Inedo Community Forums Forums
    • Recent
    • Tags
    • Popular
    • Login

    Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.

    If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!

    Avira Anti-Virus doesn't like the ProGet 3.5.7 install

    Scheduled Pinned Locked Moved Support
    proget
    2 Posts 1 Posters 3 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ? This user is from outside of this forum
      Guest
      last edited by

      When I tried to install ProGet 3.5.7 on a Windows Server 2008 R2 protected by Avira Server Security I got this warning:

      Avira Server Security detected suspicious code in file
      C:\Users\USERNAME\AppData\Local\Temp\ProGetSetup\bmdbupdate.exe
      The code has the designation TR/Dropper.Gen!

      Avira quarantined bmdbupdate.exe which resulted in a failed install.

      It would not surprise me that this is a false positive by Avira, but I am very hesitant to install something that Avira is unhappy with. There is always the chance that something bad is lurking in your network and bmdbupdate.exe is indeed infected with something unwanted.

      What thoughts do you have?

      Product: ProGet
      Version: 3.5.7

      1 Reply Last reply Reply Quote 0
      • ? This user is from outside of this forum
        Guest
        last edited by

        All of our installers are signed, our build process is isolated, and we do frequent network scans -- so it's definitely not a virus. If you want to verify it yourself, you're welcome to use a tool like .NET Reflector; it's just managed code and is not obfuscated in any way. It's just a self-contained SQL change script distribution package generated by our BuildMaster product.

        Still, every once in a while we get some part of the installer flagged by an AntiVirus scanner. Usually it's bmdbupdate.exe, since that does some "questionable-looking" things to an antivirus engine, such as embedding its dependency assemblies as resources.

        Please let them know about the false positive; the more people who do, the greater the chance they won't flag these in the future.

        Thanks for letting us know!

        1 Reply Last reply Reply Quote 0

        Hello! It looks like you're interested in this conversation, but you don't have an account yet.

        Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

        With your input, this post could be even better 💗

        Register Login
        • 1 / 1
        • First post
          Last post
        Inedo Website Home • Support Home • Code of Conduct • Forums Guide • Documentation