Websense reporting RgSqbConvHelper.dll as a virus

SQL Backup to MTF Converter - A user interface to the SQB2MTF.exe command line utility for converting SQL Backup files (*.sqb) into native SQL Server (uncompressed) backup files.

Websense reporting RgSqbConvHelper.dll as a virus

Postby oderks » Thu Sep 03, 2009 3:05 pm

Just to let you know:
A hired developer received one of our databases (version 6 backup).
Since he only had the old converter, I was sending the version 6 converter via e-mail.
Our websense message scanning service quarantined the message:

Subject: Notification: virus : W32/Swizzor-based.2!Maximus : Emailing: RgSqbConvHelper.dll

I sent the link to the developer for him to download the tool himself, but maybe you want to know these kind of messages since it might scare some people (surely when 2 network administrators come to your desk asking questions).

PS: the tool was zipped when I emailed it. We tried all 3 files seperately and only the file stated above was stopped.
oderks
 
Posts: 46
Joined: Wed Jul 30, 2008 9:57 am

Postby RBA » Mon Sep 07, 2009 11:05 am

Hi Oderks,

Sorry to hear the file got flagged. I ran some tests which came back clean. Could you please confirm which version of the file you have?

The results below are for 6.2.0.134

SHA1(RgSqbConvHelper.dll)= 977495364415bd981818ab7e51756d6759342151
MD5(RgSqbConvHelper.dll)= 2d948f22fc515443c206b1004a97da25

Image
Robin Anderson
Development
Red-Gate Software
RBA
 
Posts: 148
Joined: Fri Jun 05, 2009 12:13 pm
Location: Cambridge

Postby oderks » Mon Sep 07, 2009 11:15 am

Version 6.2.0.134
MD5: 2D948F22FC515443C206B1004A97DA25

Edited: typo
oderks
 
Posts: 46
Joined: Wed Jul 30, 2008 9:57 am

Postby RBA » Mon Sep 07, 2009 11:22 am

Good, that's the official release.

I suspect that the virus scanner heuristically flagged a false positive. The DLL does contain executable code after all (albeit .NET), which can scare email scanners regardless of intent.

As a result of this, we're disucssing putting popular virus scanners in the build chain to look out for this kind of thing.
Robin Anderson
Development
Red-Gate Software
RBA
 
Posts: 148
Joined: Fri Jun 05, 2009 12:13 pm
Location: Cambridge


Return to SQB2MTF GUI utility

Who is online

Users browsing this forum: No registered users and 0 guests

cron