PDA

View Full Version : Luhe.Fiha.P virus detected during upgrade from Premier 2014 to 2015



arupert
06-10-2015, 11:00 AM
Today I upgraded InstallShield Premier 2014 to InstallShield Premier 2015.

During installation, AVG antivirus reported the Luhe.Fiha.P virus in the following file:
c:\Program Files (x86)\InstallShield\2015\System\1033\IsDevPkgUI11.dll";"Infected"

Is there really a threat? If I remove the dll, what functionality is lost?

Thanks!

MichaelU
06-10-2015, 01:55 PM
We do receive false positive reports of such viruses from time to time. This particular report has come up before against this and related files.

The ISDevPkgUI11.dll provides resources for toolbars as part of our Visual Studio integration, so if removed, your ability to use InstallShield as part of Visual Studio will be adversely affected. If you do not use this functionality, you will probably not notice the difference.

As the file contains only resources, and does not contain code, it's hard to tell how it could be detected as a virus. Maybe there are some weird viruses out there that work magic I don't yet understand.

arupert
06-10-2015, 02:45 PM
Michael,

Thanks for the quick response.

Good to know it is just a false positive. Currently I am not using the Visual Studio integration, so no problem for now. I can restore that file if I need it in the future.