FP - Trusteer Rapport

[Guest]

[Seany007]

Rootkit.HiddenFile[at]0 c:\Users\Admin\AppData\Local\Trusteer\Rapport\user\store\user\rapport_var_1.cfg.data

[Qiuhui.Wang]

Rootkit.HiddenFile[at]0 c:\Users\Admin\AppData\Local\Trusteer\Rapport\user\store\user\rapport_var_1.cfg.data

Hi Seany007,

Thanks for reporting.
Could you please submit the detected file at
http://internetsecurity.comodo.com/submit.php.

Regards
Qiuhui.Wang

[Seany007]

Hi Seany007,

Thanks for reporting.
Could you please submit the detected file at
http://internetsecurity.comodo.com/submit.php.

Regards
Qiuhui.Wang

I tried. The upload goes well over 30min for few kilobytes! I think it's trusteer rapport protection system it won't allow.

[Seany007]

Hi Seany007,

Thanks for reporting.
Could you please submit the detected file at
http://internetsecurity.comodo.com/submit.php.

Regards
Qiuhui.Wang

So?

[Qiuhui.Wang]

So?

Hi Seany007,

You can go through the following way

1.Please submit the detected file at http://internetsecurity.comodo.com/submit.php;
2.Sample in the form of  forums accessories upload;
3.Give me about sample VT(https://www.virustotal.com) links.

Regards
Qiuhui.Wang

[TrusteerSupport]

Hello Seany007,

We would like to offer you our 24/7 free technical support to address any problems you are having with Trusteer Rapport- sending logs or files, etc.

You can contact the support team at http://www.trusteer.com/support/report-problem .

Regards,
Trusteer Technical Support

[Seany007]

Hi Seany007,

You can go through the following way

1.Please submit the detected file at http://internetsecurity.comodo.com/submit.php;
2.Sample in the form of  forums accessories upload;
3.Give me about sample VT(https://www.virustotal.com) links.

Regards
Qiuhui.Wang

As I stated above I can't submit. Here is the VT results 100% FP:

https://www.virustotal.com/file/fb31cf12468f6291f1cd047cf26a943b53a49049805017a375ba615b9cd48f46/analysis/1337530306/

[Seany007]

Hello Seany007,

We would like to offer you our 24/7 free technical support to address any problems you are having with Trusteer Rapport- sending logs or files, etc.

You can contact the support team at http://www.trusteer.com/support/report-problem .

Regards,
Trusteer Technical Support

Thank you for your help

[Qiuhui.Wang]

As I stated above I can't submit. Here is the VT results 100% FP:

https://www.virustotal.com/file/fb31cf12468f6291f1cd047cf26a943b53a49049805017a375ba615b9cd48f46/analysis/1337530306/

Hi,

Thank you for reporting this.
We'll check it and get back to you soon.

Best regards
Qiuhui.Wang

[Seany007]

Hi,

Thank you for reporting this.
We'll check it and get back to you soon.

Best regards
Qiuhui.Wang

It's been few days now? So?

[Ionel]

Hi Seany007,

Unfortunately the file with SHA1 ccdf0ee045928ba4b6301163eb98bd5127efc7a6 didn't reach our servers, so we are unable to verify the issue. Have you tried adding respective file to Trusted Files list and/or Exclusions list in CIS? Can you please zip the file and send the archive to us via http://www.comodo.com/home/internet-security/submit.php ?

Thanks and regards,
Ionel

[Seany007]

Hi Seany007,

Unfortunately the file with SHA1 ccdf0ee045928ba4b6301163eb98bd5127efc7a6 didn't reach our servers, so we are unable to verify the issue. Have you tried adding respective file to Trusted Files list and/or Exclusions list in CIS? Can you please zip the file and send the archive to us via http://www.comodo.com/home/internet-security/submit.php ?

Thanks and regards,
Ionel

Once again I can't upload it because of the rapport protection system or even CIS itself. I can add this file to trusted files it's not a problem. I do a favor for you so you can improve the AV and get rid of FP. I will try again but I don't think it will work. Is VT evidence not enough? Or you just follow Comodo policy?

[Chiron]

[at]Seany007, is it possible that through the offered help from TrusteerSupport you could have them give you a sample of the file in question?

That way you could submit it.

It's at least worth a try, although I agree it really shouldn't be necessary, but perhaps it is for some reason.

Thanks.

[Tags:]