Why you should never trust your antivirus 100%

[LunarWolf]

Just, KIS 2011 threw me a genenric warning of a trojan found in my system32. I knew something was wrong because

1. Winpatrol didn't pop up to inform me of anything.
2. Malwarebytes scan on the file came clean.
3. I scanned that file on virustotal and none detect it.

Did a google search and found that file was clean because it is located in system32. But if the file is not located in system32, it is a malware.

Inform kaspersky and kaspersky rectify the problem in less than 2 hours. I am impress with their support.

The file in question is ssms.exe

If I had follow kaspersky, I am sure by now, I will be spending time restoring my computer to an earlier session using my backup image.

So the moral is please don't trust your AV 100%

[leofelix]

do you mean you have discovered that false positive detections may happen?

[Ande]

Uh, why would you restore your computer, if there was nothing wrong?
My malware software rechecks all quarantined files every time it updates signatures to return false positives to the general population.
Doesn't Kapersky do this?

[safeguy]

Dump Kaspersky and opt for something else if you want to trust it completely. Perhaps let's say SuperMumboAntivirus 2011?

[Ande]

SuperMumboAntivirus 2011? Is that free, or does it cost?

[safeguy]

It's totally free...

Free Scan will detect all sorts of malware on your PC...virus, rootkits, anything you can think/name of and even those that hasn't been detected by others.
Free Removal will remove all those nasties and any other thing that it detects as crap (and that may include your personal files)...

Support is free too...all you have to do is email them. They may require your credit card info though but no worries, it's merely for identification purposes.

[Ceyfer √]

Why you should never trust your antivirus 100%

Because technically the user is much smarter than any AV client. Technology has its own limits too. To make things easier for you, only grab known and reputed good stuff from legitimate sources.

fp is a classic story. Be vigilant!

See file insight ( file reputation ): blacklisting and whitelisting technologies.

[Neo]

of course , had it been 100% trust then why would be keen in looking various av test

[Boyfriend]

The FP was due to PDM update and was not due to signature update. They fixed it quickly. I have faced no FP since I have switched to KL products (2006).

Dear All,

This is a known issue we faced Yesterday (31st Aug 2010) . Our engineers in HQ provided a solution very shortly after the problem was identified. Please do note your security has not been affected.
Please follow the below directions to rectify the issue, it will take you a couple of minutes.
Please run a database update.
Please open Kaspersky --> click on the Reports tab on the main Kaspersky window.
Click on Detected Threats tab,
Please then click on the button just under this to see the chosen reports - locate "Active threats"
Please then right click on any items referencing the below , and select delete from list.
PDM:Trojan.Win32.Generic.wcd
Please confirm you want to delete the report entry...
Do this for all the various reports
Then go to the Quarantine tab - if you manually tried to quarantine the items - right click on any referencing this above false trojan and choose to Restore.
Once this has been complete , click “close”
On behalf of Kaspersky I am sorry for the inconvenience caused.
If you still experience difficulties please let us know via the relevant form.
http://support.kaspersky.com/support/international

Kind Regards
Lisa Clancy
Kaspersky Lab UK
UK Technical Support Specialist

[INDRANIL]

AntiVirus & FP both are identical. If you have dought Google it or Raymond forum it . If you are lazy then dump your av and move to better alternative .