ESET False Positive?

kmaughan

As of this morning ESET is detecting RedGate.SQLTest.dll as a variant of MSIL/Packed.SmartAssembly.M potentially unwanted application.

Presumably this is a false positive?

Brian Donahue

I'm sorry to say this happens from time to time because our code obfuscator gets used by malware authors and the virus signature ends up containing our obfuscator signature. You can consider it a false positive.

If it makes you feel any better, you can use an md5 utility and compute a hash on that DLL. It should match if the DLL has not been modified.

The MD5 hash for RedGate.SQLTest.dll version 1.5.0.78 is f809c4370e7150f2fcfdbdff3b4c8de5