DTM and virus detection

I can’t find anything in the DTM help about this. The DTM has to have port 1778 open, be on its own network, not use autologon, etc. in part for securtiy reasons as well as operation. I just submitted a driver package to WHQL that failed due to virus scanning. I use the latest Symantec Anti-Virus software on a Windows 7 machine that runs the Windows Submission Tool and uploads the driver package. The cpk files from the DTM are transferred from the DTM to this Windows 7 machine with a flash drive. My question is should the DTM be running Anti-Virus software to protect against driver packages picking up a driver somewhere?

xxxxx@hunter.com wrote:

I can’t find anything in the DTM help about this. The DTM has to have port 1778 open, be on its own network, not use autologon, etc. in part for securtiy reasons as well as operation. I just submitted a driver package to WHQL that failed due to virus scanning. I use the latest Symantec Anti-Virus software on a Windows 7 machine that runs the Windows Submission Tool and uploads the driver package. The cpk files from the DTM are transferred from the DTM to this Windows 7 machine with a flash drive. My question is should the DTM be running Anti-Virus software to protect against driver packages picking up a driver somewhere?

How does this possibly make sense? Did they tell you which file had the
virus? Did your own anti-virus tool snag it?

The driver package is checksummed at the time you built the CAT file,
and WHQL will fail if any of the files are altered. DTM never touches
or even sees the driver package. The client machine certainly has the
driver files, but you wouldn’t copy files to the test client, and then
copy them back to build the submission. So, unless your original
development machine has the virus, it can’t have been in the driver
package itself.

I’d be more likely to guess that some random collection of bytes in the
compressed log files happened to match a virus signature. If it were
me, I’d submit it one more time before contacting Winqual for help.


Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.

In WinQual under “Manage Product Submission #1427930”–>Process Status, the table of process and status looks like that shown below and the driver package submission status has an overall status of failure.

Process Status
Adding Submission Information
Archiving Files
Creating Catalog Files
Decompressing CAB File
Emailing Test Report ------------------------ In process
Finalizing Submission ------------------------ Succeeded
In Review
Parsing Driver Data
Scanning CAB file for Viruses ------------- Fail
Signing Catalog Files
Transferring CAB File
Transferring Catalog Fle to Server
Validating Submission Package
Waiting for Upload -------------------------- Succeeded

The Logo Verification Report also shows Failed. I subsequently did a virus scan on the computers involved and came up with nothing. I used the DTM to recreate the 5 cpk files (5 OSs) and then put them in a different folder of my Windows 7 PC to create the submission package. I recreated the submission package, signed and uploaded. That submission ID has just been approved.

I don’t understand what happened on the first submission either. I do understand that my company is going to get charged another $750 because submission ID 1427930 failed due to virus scanning and there is nothing it seems I can do about it.

-David Voeller

xxxxx@hunter.com wrote:

In WinQual under “Manage Product Submission #1427930”–>Process Status, the table of process and status looks like that shown below and the driver package submission status has an overall status of failure.

I don’t understand what happened on the first submission either. I do understand that my company is going to get charged another $750 because submission ID 1427930 failed due to virus scanning and there is nothing it seems I can do about it.

No. You are only charged for successful submissions. Failed
submissions are free.


Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.

I’ve been emailing WinQual about this issue. They said I can just cancel the submission and not get charged but the submission was finalized and there was no way to cancel. Also, from WinQual Help which had a link to the “DTM Global WHQL Policy” document, under
WHQL Testing Fee Q&A
Do we have to pay for failed submissions?

“The fee that WHQL charges is for reviewing your submission, this work is done regardless of whether the submission passes or fails; therefore, a fee must be charged in either case. You must pay for all test submissions regardless of the final test result.”

According to that I would have been charged. I have avoided the charge by emailing WinQual and they canceled the submission for me and they did immediately with no problems for me. If it is really true that they will not charge for failed submissions it would be nice if I could have canceled it and if I would have known to cancel it.

Just some miscommunication in the end.

I’m not going to put virus scanning software on the DTM clients or server. The DTM is an island onto itself.

-David Voeller

xxxxx@hunter.com wrote:

I’ve been emailing WinQual about this issue. They said I can just cancel the submission and not get charged but the submission was finalized and there was no way to cancel. Also, from WinQual Help which had a link to the “DTM Global WHQL Policy” document, under
WHQL Testing Fee Q&A
Do we have to pay for failed submissions?

“The fee that WHQL charges is for reviewing your submission, this work is done regardless of whether the submission passes or fails; therefore, a fee must be charged in either case. You must pay for all test submissions regardless of the final test result.”

That’s interesting, because that seems unequivocal, but it directly
contradicts what I had understood in the past. I will have to go find
the document where I got my information.

I sincerely doubt that any human being ever “reviews” the submission.
It’s all automated.


Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.

>I sincerely doubt that any human being ever “reviews” the submission.

It’s all automated.

Agreed

-David Voeller