"Buffalo" <Eric@nada.com.invalid> wrote in message
news:j24g04$ese$1@dont-email.me...
>
>
> FredW wrote:
>> On Fri, 12 Aug 2011 16:00:27 -0600, "Buffalo" <Eric@nada.com.invalid>
>> wrote:
>>
>>> Well, according to Avira AntiVir it is TR/SpySpatet.BC.
>>> Yes, I did submit that file to Avira as a suspected False Positive.
>>> Definition: V7.11.13.37 8/12/2011
>>> Buffalo
>>
>> What version of SuperAntiSpyware?
>>
>> My Avira free 10.2.0.700 found nothing in version 5.0.1108 so far.
>> But I have version 5.0.1118 installed today.
>>
>> A full scan with the "new" SAS did not get any message from my NOD32.
>
> My Free Avira was: Engine V8.02.06.30
> Virus Definition File: V7.11.13.37
> This only happened when I update to the above Virus Definition File.
> Buffalo
> PS: Only Comodo and Avira hit on that file when I submitted it to VirusTotal
> today.

If VT shows the MD5 and a submission date from long ago (when
somebody else submitted it) it *really* looks like a FP caused by
the new def files.