You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Chuck Rolke (JIRA)" <ji...@apache.org> on 2012/11/16 15:28:12 UTC
[jira] [Created] (QPID-4439) Norton Internet Security Deems Qpid
and Boost DLLs to be Suspicious.Cloud.7.F Viruses
Chuck Rolke created QPID-4439:
---------------------------------
Summary: Norton Internet Security Deems Qpid and Boost DLLs to be Suspicious.Cloud.7.F Viruses
Key: QPID-4439
URL: https://issues.apache.org/jira/browse/QPID-4439
Project: Qpid
Issue Type: Bug
Components: Tools
Affects Versions: 0.18
Environment: Windows 7, NIS 19.9.0.9 Updated Nov 16, 2012
Reporter: Chuck Rolke
NIS did a full system scan and declared many important QPID DLL files to be Suspicious.Cloud.7.F viruses. These include:
mssql_stored.dll, msclfs_stored.dll, test_stored.dll, stored.dll, had.dll, replication_exchanged.dll, replication_listener.dll, boost_filesystem-vc100-mt-gd-1_47.dll, boost_math_c99l-vc100-mt-gd-1_47.dll
Without much analysis it looks like NIS is picking on vc100 (Visual Studio 2010) debug files.
This finally explains the bit rot that my development environment occasionally suffers.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org
RE: [jira] [Created] (QPID-4439) Norton Internet Security Deems Qpid and Boost DLLs to be Suspicious.Cloud.7.F Viruses
Posted by Mary Hinton <m....@nc.rr.com>.
I had the same problem. Also had the problem with the proton dll ported to windows and proton is not using boost.
Reported it to Norton. I thought they had fixed it..
I haven't been running qpid code for a while, but I don't have the false positive with the proton code anymore.
-----Original Message-----
From: Chuck Rolke (JIRA) [mailto:jira@apache.org]
Sent: Friday, November 16, 2012 9:28 AM
To: dev@qpid.apache.org
Subject: [jira] [Created] (QPID-4439) Norton Internet Security Deems Qpid and Boost DLLs to be Suspicious.Cloud.7.F Viruses
Chuck Rolke created QPID-4439:
---------------------------------
Summary: Norton Internet Security Deems Qpid and Boost DLLs to be Suspicious.Cloud.7.F Viruses
Key: QPID-4439
URL: https://issues.apache.org/jira/browse/QPID-4439
Project: Qpid
Issue Type: Bug
Components: Tools
Affects Versions: 0.18
Environment: Windows 7, NIS 19.9.0.9 Updated Nov 16, 2012
Reporter: Chuck Rolke
NIS did a full system scan and declared many important QPID DLL files to be Suspicious.Cloud.7.F viruses. These include:
mssql_stored.dll, msclfs_stored.dll, test_stored.dll, stored.dll, had.dll, replication_exchanged.dll, replication_listener.dll, boost_filesystem-vc100-mt-gd-1_47.dll, boost_math_c99l-vc100-mt-gd-1_47.dll
Without much analysis it looks like NIS is picking on vc100 (Visual Studio 2010) debug files.
This finally explains the bit rot that my development environment occasionally suffers.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org For additional commands, e-mail: dev-help@qpid.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org
[jira] [Resolved] (QPID-4439) Norton Internet Security Deems Qpid
and Boost DLLs to be Suspicious.Cloud.7.F Viruses
Posted by "Chuck Rolke (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/QPID-4439?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Chuck Rolke resolved QPID-4439.
-------------------------------
Resolution: Cannot Reproduce
Fix Version/s: 0.18
I reported this through Symantec's False Positive reporting system. After a week to ten days they responded that the issue was resolved in a recent release.
Rescanning a recent build reveals no threats and no files moved to quarantine. The scan included x86/x64, VS2008/VS2010, debug/relwithdebinfo variations. The scan included the both zip file with the problematic DLL files in them and directories of unzipped files.
Note that recovering unzipped files from quarantine is really easy but there's no recovery from a threat removal process that deletes the files from zip archives.
> Norton Internet Security Deems Qpid and Boost DLLs to be Suspicious.Cloud.7.F Viruses
> -------------------------------------------------------------------------------------
>
> Key: QPID-4439
> URL: https://issues.apache.org/jira/browse/QPID-4439
> Project: Qpid
> Issue Type: Bug
> Components: Tools
> Affects Versions: 0.18
> Environment: Windows 7, NIS 19.9.0.9 Updated Nov 16, 2012
> Reporter: Chuck Rolke
> Assignee: Chuck Rolke
> Fix For: 0.18
>
>
> NIS did a full system scan and declared many important QPID DLL files to be Suspicious.Cloud.7.F viruses. These include:
> mssql_stored.dll, msclfs_stored.dll, test_stored.dll, stored.dll, had.dll, replication_exchanged.dll, replication_listener.dll, boost_filesystem-vc100-mt-gd-1_47.dll, boost_math_c99l-vc100-mt-gd-1_47.dll
> Without much analysis it looks like NIS is picking on vc100 (Visual Studio 2010) debug files.
> This finally explains the bit rot that my development environment occasionally suffers.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org
[jira] [Assigned] (QPID-4439) Norton Internet Security Deems Qpid
and Boost DLLs to be Suspicious.Cloud.7.F Viruses
Posted by "Chuck Rolke (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/QPID-4439?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Chuck Rolke reassigned QPID-4439:
---------------------------------
Assignee: Chuck Rolke
> Norton Internet Security Deems Qpid and Boost DLLs to be Suspicious.Cloud.7.F Viruses
> -------------------------------------------------------------------------------------
>
> Key: QPID-4439
> URL: https://issues.apache.org/jira/browse/QPID-4439
> Project: Qpid
> Issue Type: Bug
> Components: Tools
> Affects Versions: 0.18
> Environment: Windows 7, NIS 19.9.0.9 Updated Nov 16, 2012
> Reporter: Chuck Rolke
> Assignee: Chuck Rolke
>
> NIS did a full system scan and declared many important QPID DLL files to be Suspicious.Cloud.7.F viruses. These include:
> mssql_stored.dll, msclfs_stored.dll, test_stored.dll, stored.dll, had.dll, replication_exchanged.dll, replication_listener.dll, boost_filesystem-vc100-mt-gd-1_47.dll, boost_math_c99l-vc100-mt-gd-1_47.dll
> Without much analysis it looks like NIS is picking on vc100 (Visual Studio 2010) debug files.
> This finally explains the bit rot that my development environment occasionally suffers.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org
[jira] [Commented] (QPID-4439) Norton Internet Security Deems Qpid
and Boost DLLs to be Suspicious.Cloud.7.F Viruses
Posted by "Mary hinton (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/QPID-4439?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13498844#comment-13498844 ]
Mary hinton commented on QPID-4439:
-----------------------------------
Added my comments to Jira:
I had the same problem. Also had the problem with the qpid-proton.dll ported to windows, and proton is not using boost.
Reported it to Norton. I thought they had fixed it.
I haven't been running qpid code for a while, but I don't have the false positive with the proton dll anymore.
Maybe if someone else reports this to Norton, they will take another look at it.
If I remember right, when I used some of the earlier versions of Boost, Norton's didn't register false positives.
I'm also using Visual Studio 2010, but I think it is a problem with the other VS versions too.
> Norton Internet Security Deems Qpid and Boost DLLs to be Suspicious.Cloud.7.F Viruses
> -------------------------------------------------------------------------------------
>
> Key: QPID-4439
> URL: https://issues.apache.org/jira/browse/QPID-4439
> Project: Qpid
> Issue Type: Bug
> Components: Tools
> Affects Versions: 0.18
> Environment: Windows 7, NIS 19.9.0.9 Updated Nov 16, 2012
> Reporter: Chuck Rolke
>
> NIS did a full system scan and declared many important QPID DLL files to be Suspicious.Cloud.7.F viruses. These include:
> mssql_stored.dll, msclfs_stored.dll, test_stored.dll, stored.dll, had.dll, replication_exchanged.dll, replication_listener.dll, boost_filesystem-vc100-mt-gd-1_47.dll, boost_math_c99l-vc100-mt-gd-1_47.dll
> Without much analysis it looks like NIS is picking on vc100 (Visual Studio 2010) debug files.
> This finally explains the bit rot that my development environment occasionally suffers.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org