Enter Case number reference for associated cases.

Case #

Status:

Type: APM as a Service

Old Article ID: 1799

Old Article Type: diagnostic

 

Information:

Detail the contextual information specific to the issue; i.e. Product, Version, Agent, System, etc.

  • Dynatrace Portal (http://portal.dynatrace.com)
  • Dynatrace Recorder

Describe the problem, from the user perspective

When you download the Dynatrace Recorder installer from the Dynatrace Portal, you receive a pop-up warning from anti-virus software reporting that the .exe file is an unsafe download and/or a virus was detected.

An example of this warning:

WARNING: ProxyAV has detected a virus/PUS in this file!

File has been dropped.

ProxyAV Administrator: [XXXXXXXXX]

2011-05-25 15:19:12+01:00BST
Hardware serial number: 4206080249
ProxyAV (Version 3.2.3.1(39265)) - http://www.BlueCoat.com/
Antivirus Vendor: Kaspersky Labs
Scan Engine Version: 8.0.1.23
Pattern File Version: 110525.111700.5424873 (Timestamp: 2011.05.25 11:17:00)

Machine name: MHProxyAV
Machine IP address: 159.104.35.37
Server: 63.251.134.203
Client: 159.104.32.10
Protocol: ICAP

Virus/PUS: "PUS:NetTool.Win32.ProxySwitcher.d" found!
URL: http://image.gomeznetworks.com/downloads/gomezrecordersetup-3.1.0.29.exe

Clearly list the Steps to resolve the issue

We have received a few intermittent reports that segments of the Dynatrace Recorder code are being identified as a virus by certain anti-virus software programs. This warning is a false positive, caused by an over-reactive security environment.

If the software cannot be downloaded through your corporate firewall, you may need to download the file to a machine that is outside your corporate firewall, and copy it to external media such as a thumb drive from which you can transfer the installer to your work machine.

You may also ask your IS department to open a case with your specific anti-virus software provider.

We apologize for the inconvenience.

Note the underlying reason for the problem

  • Per our developers, this warning most likely occurs because the Dynatrace Recorder code includes standard Selenium project code for proxy recording, which in the past was also included in an unrelated virus. Since this code is now identified as part of a computer virus, it causes the Recorder installer to flagged by some anti-virus software.