Something occurred to me…

Avast has implemented some heuristics, such as the “Win32: Evo Gen [Susp]” detection of suspicious files where there’s only a chance the file is malware. And they also can detect things that are definite malware.

Perhaps at least when there’s a “[Susp]” status involved the choice could be given to the user?

-Noel