You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Chuck Rolke (JIRA)" <ji...@apache.org> on 2012/11/29 16:04:58 UTC
[jira] [Resolved] (QPID-4439) Norton Internet Security Deems Qpid
and Boost DLLs to be Suspicious.Cloud.7.F Viruses
[ https://issues.apache.org/jira/browse/QPID-4439?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Chuck Rolke resolved QPID-4439.
-------------------------------
Resolution: Cannot Reproduce
Fix Version/s: 0.18
I reported this through Symantec's False Positive reporting system. After a week to ten days they responded that the issue was resolved in a recent release.
Rescanning a recent build reveals no threats and no files moved to quarantine. The scan included x86/x64, VS2008/VS2010, debug/relwithdebinfo variations. The scan included the both zip file with the problematic DLL files in them and directories of unzipped files.
Note that recovering unzipped files from quarantine is really easy but there's no recovery from a threat removal process that deletes the files from zip archives.
> Norton Internet Security Deems Qpid and Boost DLLs to be Suspicious.Cloud.7.F Viruses
> -------------------------------------------------------------------------------------
>
> Key: QPID-4439
> URL: https://issues.apache.org/jira/browse/QPID-4439
> Project: Qpid
> Issue Type: Bug
> Components: Tools
> Affects Versions: 0.18
> Environment: Windows 7, NIS 19.9.0.9 Updated Nov 16, 2012
> Reporter: Chuck Rolke
> Assignee: Chuck Rolke
> Fix For: 0.18
>
>
> NIS did a full system scan and declared many important QPID DLL files to be Suspicious.Cloud.7.F viruses. These include:
> mssql_stored.dll, msclfs_stored.dll, test_stored.dll, stored.dll, had.dll, replication_exchanged.dll, replication_listener.dll, boost_filesystem-vc100-mt-gd-1_47.dll, boost_math_c99l-vc100-mt-gd-1_47.dll
> Without much analysis it looks like NIS is picking on vc100 (Visual Studio 2010) debug files.
> This finally explains the bit rot that my development environment occasionally suffers.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org