All scanning tools are susceptible to glitches, bugs and false positive
detections from time to time, especially if the scanner uses heuristic analysis
technology. Heuristics is the ability of a scanning program to detect possible new variants of malware
before the vendor can get samples and update the program's definitions for detection. Heuristics uses non-specific detection methods to find new or unknown malware which allows the anti-virus to detect and stop if before doing any harm to your system. The disadvantage to using heuristics is that it is not as reliable as signature-based detection (blacklisting) and can potentially increase the chances that a non-malicious program is flagged as suspicious or infected. If that is the case, then you can restore the file and add it to the exclusion or ignore list.
Anytime you suspect a detection to be a False positive
, get a second opinion by submitting the file to jotti's virusscan
In the "File to upload & scan
" box, browse to the location of the suspicious file and submit [upload] it for scanning/analysis.
If it is a false positive, then you should contact and advise the vendor that their program is being detected as a threat. In many cases they will work with the anti-virus techs in an attempt to resolve the detection. Most anti-virus vendors have instructions for file submissions posted on their web sites. Once a file is received, a technician can examine it in more detail and provide a report letting you know the results.AVG FAQ 2436: What to do when I suspect any file it is infected?AVG FAQ 2343: AVG detects infection on file that I suppose to be cleanAVG Forum: How To Handle Suspicious False Positive Detection?