A question concerning product's antivirus compatability

Discussion of open issues, suggestions and bugs regarding database management and administration tools for MySQL
Post Reply
geckoneer
Posts: 2
Joined: Tue 11 Jun 2013 20:05

A question concerning product's antivirus compatability

Post by geckoneer » Tue 11 Jun 2013 20:23

Today I have downloaded the latest version of dbForge for MySQL from the official download location, Russian localization. The installer is not signed, so I cannot confirm that it was not modified by an evil MITM in transit. Also, on VirusTotal, Antiy-AVL engine detects a Trojan inside. Please see VirusTotal analysis for dbForge for MySQL 6.0.265

.jp
Devart Team
Posts: 345
Joined: Wed 09 Sep 2009 06:55
Location: devart

Re: A question concerning product's antivirus compatability

Post by .jp » Wed 12 Jun 2013 09:24

The tunnel.php file is included into the product installation file. It allows creating connection to MySQL server using HTTP. Interaction with MySQL server via PHP is performed through sockets. It seems that this antivirus considered it dangerous and that's why showed a warning.

Besides, on the hosting of our site the McAfee Antivirus is installed, and it is impossible to upload files with viruses.

geckoneer
Posts: 2
Joined: Tue 11 Jun 2013 20:05

Re: A question concerning product's antivirus compatability

Post by geckoneer » Wed 12 Jun 2013 11:41

Why don't you sign your installer with Authenticode certificate?

.jp
Devart Team
Posts: 345
Joined: Wed 09 Sep 2009 06:55
Location: devart

Re: A question concerning product's antivirus compatability

Post by .jp » Thu 13 Jun 2013 08:24

We are going to sign the installer in the nearest future.

Post Reply