http://www.theregister.co.uk/2009/07/27/av...false_positive/