Skip to content

Commit 479a3f9

Browse files
authored
Merge pull request #3150 from DavidWiseman/3149_UpdateDangerousThirdPartyModulesForAntiVirus
sp_Blitz - Update Dangerous Third Party Modules for AntiVirus
2 parents 3c7206b + a01ce33 commit 479a3f9

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

sp_Blitz.sql

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5525,7 +5525,8 @@ IF @ProductVersionMajor >= 10
55255525
OR UPPER(name) LIKE UPPER('%ScriptControl%.dll') OR UPPER(name) LIKE UPPER('%umppc%.dll') /* CrowdStrike */
55265526
OR UPPER(name) LIKE UPPER('%perfiCrcPerfMonMgr.DLL') /* Trend Micro OfficeScan */
55275527
OR UPPER(name) LIKE UPPER('%NLEMSQL.SYS') /* NetLib Encryptionizer-Software. */
5528-
OR UPPER(name) LIKE UPPER('%MFETDIK.SYS'); /* McAfee Anti-Virus Mini-Firewall */
5528+
OR UPPER(name) LIKE UPPER('%MFETDIK.SYS') /* McAfee Anti-Virus Mini-Firewall */
5529+
OR UPPER(name) LIKE UPPER('%ANTIVIRUS%'); /* To pick up sqlmaggieAntiVirus_64.dll (malware) or anything else labelled AntiVirus */
55295530
/* MS docs link for blacklisted modules: https://learn.microsoft.com/en-us/troubleshoot/sql/performance/performance-consistency-issues-filter-drivers-modules */
55305531
END;
55315532

0 commit comments

Comments
 (0)