[cvsnt] Help needed in contacting AVG regarding false positives onWin32/Heur
Luigi D. Sandon
cp at sandon.it
Fri May 30 08:46:50 BST 2008
>My own testing of the build and the build machine with our commercially
>licensed and supported scanners show no infection - so I am assuming
>that this is a false positive.
Was the user reporting the issue using some "aggressive" heuristic settings,
while you didn't? AFAIK when some heuristic are enabled the scanner may
check for some API calls that *may* be employed by a virus/trojan (i.e.
impersonification).
We occasionally had some reports from paranoid people who set every slider
to "max"...
--
Luigi D. Sandon
More information about the cvsnt
mailing list