IDP Generic Infection

[HonzaZ]

@Spiritual2016 post:19

What would cause the file to be mistakenly detected due to suspicious activity when it is a legitimate program?

Some (even legitimate) programs explicit suspicious behaviour. And we at Avast are better safe then sorry, if it is “too suspicious”, we rather block it than let our users be infected. Furthermore, how do you define “legitimate program”? How do we know it is “legitimate” if we have no info about it?

@Spiritual2016 post:19

Were the other 31 files the same file that I uploaded or did 31 others uploaded potentially suspicious files at the same time as I did?

There were 31 other files signed with the same digital signature. Not necessarily with the same filename, not necessarily submitted at the same time. Some might have arrived a year ago, for example.

@Spiritual2016 post:19

Was I correct to ‘Restore and Add It As An Exclusion’ earlier? I was aware that it was a false positive because Avast recognizes it as a threat every tine the software is updated.

Again, yes, but for a wrong reason. There are many malicious files (viruses, even) that update themselves. Just the fact that something “updates itself” doesn’t mean it is clean!