Virus Scanner Removed Threat after installing New Toolkit

Discussion in 'C-Bus Toolkit and C-Gate Software' started by Colin, Jun 7, 2012.

  1. Colin

    Colin Moderator

    Joined:
    Aug 3, 2004
    Messages:
    125
    Likes Received:
    24
    Location:
    Australia
    SO I downloaded the new toolkit tonight and chucked it on

    After the install my Norton Internet Security Pops up dealing with a new threat Suspicious.Cloud.5

    Finlay it comes back and said it has remove cgateserviceevents.dll

    this issue occured on Windows 7x64 but PC. the Virus Scanner is fully Updated.

    The Details from the Virus Scanenr are Below

    This is a link to the details (nice to know it is regarded low risk)
    http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2010-090200-2232-99&tabid=2

    Full Path: c:\clipsal\c-gate2\cgateserviceevents.dll
    Threat: Suspicious.Cloud.5
    ____________________________
    ____________________________
    On computers as of Not Available
    Last Used 7/06/2012 at 9:09:31 PM
    Startup Item No
    Launched No
    ____________________________
    ____________________________
    Unknown
    Number of users in the Norton Community that have used this file: Unknown
    ____________________________
    Unknown
    This file release is currently not known.
    ____________________________
    High
    This file risk is high.
    ____________________________
    Threat Details
    Threat type: Heuristic Virus. Detection of a threat based on malware heuristics.
    ____________________________

    ____________________________
    File Actions
    File: c:\clipsal\c-gate2\cgateserviceevents.dll
    Removed
    ____________________________
    File Thumbprint - SHA:
    484c5ac5c7eb1f43976a11afc337403c7e1bfa6c6cda355087f82592acc28e30
    ____________________________
    File Thumbprint - MD5:
    107716e602f7f4b0c2d5be1d94fc90cc
    ____________________________
     
    Colin, Jun 7, 2012
    #1
  2. Colin

    Colin Moderator

    Joined:
    Aug 3, 2004
    Messages:
    125
    Likes Received:
    24
    Location:
    Australia
    Probably should add that Toolkit at least from a basic quick view still seems to be working. So what it the impact of having the DLL in question removed?:confused:
     
    Colin, Jun 7, 2012
    #2
  3. Colin

    daniel C-Busser Moderator

    Joined:
    Jul 26, 2004
    Messages:
    770
    Likes Received:
    21
    Location:
    Adelaide
    Hi Colin,

    Thanks for that report. Looks like it could be a false positive, we will submit the file to Norton to review and update their scanner.

    This dll does not contain any code - it simply stores a couple of format strings used by the Windows Event Log to display errors that occur when starting or stopping C-Gate. The absence of this DLL will just mean that these messages will not display in the Event Viewer as intended. It's not a necessary component and the software will function okay without it.

    Thanks again, we will have a fix for this as soon as we can. [#23589]
     
    Last edited by a moderator: Jun 9, 2012
    daniel, Jun 7, 2012
    #3
  4. Colin

    daniel C-Busser Moderator

    Joined:
    Jul 26, 2004
    Messages:
    770
    Likes Received:
    21
    Location:
    Adelaide
    Symantec have reviewed the file and will update their definitions so it is not treated as a virus.
     
    daniel, Jun 13, 2012
    #4
Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.