Author Topic: FYI - Ticket SXR-754288 submitted (Multiple False Positives in Memory Scan)  (Read 1899 times)

0 Members and 1 Guest are viewing this topic.

Offline adam_72

  • Newbie
  • *
  • Posts: 7
After a memory scan marked the process "vmware-vmx.exe" as malware, I started as many applications as possible and performed another memory scan, which showed 34 false positives in scan log.
Only disabling "Ignore Virus Targeting" reduces the number of FP's down to 6, all other settings have no effect on the scan results. (Scan logs attached)

Happens in avast free 5.0.418 on Windows 7 x64

False positive generating software in detail:
* VMware Workstation 7.0.1 build-227600 running a Win7x64 VM
* Superantispyware free 4.33.100
* Malwarebyte's Anti-Malware 1.44 DB3738

System is known clean ... offline scans with Avira-, NOD32- & Kaspersky Boot-CD's showed no infections, MBAM scan also negative !

Best regards

EDIT: Wrong logfile posted, now ok !
« Last Edit: February 14, 2010, 08:24:27 PM by adam_72 »

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11805
    • AVAST Software
Obvious "conflict" of multiple antiviruses - one detects decrypted virus signatures in memory of the other one. (I'm not completely sure about wmvare-vmx, but I can imagine something similar occurring in the memory of the virtual system).

So, it's not a real false positive, and there's nothing that could be done about it.