Websense reporting RgSqbConvHelper.dll as a virus

oderksoderks Posts: 67 Bronze 2
edited September 7, 2009 6:22AM in SQB2MTF GUI utility
Just to let you know:
A hired developer received one of our databases (version 6 backup).
Since he only had the old converter, I was sending the version 6 converter via e-mail.
Our websense message scanning service quarantined the message:

Subject: Notification: virus : W32/Swizzor-based.2!Maximus : Emailing: RgSqbConvHelper.dll

I sent the link to the developer for him to download the tool himself, but maybe you want to know these kind of messages since it might scare some people (surely when 2 network administrators come to your desk asking questions).

PS: the tool was zipped when I emailed it. We tried all 3 files seperately and only the file stated above was stopped.

Comments

  • Hi Oderks,

    Sorry to hear the file got flagged. I ran some tests which came back clean. Could you please confirm which version of the file you have?

    The results below are for 6.2.0.134

    SHA1(RgSqbConvHelper.dll)= 977495364415bd981818ab7e51756d6759342151
    MD5(RgSqbConvHelper.dll)= 2d948f22fc515443c206b1004a97da25

    resultss.png
    Robin Anderson
    Development
    Red-Gate Software
  • oderksoderks Posts: 67 Bronze 2
    Version 6.2.0.134
    MD5: 2D948F22FC515443C206B1004A97DA25

    Edited: typo
  • Good, that's the official release.

    I suspect that the virus scanner heuristically flagged a false positive. The DLL does contain executable code after all (albeit .NET), which can scare email scanners regardless of intent.

    As a result of this, we're disucssing putting popular virus scanners in the build chain to look out for this kind of thing.
    Robin Anderson
    Development
    Red-Gate Software
Sign In or Register to comment.