# Virus software declarete "hg.exe" as a Virus

**URL:** https://www.finalbuilder.com/forums/t/virus-software-declarete-hg-exe-as-a-virus/5499
**Category:** Discussion
**Created:** [August 4, 2016, 10:05am UTC](https://www.finalbuilder.com/forums/t/virus-software-declarete-hg-exe-as-a-virus/5499 "2016-08-04T10:05:04Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![marcel.oertig](https://www.finalbuilder.com/forums/letter_avatar_proxy/v4/letter/m/b5a626/32.png) [@marcel.oertig](https://www.finalbuilder.com/forums/u/marcel.oertig)
#### Post date: [August 4, 2016, 10:05am UTC](https://www.finalbuilder.com/forums/t/virus-software-declarete-hg-exe-as-a-virus/5499/1 "2016-08-04T10:05:04Z")

</div>

This is only for your Information. I look with our IT to fix it.  
  
Unfortunately the Virus&nbsp;software used in our company declares since yesterday “hg.exe” found in the folder “vsoft technologies\continuaci agent\hg” as a Virus.  
We use Trend Micro OfficeScan Agent Version 11.0.6054  
  
Now the Synchronisation didn’t work anymore.  
Message:  
An error occurred while syncing files from the server to the agent. Details: Exception: ProcessException Message: Running C:\Program Files\VSoft Technologies\ContinuaCI Agent\hg\hg.exe with arguments “archive -r b7d2dc0c16bf2ac36a6e32fcac5f9ff83959b35e -X “re:^(.\_Continua\_CI\_empty\_changeset\_marker)$” -X “re:^(.\_Continua\_CI\_file\_hash\_dictionary)$” --subrepos -R C:\CI\_WS\Repos\4d613fea C:\CI\_WS\Ws\28280\Source\KswFirmwareTepui\_42\_06 --config ui.username=Continua --noninteractive --encoding cp1252” on agent failed with return code 255 and error output: “abort: unknown revision ‘b7d2dc0c16bf2ac36a6e32fcac5f9ff83959b35e’!  
” Stack Trace: bei Continua.Shared.Utils.Mercurial.Archive(String repository, String destination, String revision, String includes, IEnumerable`1 excludes, Boolean listFiles) bei Continua.Modules.Builds.Agent.FileSync.AgentRepositoryCache.<>c __DisplayClass21_0.<export>b__ 0() bei Continua.Shared.Utils.ReadWriteLockList`1.WithWriteLock(TId id, CancellationTokenSource cancelTokenSource, Action action) bei Continua.Modules.Builds.Agent.FileSync.AgentRepositoryCache.Export(String dest, String revision, String includes, IEnumerable`1 excludes, Boolean listFiles) bei Continua.Modules.Builds.Agent.AgentRepositoryHelper.CopySourceToWorkspace(String filePattern, IEnumerable`1 excludes, String relativeDestination, AgentWorkspaceSyncContext wsCtx, Boolean logRepoFiles, TransportContextDTO transportContext) bei Continua.Modules.Builds.Agent.AgentBuildHelper.SyncSourceFromServer(IEnumerable`1 rules, AgentWorkspaceSyncContext workspaceCtx) bei Continua.Modules.Builds.Agent.AgentBuildHelper.InitialiseWorkspaceOnAgent(IAgentCallbackProxy proxy, TransportContextDTO source, Guid callId) .

---

<div class="post-metadata">

### Author: ![Sparky](https://www.finalbuilder.com/forums/user_avatar/www.finalbuilder.com/sparky/32/10_2.png) [@Sparky](https://www.finalbuilder.com/forums/u/Sparky)
#### Post date: [August 5, 2016, 4:41am UTC](https://www.finalbuilder.com/forums/t/virus-software-declarete-hg-exe-as-a-virus/5499/2 "2016-08-05T04:41:23Z")

</div>

Hi Marcel,  
  
hg.exe is version 3.5 of [Mercurial](https://www.mercurial-scm.org/)&nbsp;that is used for the Continua CI repository cache. &nbsp;[VirusTotal analysis](https://www.virustotal.com/en/file/9227f6146fd53ca82c311c58b8efc425621c3b3fc44c20d74f3b5caa00a6e05d/analysis/1470364294/)&nbsp;gives the file the all clear.&nbsp;