Hi,

I have a problem.

F-Secure gives several virus warnings when installing the latest SlimDX SDK (June 2010).

It removes about 6 files from what seems to be temporary installation folders.
I am assuming these are false positives - and the installation seems to work just fine even after F-Secures meddling.

But, our security guy does not like things like this, so I am wondering if anyone else has had issues with this,
and if there is any way they can be resolved so we can install the SDK without setting off all the alarms in the building...

I've tried to google it but haven't found anything so I thought I'd ask here...

/S

Edit:
This is what F-Secure says:

Message: Malicious code found in file C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\fec-0\SlimDX.dll.
Infection: Gen:Trojan.Heur.PT.@t4@ayD40uh

Message: Malicious code found in file C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\12dc-0\SlimDX.dll.
Infection: Gen:Trojan.Heur.PT.@t4@ayD40uh

Message: Malicious code found in file C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\f54-0\SlimDX.dll.
Infection: Gen:Trojan.Heur.PT.@t4@aW3rsCp

Message: Malicious code found in file C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\44c-0\SlimDX.dll.
Infection: Gen:Trojan.Heur.PT.@t4@aW3rsCp

Message: Malicious code found in file C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\12e0-0\SlimDX.dll.
Infection: Gen:Trojan.Heur.PT.@t4@aiZgf8l

Message: Malicious code found in file C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\1224-0\SlimDX.dll.
Infection: Gen:Trojan.Heur.PT.@t4@aiZgf8l

It's almost certainly a false positive. My googling turned up http://forum.f-secure.com/topic.asp?TOPIC_ID=13515 which might be helpful. It'll take a little while after submitting it for them to update their signatures though.

As it's a heuristic detection and not a specific virus detected, you could try persuading your security guy to turn off the heuristics in the virus scanner options.

You could also try scanning the files with http://www.virustotal.com/ which will run it through a large selection of AV programs.

Yeah I am pretty sure it's false too...

Thanks for the tips.

/S