Hello,
Rapid Release definitions which correct this FP are being posted now. The next build of definitions (available via LiveUpdate, ETA 4:00 PM PST, May 08) will also contain the fix for this issue.
Rapid Release Sequence number: 134129 Extended information: 2012-05-08 rev. 016
Instructions for how to apply RR defs:
How to apply rapid release definitions to a Symantec Endpoint Protection (SEP) client.
Article: TECH104979 | Created: 2008-01-21 | Updated: 2010-10-06 | Article URLhttp://www.symantec.com/docs/TECH104979
How to update definitions for Symantec Endpoint Protection Manager (SEPM) using a .jdb file
Article: TECH102607 | Created: 2007-01-08 | Updated: 2012-05-01 | Article URLhttp://www.symantec.com/docs/TECH102607
FTP link to RR defs, if needed:
ftp://ftp.symantec.com/public/english_us_canada/antivirus_definitions/norton_antivirus/rapidrelease/
Please link any cases to this KB:
Possible False Positive for signature Bloodhound.Exploit.459
Article: TECH188271 | Created: 2012-05-08 | Updated: 2012-05-08 | Article URLhttp://www.symantec.com/docs/TECH188271
Hope that helps!!