MS Sec.Essentials detects \a2temp\Signatures\BD\cevakrnl.rv0.diff

[Northumbrian]

Looks like Microsoft Security Essentials wants to treat my most recent EmsiSoft update as a Virus.

 

The below popped up about three minutes after EAM's 'last update' time.

 

 

Does this mean that the latest EAM update was not fully implemented into my Signatures?

 

It's a wonder computers work at all anymore. Can't be too far away...

[gricardo21]

as long emsi doesnt prompt that the update just crashed everything shall be fine, it seem that MSE is another AV that flags temp files as malware, you are not alone as eset is doing the same thing with emsi temp files.

I wonder how MSE will detect a FP, generally MSE doesnt give any false positive due to their low detection rate :X 

[Siketa]

I suggest you to turn off MSE.

You don't really need it along EAM.

[GT500]

If you can restore a copy of the file that MSE deleted and upload it to VirusTotal for me, and then post the link here, I can see about contacting Microsoft to report this as a false positive.

[GT500]

Someone else was able to send me the file, and here's the VirusTotal report:

https://www.virustotal.com/en/file/ae76f4b8d8b933ecae8429a014a8235bce1510ad92904b8ee1d5f473a053e6aa/analysis/1428657690/

I'll see about contacting Microsoft.

[GT500]

Microsoft let me know that they fixed this around 9:00 PM (EDT) on Monday. Here's the updated VirusTotal report:

https://www.virustotal.com/en/file/ae76f4b8d8b933ecae8429a014a8235bce1510ad92904b8ee1d5f473a053e6aa/analysis/1428988682/