BullseyeCoverage-2-x86.dll

Topic

New Reply

Can anyone tell me why Norton Security Suite tray alert keeps telling me that “BullseyeCoverage-2-x86.dll” is safe/trusted?

This is apparently runs with IE (add-on??), but I can’t find it in the add-on list.  It is downloaded in the IE temp files, when present.  It is apparently related to the BullseyeCoverage C++ code analyzer from Bullseye Testing Technology (the named signer on the DLL’s certificate). The file’s certificate is described as: “COMODO SHA-1 Time Stamping Signer”.

I’m curious as to what this is doing and why it shows up when IE runs.

System: Win7 pro SP-1, 64-bit on Dell XPS L702X

-MD

Reply | Quote

Replies

It may be a component of one of your add-ons for IE, so that’s why you don’t see it in the list by itself.

A Google search for the file name includes some results for web sites with instructions for using certain programs recommended by each individual site to get rid of the file, but I wouldn’t go there. If you think it’s suspicious, try running Malwarebytes, to see what that turns up, if anything.

The file belongs, as you’ve said, to a program called Bullseye Coverage, which is a C++ code analyzer. The program’s utility might also be part of another program installed on your computer. For more info about the program itself, just Google the term “Bullseye Testing Technology” (which shows up in the file’s cert as you’ve stated above) and click on the link for the company’s homepage. That initial sentence on the company’s website will give you some basic info about the Bullseye Coverage program itself so you can decide if it belongs on your computer or not. It may also help you figure out how it got there as well.

Please post back here with any other questions that come up, and we’ll do our darndest to help you with them.

1 user thanked author for this post.

Elly

Reply | Quote

Usually Norton alerts like that when something is downloaded… Maybe this add-on / injected code re-downloads itself every time?

Did you intentionally download this code analyzer?

Also, maybe it is injecting via “Image File Execution Options”?

Reply | Quote