Post here your unfixed FP's (only after 2 days)

[Guest]

[cavehomme]

CIS Plus latest version is always flagging for sandboxing gfxui.exe in system32 folder for sandboxing, after logging onto Win 7 user account (admin).

This is a valid Intel graphic file. I always select not to sandbox it, but it always comes up next time i startup. Added to my safe files, but still same problem.

CIS has been re-installed and with new profile for Internet Security, but still occurs.

Screenshot attached. By the way, does not allow to select "always trust the publisher of this file"
 

[haja]

Hi cavehomme,

CIS Plus latest version is always flagging for sandboxing gfxui.exe in system32 folder for sandboxing, after logging onto Win 7 user account (admin).

This is a valid Intel graphic file. I always select not to sandbox it, but it always comes up next time i startup. Added to my safe files, but still same problem.

CIS has been re-installed and with new profile for Internet Security, but still occurs.

Screenshot attached. By the way, does not allow to select "always trust the publisher of this file"
 

Please submit the file at http://www.comodo.com/home/internet-security/submit.php.

Thanks and Regards,
Haja

[Dennis2]

CIS Plus latest version is always flagging for sandboxing gfxui.exe in system32 folder for sandboxing, after logging onto Win 7 user account (admin).

This is a valid Intel graphic file. I always select not to sandbox it, but it always comes up next time i startup. Added to my safe files, but still same problem.

CIS has been re-installed and with new profile for Internet Security, but still occurs.

Screenshot attached. By the way, does not allow to select "always trust the publisher of this file"
 

Please read here there is a suggested cure which might work here last post in Topic.

[cavehomme]

Please read here there is a suggested cure which might work here last post in Topic.

Thanks. Tried all that, apart from playing with the registry, and added all the relevant intel files as trusted files / my safe files, adding "gfxui.exe" with quote marks....but still the same. Really annoying. D+ basically allocates it as a limited file at each startup and ignores my settings.

[suhaifeng]

Thanks. Tried all that, apart from playing with the registry, and added all the relevant intel files as trusted files / my safe files, adding "gfxui.exe" with quote marks....but still the same. Really annoying. D+ basically allocates it as a limited file at each startup and ignores my settings.

Hi cavehomme,
Please submit the file at http://www.comodo.com/home/internet-security/submit.php.

Thanks and Regards,
suhaifeng

[cavehomme]

Hi cavehomme,
Please submit the file at http://www.comodo.com/home/internet-security/submit.php.

Thanks and Regards,
suhaifeng

Hi submitted it a few days ago together with screenshot. Thanks

[steve_21]

DB 5671, still detected rtcshare.exe.

http://www.virustotal.com/zh-tw/analisis/0e15ec8ffa104dc5e7dad2daf13a1b7ab3487648ac83169fd4cb100db0c7efd0-1281154659

Heur.Suspicious C:\WINDOWS\system32\rtcshare.exe

[Vaishnavi]

Hi steve_21,

DB 5671, still detected rtcshare.exe.

http://www.virustotal.com/zh-tw/analisis/0e15ec8ffa104dc5e7dad2daf13a1b7ab3487648ac83169fd4cb100db0c7efd0-1281154659

Heur.Suspicious C:\WINDOWS\system32\rtcshare.exe

Thanks for reporting.Fix will be available in next few updates.

Regards,
Vaishnavi.V.K

[meidan]

DB 5671, still detected rtcshare.exe.

http://www.virustotal.com/zh-tw/analisis/0e15ec8ffa104dc5e7dad2daf13a1b7ab3487648ac83169fd4cb100db0c7efd0-1281154659

Heur.Suspicious C:\WINDOWS\system32\rtcshare.exe

Hi steve_21,

This is to inform you that reported false-positive has been fixed.
You can update to AV database Version <5672> of  Comodo Internet Security
Version<4.1.150349.920> and confirm it.
Thanks.

Kind Regards,
Erik M.
Comodo AntiVirus Lab

[Syl]

I've got a lot of FP with the latest Win7 update (x64).
I got one with dotNetFx40LP_Client_x86_x64fr.exe, do you want me to submit this file ?
What happen when I click "ignore" then "submit" in the popup ?

[Vaishnavi]

Hi Syl,

I've got a lot of FP with the latest Win7 update (x64).
I got one with dotNetFx40LP_Client_x86_x64fr.exe, do you want me to submit this file ?

Please submit the detected file using http://internetsecurity.comodo.com/submit.php.

Regards,
Vaishnavi.V.K

[meidan]

I've got a lot of FP with the latest Win7 update (x64).
I got one with dotNetFx40LP_Client_x86_x64fr.exe, do you want me to submit this file ?
What happen when I click "ignore" then "submit" in the popup ?

Hi Syl,

This is to inform you that reported false-positive has been fixed.
You can update to AV database Version <5739> of  Comodo Internet Security
Version<4.1.150349.920> and confirm it.
Thanks.

Kind Regards,
Erik M.
Comodo AntiVirus Lab

[Syl]

thank you.

[Ronny]

Reported several times before (web-interface)....

WinSCP file
Source here:
http://winscp.net/download/winscp428setup.exe

Heur.Suspicious[at]113873906

Pass = infected

[Ionel]

Hi Ronny,

Reported several times before (web-interface)....

WinSCP file
Source here:
http://winscp.net/download/winscp428setup.exe

Heur.Suspicious[at]113873906

Pass = infected

We'll verify this and get back to you when reaching a conclusion.

Regards,
Ionel

[Tags:]