sure if this is posted in the right of the forum, sorry if it's not.

After one of our users updated Ants Performance Profiler to version 8 he got a virus-alert saying that Redgate.Profiler.DebugHelper.exe was infected by BloodHound.SymVT.FP.H. I guess it's a false alarm, but wanted to ask here if anyone else has experienced this alert?

Pic:
http://bildr.no/view/VTZzUVA1

Thanks in advance.

Best Regards,
Espen

dom.smith

Hi,

Thanks for letting us know. We haven't heard of this issue before now.

Can you confirm which build number of ANTS Performance Profiler it was and the name and version number of your virus checker, please?

To find the build number of ANTS Performance Profiler:
1) In Windows Explorer, navigate to %ProgramFiles%\Red Gate\ANTS Performance Profiler 8\
2) Right-click on RedGate.Profiler.UI.exe, and click Properties
3) On the Details tab, the build number is the 'Product version' number

Thanks again,

Dom.

Espenb

dom.smith wrote:

Hi,

Thanks for letting us know. We haven't heard of this issue before now.

Can you confirm which build number of ANTS Performance Profiler it was and the name and version number of your virus checker, please?

To find the build number of ANTS Performance Profiler:
1) In Windows Explorer, navigate to %ProgramFiles%\Red Gate\ANTS Performance Profiler 8\
2) Right-click on RedGate.Profiler.UI.exe, and click Properties
3) On the Details tab, the build number is the 'Product version' number

Thanks again,

Dom.

Hi Dom,

Thanks for your answer.

Here is the build number of ANTS Performance Profiler: 8.2.0.12
Antivirus: Symantec Endpoint Protection version 12.1.1000.157 RU1

- Espen

dom.smith

Thanks Espen. We'll look into it.

dom.smith

Hi Espen,

I've escalated this to Symantec support and they have replied saying that they can't reproduce the false-positive using the latest virus definition files.

Please can you check whether your user still receives this error with the latest definitions? If so, Symantec tell me that they'll need:

- Details of the message or a screen shot of the message received
- Exact step by step instructions on how to recreate issue
- Detection log(s) from the product

If you need to send me this information, please reply below and I'll PM you my email address.

Thanks again,

Dom.