False Positives

[anonymous]

We are receiving false positives because spyware domains
have been added to restricted groups. The product detects
these entries as the spyware because the spyware adds
itself to trusted sites. It is the same registry key, but
is being set to a different value. This means additions
to restricted groups are being removed making the machine
vulnerable to these domains.

 

[Bill Sanderson]

Are you still seeing these with the newest (5685) definitions? I've seen a
single report that a particular false positive involving SearchSquire in the
restricted sites, has been resolved in those definitions.