"Win32:Agent-TF [Trj]" false positive?

Avast Free Antivirus / Premium Security
1

My Avast! Home (VPS 0619-2) reports "Sign of “Win32:Agent-TF [Trj]” in uninstall.exe, belonging to the latest version of “The Sage”, that’s been on my computer for more than a month now.
(Haven’t scanned my system in that time :-[, but Avast was active when I installed it…)

“The Sage” is an English dictionary & thesaurus from http://www.sequencepublishing.com/.

Hopefully it’s a false alarm with 0619-2…, but should I submit the file for investigation?

/MW

2

I have sage but avast shows nothing in my files

3

You could also check the offending/suspect file at: Jotti - Multi engine on-line virus scanner if any other scanners here detect them it is less likely to be a false positive. You can’t do this with the file in the chest, you will need to move it out.
Or VirusTotal - Multi engine on-line virus scanner

If it is indeed a false positive (send it to avast see below), add it to the exclusions lists (Standard Shield, Customize, Advanced and Program Settings, Exclusions) and check scan it periodically using the ashQuick scan (right click scan), when it is no longer detected then remove it from the exclusions.
Also see (Mini Sticky) False Positives

If you are getting a virus warning that you believe is a false positive, then if you can zip and password protect (‘virus’, will do) the suspect file and send it to virus @ avast.com (no spaces), or send from the chest.

Give a brief outline of the problem (possibly a link to this thread), the fact that you believe it to be a false positive and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.

4

Thanks for your kind help and advice!!

Tried both “Jotti” and “VirusTotal” and found that Avast! was the only “engine” to find any trojan in the uninstall.exe.
I will submit the file according to your instructions.

/MW

5

It’s really a false positive as far we can see.
As a workaround, you can use the Exclusion lists (for on-demand and on-access scanners).
Related thread: http://forum.avast.com/index.php?action=display;topic=21089.0