Welcome, Guest. Please login or register.
Did you miss your activation email?
May 20, 2013, 10:35:14 AM

Login with username, password and session length

663236 Posts
70508 Topics
153530 Members

Latest Member: Kelfins

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Security Products & Services
| |-+  Comodo Valkyrie - FLS
| | |-+  Report Problems With Valkyrie File Verdict Service
« previous next »
Pages: [1] 2 3 4 Go Down Print
Author Topic: Report Problems With Valkyrie File Verdict Service  (Read 64890 times)
Chiron
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 5570



« on: December 19, 2011, 05:02:56 PM »

Please report here any problems you experience with Comodo Valkyrie.

Bug Reports for the Valkyrie Uploader should be put here.

Also do not report problems in which the Valkyrie final verdict does not match the automated analysis, which can be reported here or in which the file is found malicious by an analysts verdict but not by CAV, which can be found here.
« Last Edit: December 23, 2011, 10:46:15 PM by Chiron » Logged

Chiron
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 5570



« Reply #1 on: December 19, 2011, 05:03:56 PM »

I've noticed that many of the files that are found malicious by the manual analysis by Comodo staff are not detected when I scan them with CIS. Is there some type of disconnect between the two teams?

Has anyone else noticed this phenomenon?
Logged

Siketa
Comodo's Hero
*****
Offline Offline

Posts: 3125


ZIG ZAG


« Reply #2 on: December 19, 2011, 05:46:41 PM »

+1.
I have submitted many samples missed by CAV and detected by Valkyrie for malwares.pl October and November but most of them are still undetected.
Blah!
Logged
wasgij6
Global Moderator
Comodo's Hero
*****
Online Online

Posts: 3064



WWW
« Reply #3 on: December 28, 2011, 04:28:22 AM »

here are a couple of files that dont get analyzed by the static detectors the wheel just continuously spins. I had to refresh the page to get a verdict from the adv. heur.

https://valkyrie.comodo.com/Result.html?sha1=05bdce059e09f609f82275ad8bea15b66ea7053e&&query=0&&filename=4.exe

https://valkyrie.comodo.com/Result.html?sha1=2135fa72a3aa7f87604fe9387eb507e4549a87e6&&query=0&&filename=plink.exe

https://valkyrie.comodo.com/Result.html?sha1=1613b94d0b46b6a9c08301b2c95773fff5423506&&query=0&&filename=perolas2011__jpg.exe
Logged

| Win 7 Ultimate (x32) SP1; Admin | UAC Disabled | CIS 6.1.276867.2813 | CD 26.2 | CID 20.0.1 | VMWare Workstation; XP (x32), 7 (x64) |
wasgij6
Global Moderator
Comodo's Hero
*****
Online Online

Posts: 3064



WWW
« Reply #4 on: December 28, 2011, 04:32:57 AM »

idk if anyone else has this problem but if i use valkyrie to analyze many files, after a while the analysis page will start jumping around randomly. ill scroll down to the bottom then it will jump to the top etc.. its really annoying. iv noticed this with a few different browsers
Logged

| Win 7 Ultimate (x32) SP1; Admin | UAC Disabled | CIS 6.1.276867.2813 | CD 26.2 | CID 20.0.1 | VMWare Workstation; XP (x32), 7 (x64) |
wasgij6
Global Moderator
Comodo's Hero
*****
Online Online

Posts: 3064



WWW
« Reply #5 on: January 04, 2012, 08:08:00 PM »

on this file the auto and final result says unknown but the adv. heur. say malware

https://valkyrie.comodo.com/Result.html?sha1=59d90752eb58d8edac91f4d62be5a2d8f727c0c6&&query=0&&filename=(15).exe
Logged

| Win 7 Ultimate (x32) SP1; Admin | UAC Disabled | CIS 6.1.276867.2813 | CD 26.2 | CID 20.0.1 | VMWare Workstation; XP (x32), 7 (x64) |
Chiron
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 5570



« Reply #6 on: January 04, 2012, 08:48:12 PM »

on this file the auto and final result says unknown but the adv. heur. say malware

https://valkyrie.comodo.com/Result.html?sha1=59d90752eb58d8edac91f4d62be5a2d8f727c0c6&&query=0&&filename=(15).exe
Has this one been changed since you posted it?

When I check the advanced heuristics I see that it says Unknown with a 99.9% certainty.
Logged

wasgij6
Global Moderator
Comodo's Hero
*****
Online Online

Posts: 3064



WWW
« Reply #7 on: January 04, 2012, 09:11:56 PM »

the probability says 99.9% unknown but one of the heuristic engines detects the file as malware, so shouldnt the probability say malware not unknown?
Logged

| Win 7 Ultimate (x32) SP1; Admin | UAC Disabled | CIS 6.1.276867.2813 | CD 26.2 | CID 20.0.1 | VMWare Workstation; XP (x32), 7 (x64) |
Chiron
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 5570



« Reply #8 on: January 04, 2012, 09:47:24 PM »

the probability says 99.9% unknown but one of the heuristic engines detects the file as malware, so shouldnt the probability say malware not unknown?
From my understanding what's important isn't what the individual engines detect, but what the combination predicts for the file. I'm actually not sure why they even show all of them.
Logged

Chiron
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 5570



« Reply #9 on: January 06, 2012, 03:38:41 PM »

Under the "Dynamic Detection" tab, if the verdict for CAMAS is "Undetected" if I select the option for the "Report URL" it just links me back to the main page. Why doesn't it link me to the CAMAS results?
Logged

wasgij6
Global Moderator
Comodo's Hero
*****
Online Online

Posts: 3064



WWW
« Reply #10 on: January 06, 2012, 04:13:56 PM »

Under the "Dynamic Detection" tab, if the verdict for CAMAS is "Undetected" if I select the option for the "Report URL" it just links me back to the main page. Why doesn't it link me to the CAMAS results?

i think its a bug. its been like that for as long as i can remember
Logged

| Win 7 Ultimate (x32) SP1; Admin | UAC Disabled | CIS 6.1.276867.2813 | CD 26.2 | CID 20.0.1 | VMWare Workstation; XP (x32), 7 (x64) |
wasgij6
Global Moderator
Comodo's Hero
*****
Online Online

Posts: 3064



WWW
« Reply #11 on: January 19, 2012, 12:57:53 AM »

i have been getting this error after uploading files (screenshot attached) refreshing the page fixes it
Logged

| Win 7 Ultimate (x32) SP1; Admin | UAC Disabled | CIS 6.1.276867.2813 | CD 26.2 | CID 20.0.1 | VMWare Workstation; XP (x32), 7 (x64) |
Siketa
Comodo's Hero
*****
Offline Offline

Posts: 3125


ZIG ZAG


« Reply #12 on: April 04, 2012, 03:00:42 PM »

Dynamic Detection/Advanced Heuristics are down again?
Logged
Siketa
Comodo's Hero
*****
Offline Offline

Posts: 3125


ZIG ZAG


« Reply #13 on: May 21, 2012, 01:56:23 PM »

Advanced Heuristics is down for more than 10 days now....
Any news about fix?
Logged
spywar
Star Group
Comodo's Hero
*****
Online Online

Posts: 2228



« Reply #14 on: October 31, 2012, 01:50:07 PM »

http://valkyrie.comodo.com/Result.html?sha1=9204188036cecb58284222a978cdd01b8adf49f0

AdHeuristics_1       Malware   
AdHeuristics_2       Malware   
That's my first case btw.
Logged
Tags:
Pages: [1] 2 3 4 Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.052 seconds with 20 queries.
Powered by SMF 1.1.18 | SMF © 2006, Simple Machines Design by 7dana.com