Dr.Web showing HA.EXE on IE files.

[swisscoms]

I have Dr.Web 4.30a installed and it shows a false positve of HA.EXE (Haher) on my IE files as well as Windows Service Pack i386 wextract. I have tried other free scans to check this, but no other AV can duplicate. Thoughts anyone please? ???

[LowWaterMark]

Dr. Web is known for generating false positives because of its especially sensitive heuristics. Take a look through this thread regarding our thoughts on Dr. Web:

http://www.wilderssecurity.com/showthread.php?t=13156;start=msg84653#msg84653

[swisscoms]

Thank you LowWatermark, that is a very interesting link to read. I did email Dr.Web in Russia as well, and received the following reply:

"Boris B. Zhmurov" <bb@dials.ru>


It was a false alarm. It was fixed yesterday in new drwtoday.vdb. Just
update your Dr.Web.


--
Boris B. Zhmurov
DialogueScience, Inc. Technical department.
40 Vavilova St., Moscow, 119991, Russia
Tel.: (+7-095) 137-0150, 135-6253
Fax : (+7-095) 938-2970, 938-2855
HTTP://www.Dials.ru FTP://ftp.Dials.ru
------------------------------------------------------------------------

All is well now. ;)