BloodHound virus-alert after Performance Profiler update?

Code profiling for .NET developers.

Moderator: dom.smith

BloodHound virus-alert after Performance Profiler update?

Postby Espenb » Mon Sep 02, 2013 11:56 am

Hi guys,

Not sure if this is posted in the right of the forum, sorry if it's not.

After one of our users updated Ants Performance Profiler to version 8 he got a virus-alert saying that Redgate.Profiler.DebugHelper.exe was infected by BloodHound.SymVT.FP.H. I guess it's a false alarm, but wanted to ask here if anyone else has experienced this alert?

Pic:
http://bildr.no/view/VTZzUVA1

Thanks in advance.

Best Regards,
Espen
Espenb
 
Posts: 2
Joined: Mon Sep 02, 2013 11:43 am

Postby dom.smith » Mon Sep 02, 2013 5:57 pm

Hi,

Thanks for letting us know. We haven't heard of this issue before now.

Can you confirm which build number of ANTS Performance Profiler it was and the name and version number of your virus checker, please?

To find the build number of ANTS Performance Profiler:
1) In Windows Explorer, navigate to %ProgramFiles%\\Red Gate\\ANTS Performance Profiler 8\\
2) Right-click on RedGate.Profiler.UI.exe, and click Properties
3) On the Details tab, the build number is the 'Product version' number

Thanks again,

Dom.
Dominic Smith,
Project Manager,
Red Gate Software.
dom.smith
 
Posts: 95
Joined: Thu Jun 03, 2010 5:54 pm
Location: Cambridge, UK

Re:

Postby Espenb » Tue Sep 03, 2013 9:03 am

dom.smith wrote:Hi,

Thanks for letting us know. We haven't heard of this issue before now.

Can you confirm which build number of ANTS Performance Profiler it was and the name and version number of your virus checker, please?

To find the build number of ANTS Performance Profiler:
1) In Windows Explorer, navigate to %ProgramFiles%\\Red Gate\\ANTS Performance Profiler 8\\
2) Right-click on RedGate.Profiler.UI.exe, and click Properties
3) On the Details tab, the build number is the 'Product version' number

Thanks again,

Dom.


Hi Dom,

Thanks for your answer.

Here is the build number of ANTS Performance Profiler: 8.2.0.12
Antivirus: Symantec Endpoint Protection version 12.1.1000.157 RU1

- Espen
Espenb
 
Posts: 2
Joined: Mon Sep 02, 2013 11:43 am

Postby dom.smith » Tue Sep 03, 2013 12:15 pm

Thanks Espen. We'll look into it.
Dominic Smith,
Project Manager,
Red Gate Software.
dom.smith
 
Posts: 95
Joined: Thu Jun 03, 2010 5:54 pm
Location: Cambridge, UK

Postby dom.smith » Tue Sep 03, 2013 5:22 pm

Hi Espen,

I've escalated this to Symantec support and they have replied saying that they can't reproduce the false-positive using the latest virus definition files.

Please can you check whether your user still receives this error with the latest definitions? If so, Symantec tell me that they'll need:

- Details of the message or a screen shot of the message received
- Exact step by step instructions on how to recreate issue
- Detection log(s) from the product

If you need to send me this information, please reply below and I'll PM you my email address.

Thanks again,

Dom.
Dominic Smith,
Project Manager,
Red Gate Software.
dom.smith
 
Posts: 95
Joined: Thu Jun 03, 2010 5:54 pm
Location: Cambridge, UK


Return to ANTS Performance Profiler 8

Who is online

Users browsing this forum: No registered users and 0 guests