Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Inventua.DNN.Shared.dll InfectedInventua.DNN.Shared.dll Infected
Previous
 
Next
New Post
9/3/2012 9:10 PM
 

I don't know if this is the right place but I thought I should report this as I may not be the only person it's hit.  I support a DNN 5.6.3 site and maintain a test copy on my Win7 Ultimate (64-bit) laptop, on which I run SQL Server 2008 R2, IIS 7, and .NET framework 4.  Today I tried to reload my test from a recent production backup and got this error:

Server Error in '/osc' Application.

Access is denied. (Exception from HRESULT:0x80070005 (E_ACCESSDENIED))

Description: An unhandled exception occurredduring the execution of the current web request. Please review thestack trace for more information about the error and where itoriginated in the code.

Exception Details:System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

I also got the following stack trace (excerpt):

Stack Trace:

[UnauthorizedAccessException: Access isdenied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))]

[FileLoadException: Could not load file orassembly 'Inventua.DNN.Shared, Version=3.0.3.10, Culture=neutral,PublicKeyToken=null' or one of its dependencies. Access is denied.]

System.Reflection.Assembly._nLoad(AssemblyName fileName, StringcodeBase, Evidence assemblySecurity, Assembly locationHint,StackCrawlMark& stackMark, Boolean throwOnFileNotFound, BooleanforIntrospection) +0

System.Reflection.Assembly.InternalLoad(AssemblyName assemblyRef,Evidence assemblySecurity, StackCrawlMark& stackMark, BooleanforIntrospection) +416

System.Reflection.Assembly.InternalLoad(String assemblyString,Evidence assemblySecurity, StackCrawlMark& stackMark, BooleanforIntrospection) +166

System.Reflection.Assembly.Load(StringassemblyString) +35

System.Web.Configuration.CompilationSection.LoadAssemblyHelper(StringassemblyName, Boolean starDirective) +190

Now, I run 2 Inventua products, but while I was researching the problem, I saw a popup from my Norton Internet Security, informing me that it had REMOVED Inventua.DNN.Shared.dll because it was infected!  Here's the top of the Norton announcement:

FullPath: c:\windows\microsoft.net\framework64\v2.0.50727\temporaryasp.netfiles\osc\cae21f75\6aac91d8\assembly\dl3\aceaa19d\00663469_0286cc01\inventua.dnn.shared.dll

Threat:WS.Reputation.1

________________________________________________________

Oncomputers as of 9/3/2012 at 5:13:21 PM

LastUsed 9/3/2012 at 5:15:40 PM

StartupItem No

LaunchedNo

________________________________________________________

VeryFew Users

Fewerthan 5 users in the Norton Community have used this file.

____________________________

VeryNew

Thisfile was released less than 1 week ago.

____________________________

I've filed this same announcement on the Inventua forums, and asked where I can download a clean copy of the DLL.  Meanwhile I can't even work on my production site from the laptop without the DLL, the menus don't work properly.  What bothers me is that this thing looks like it's part of .NET.


 


hedera
**********
Nature bats last.
 
New Post
9/4/2012 3:10 AM
 
the Norton report does not state anything about the file being infected, it seems simply to count how many users are using it and block it if there are very few and the file is new. I would whitelist the file or the whole temp asp.net folder.

Cheers from Germany,
Sebastian Leupold

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group

Speed up your DNN Websites with TurboDNN
 
New Post
9/4/2012 12:20 PM
 

Right, I ran the notice past the Inventua forum and it's just Norton Internet Security being over-zealous.  They did the same thing to the DLL for P. H. Dobson's Bulk User Manager, too, I had to pull that out of quarantine before I could bring the site up.  Sorry for the false alarm, but maybe it'll inform someone else.

I've been meaning for some time to uninstall that thing and replace it with Microsoft Security Essentials and Malwarebytes, and this is just another incentive.


hedera
**********
Nature bats last.
 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Inventua.DNN.Shared.dll InfectedInventua.DNN.Shared.dll Infected


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out