I’ve get a message from avast when tried to enter to hxxp://www.securelist.com/ru/descriptions/7196714/
This is a page with description of Sality from Kaspersky. The detection was JS:ScriptSH-inf [Trj].Is this FP or not?
The thing we detect is too verbosely copied to the page - page contains malware body. So it’s not FP.
But it’s in benign state (it can’t hurt you). So it’s a FP.
But we’re not going to ‘fix’ it. We’ve decided to go the fast way, ie detecting it everywhere, but fast. The other way is more precise, but prone to bugs and much slower.
Ok,it’s your right,thanks for explanation:)