FYI - Ticket SXR-754288 submitted (Multiple False Positives in Memory Scan)

Avast Free Antivirus / Premium Security
1

After a memory scan marked the process “vmware-vmx.exe” as malware, I started as many applications as possible and performed another memory scan, which showed 34 false positives in scan log.
Only disabling “Ignore Virus Targeting” reduces the number of FP’s down to 6, all other settings have no effect on the scan results. (Scan logs attached)

Happens in avast free 5.0.418 on Windows 7 x64

False positive generating software in detail:

  • VMware Workstation 7.0.1 build-227600 running a Win7x64 VM
  • Superantispyware free 4.33.100
  • Malwarebyte’s Anti-Malware 1.44 DB3738

System is known clean … offline scans with Avira-, NOD32- & Kaspersky Boot-CD’s showed no infections, MBAM scan also negative !

Best regards

EDIT: Wrong logfile posted, now ok !

2

Obvious “conflict” of multiple antiviruses - one detects decrypted virus signatures in memory of the other one. (I’m not completely sure about wmvare-vmx, but I can imagine something similar occurring in the memory of the virtual system).

So, it’s not a real false positive, and there’s nothing that could be done about it.