I have been running the Lab version of Returnil for several months with no issues whatsoever. This morning Avast came up with a warning that the file rvssvr.exe is detected as a worm: win32: Induc. I ignored this and reported it back as a likely FP. I then tried to upload the file to jotti and virustotal but strangely this did not work - either service said the file has 0 bytes. How is that possible, the files show up normally in explorer with their respective file sizes? I then renamed the file and this allowed me to use virustotal - 15 /41 show this file as w32/induc.A or similar - given this result I am concerned now. Over the next few minutes several other returnil program files (gui, uninstall etc) all were flagged by avast with the same alert. Anyone else having the same issue?