-
标题
Security Risk Found: Trojan Horse in File: Quest SoftwarePerformance Analysis...RSRunner.exe -
说明
The RSRunner.exe seems to have been quarantined and removed on a server because it was considered to Trojan virus.
Why is this .exe file being flagged as such?
Critical Event has Occurred:
Event Date:
Hostname:
Operating System:
Rule Name: FRIT_AV_Virus_CleanFailed46
Policy Name: FRIT_WIN_Baseline_3.2
Rule Documentation:
Description:
Security Risk Found!Risk: Trojan Horse in File: D:Quest SoftwareQuest CentralPluginsPerformance Analysis MSSQLRSRunner.exe
by: Scheduled scan. Action Description: The file was left unchanged. -
解决办法
A virus file definition update has flagged some code used by our products as problematic. RSRunner.exe is a file used by our Performance Analysis products, and is a Delphi executable we use to schedule and generate reports. The file has been used by the client application for over 5 years without issue, but perhaps because the name is similar to a Trojan called SRunner.exe the file is being quarantined in some environments.
RSRunner.exe is a file within Performance Analysis GUI (PASS & PAO) which is responsible for PA GUI scheduled reports.The file is located atC:Program FilesQuest SoftwarePerformance AnalysisOraclefor Oracle andC:Program FilesQuest SoftwarePerformance AnalysisMSSQLfor SQL Server.A file with a similar name called SRUNNER.EXE is spread in the net, acting as a Trojan/Backdoor.The Anti-Virus processes identifies Performance Analysis RSRunner.exe file as the Trojan/Backdoor file.
***Note*** Anti virus venders have released new definition files that no longer identify Performance Analysis RSRunner.exe as a Trojan. Please update virus definition files dated 1-26-2010 or later.