Engine Update 33.3.7051 for Computer Associates' (CA) eTrust Threat Manager (formerly ITM) anti-virus software yesterday led to users experiencing large numbers of false positives, resulting in important files landing in quarantine or being renamed, including files making up part of eTrust itself. According to reports on the CA forum, eTrust also falsely identified MS Visual Studio, Nokia-Software, VNC and many other DLLs as containing the StdWin32 malware. Users of the company's internet security products are not affected by the bug.

Computer Associates has confirmed the existence of the problem and states that it is working on a solution. In the meantime they have withdrawn the update responsible for the problem and distributed a new update (34.0.0.6674) containing the old scan engine. Two tools, CA-Unquarantine and Renameavb2exe_with_date, for rescuing quarantined files have been made available. The passwords required to unpack the tools can be found in the password.txt file in the FTP folder containing the tools.


Source: H-Online

Man, what a pain. I'll no doubt have to deal with this when I get to work tonight . Jus last month they quarantined net.exe and a whole bunch of other system files that were perfectly clean, now this.

Anyway, thanks for posting this Maniac. I'll grab the Unquarantine and Rename tools and put them on my flash drive to take to work so I'm ready to fix the problem if the worst has occured.

You're welcome!

I think it's important how quickly the problem will be fixed by the developers of the program. Such mistakes allow even the best in the industry.

I know, it just seems that CA has problems all too frequently .