Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-bugs: [Wireshark-bugs] [Bug 1895] New: Sophos Anti-Virus reports that packet.dll contains a virus

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Fri, 5 Oct 2007 07:33:01 +0000 (GMT)

http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1895

           Summary: Sophos Anti-Virus reports that packet.dll contains a
                    virus
           Product: Wireshark
           Version: 0.99.6
          Platform: PC
        OS/Version: Windows 2000
            Status: NEW
          Severity: Major
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: mark.vandenbriele@xxxxxxxxxx


Build Information:
Version 0.99.6a (SVN Rev 22276)
--
When running wireshark, from a clean install from wireshark-setup-0.99.6a.exe,
Sophos anti-virus reports that winnt\system32\packet.dll is infected by the
Mal/Generic-A virus.

After deleting the file and reinstalling from scratch I still get the same
message. This seems to have started happening since an update to Sophos
Anti-Virus on October 4th.

Sophos anti-virus version: 6.5.9
Threat detection data: 4.22
Threat detection engine: 2.50.6
Last updated 5th October 2007


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

  • Follow-Ups:
    • [Wireshark-bugs] [Bug 1895] Sophos Anti-Virus reports that packet.dll contains a virus
      • From: bugzilla-daemon
  • Prev by Date: [Wireshark-bugs] [Bug 1894] Add IMPS 1.2 and IMPS 1.3 protocols support
  • Next by Date: [Wireshark-bugs] [Bug 1312] For "Continuation or non-HTTP traffic", there is extraneon section in "packet decode" (=middle) pane
  • Previous by thread: [Wireshark-bugs] [Bug 1894] Add IMPS 1.2 and IMPS 1.3 protocols support
  • Next by thread: [Wireshark-bugs] [Bug 1895] Sophos Anti-Virus reports that packet.dll contains a virus
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation