Getting rid of false positive?
One of our clients is producing thousands of alerts about a Windows Indexing file (the indexing service generates the file again over and over....)
Virustotal says it's clean.
I submitted it to Symantec, they say it's clean.
No other computers react to the file.
Risk name is just "ACG", which is not very telling, really...
But how do I stop this now? Has anyone had similar problems?
Last week the same thing happened, for a day, then stopped. Now it's on again...
We tried clearing the indexes, but this didn't help. It comes back.
Client is RU5, defs. feb 16th, rev 39.