Icon View Thread

The following is the text of the current message along with any replies.
Messages 1 to 3 of 3 total
Thread False virus detection Trojan.Ciusky.Gen.13
Mon, May 28 2018 5:50 AMPermanent Link

Hamid

Diagnostica AS

Hi
I am copying data between to tables. The new table has a blob field with binary data (eg. photos, parameters, cures, etc...)
Middle of conversation I get a error message from Norman antivirus. Trojan.Ciusky.Gen.13 and my program stops continuing copying data. Please see the attached screen shots.
Do you know how can I resolve it? (btw, I didn't test the operation on pc with other antiviruses).



Attachments: Norman.png
Tue, May 29 2018 3:10 AMPermanent Link

Roy Lambert

NLH Associates

Team Elevate Team Elevate

Hamid

How are you doing the transfer? SQL or navigational?

If its navigational the first thing to try is a try..except block. Wether that will work depends on a) when Norman kicks in and b) what it does. If if quarantines the entire file you are probably not going anywhere.

What happens if you use Norman to scan the .blb file - does it find a virus then?

You could also try exporting the table and importing it.

Again depending on when Norman reacts it may be possible for you to scan each record prior to Norman getting it and ignore any affected records.


Other than that, as far as I know you have four options:

1. Don't transfer the blob data
2. Report the false positive (assuming its not really a virus in there) and hope it gets fixed
3. Exclude blb files or their old & new directories from scanning
4. Turn the av off

Turning off the av for the duration of the transfer is probably going to be the most effective but I recommend scanning with at least one other av to see if you really have a virus in there.


Roy Lambert
Tue, May 29 2018 1:58 PMPermanent Link

Tim Young [Elevate Software]

Elevate Software, Inc.

Avatar

Email timyoung@elevatesoft.com

Hamid,

<< I am copying data between to tables. The new table has a blob field with binary data (eg. photos, parameters, cures, etc...)
Middle of conversation I get a error message from Norman antivirus. Trojan.Ciusky.Gen.13 and my program stops continuing copying data. Please see the attached screen shots. >>

Are you actually writing the data out to a file ?  If not, then I have no idea how the AV software is able to even scan the data unless it is injecting itself between your process and the VM, which I find very hard to believe.

Tim Young
Elevate Software
www.elevatesoft.com
Image