False positive Avira

Contains HEUR/Modified Systemfile suspicious code C:\Windows\explorer.exe

Uploaded it to Avira,wait and see what they say

 

Are you using a skinning pack?

If so, with 99.9% certainty, it is not a FP.

System files have to be patched in order for the skins etc to work, this wouldn't happen on most normal home user pc's so in cases where a skinning pack is used you know to exclude such detect or turn off the detection altogether.

 

Yup, I'm using a BricoPack Vista skin package for XP

I figured they would want to know about this? Maybe, or not?

 

I don't think they will fix it, BricoPack modified a system file. Malware will modify system files to avoid detection in certain cirumstances so this detection is technically correct.

 

If they dont want to fix it,I'll just add it to the ignore list

 

that wuld probly be the best choice since its not REALLY a FP... since it says modified system file (which it is) and only says suspicious so doesnt say that it is a virus or something exactly.