Welcome, Guest. Please login or register.
July 25, 2008, 12:58:58 PM

Login with username, password and session length

177021 Posts
20930 Topics
50746 Members

Latest Member: shell64

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Desktop Security Products
| |-+  Comodo BOClean Anti-Malware
| | |-+  Major False Positive from latest update of Boclean
« previous next »
Pages: 1 [2] Go Down Print
Author Topic: Major False Positive from latest update of Boclean  (Read 2886 times)
Rednose
Comodo's Hero
*****
Offline Offline

Posts: 1191


Ganda's sleepy ( in his wildest dreams )


« Reply #15 on: January 22, 2008, 12:29:35 PM »

Hi atomas31 Smiley

For your information : Telebanking software IS software used by home users to manage their bank accounts Wink

About Kevin : If you want you can pm him to express your worries. But remember that with Comodo he is not only responsible for CBOClean but for CAVS as well. As far as I know he is now busy with the new Beta of CAVS and with re-coding CBOClean ( CBOClean 5.0  Huh ), but I expect we will see that only after the release of Vista SP1  Smiley

Greetz. Red.

Logged

XP 32x SP3  CFP 2.4  SSM 2.0 Free  Avast! 4.8 Home  CBOClean 4.27  CMF 2.0  CVA 1.0 Beta  SAS 4.15 Free  MBAM 1.21
Arkangyal
"There is nothing impossible to him who will try." - Alexander The Great, ancient Greek King of Macedon, 356 BC-323 BC.
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 837


[ Visit Hungary ] www.hungary.hu


WWW
« Reply #16 on: January 22, 2008, 02:20:54 PM »

He must, i guess. As i remember, Kevin was happy cause he could have a more effiecent environment with the help of Comodo (but for a perfect answer, ask him). Also, as i know he's working on CAVS as well.
I'm quite happy hearing that the FP is fixed Smiley.
Ark
Logged

32bit XP Pro Hun SP3 NTFS, .NET 2.0, VB6SP6, Dx9c (Y08); Asrock mb., Intel 2,66GHz, Ati 1600 xt Pro 512MB, 2GB 400MHz DDR,  1280x1024[ at ]75Hz 32bit, realtek (built-in), belkin router (wi-fi). MSI Mega book, 64bit Vista Hun, 1gb ram, wifi (g)
atomas31
Newbie
*
Offline Offline

Posts: 12


« Reply #17 on: January 23, 2008, 11:09:07 AM »

Well, after one or two last update that solve the problem, with the latest update (2008-01-23 - 15:45:46) The false positive about shadowprotectsvc.exe is back  Angry
It is now detected as BKDR -RBOT.JS

This is simply becoming ridiculous! Doesn't Comodo test their update before releasing it? Now, they have no excuse to still detect shadowprotectsvc.exe has a malware since I have send them the file one or two days ago...

Hope they can solve this problem soon  Thinking

Best regards,
Atomas31
Logged
Baskar
Global Moderator
Newbie
*****
Offline Offline

Posts: 14



« Reply #18 on: January 23, 2008, 04:56:12 PM »

Hello Atomas31,

It was indeed a false positive again and it has been fixed in a update a few moments ago. Thanks for taking the time in reporting to us about it. Much appreciated Smiley. Sincere apologies for the inconvenience caused.

Thanks and Regards,
Baskar.
Logged
redwolfe_98
Comodo Loves me
****
Offline Offline

Posts: 174


« Reply #19 on: January 25, 2008, 02:02:35 PM »

i figure that there must have been a good reason for "gss.exe" being flagged.. if it was necessary in order for BOC to flag other malware that might have similar characteristics, that would have been fine with me.. adding "gss.exe" to BOC's "excluder" excluded "gss.exe" from being flagged..

i scanned for rootkits, recently, and i saw that "gss.exe" had some "hooks" similar to what rootkits would have, so my guess is that that was why it was being flagged.. so, maybe it was good the way it was and we just needed to add "gss.exe" to BOC's "excluder" so that it wouldn't be flagged while malware with similar characteristics would be flagged.. i hope y'all follow what i am saying.. Smiley whatever it was that was causing BOC to flag "gss.exe" might have been a good thing to have..
Logged

Win XP SP2, Kerio 2.15; Antivir Premium; a2 antimalware, BOClean, System Safety Monitor
atomas31
Newbie
*
Offline Offline

Posts: 12


« Reply #20 on: May 12, 2008, 09:23:19 AM »

The false posivite with shadowprotectsvc.exe is back AGAIN  Angry

This is becoming ridiculous...

The only good news is that it seems to be resolved with today update (Wow! only 2 days and a half to rectify this F/P  Clapping )...

Thanks,
« Last Edit: May 12, 2008, 09:26:16 AM by atomas31 » Logged
Kevin McAleavey
Administrator
Comodo's Hero
*****
Offline Offline

Posts: 273


Snag a nasty? NO problem! =)


« Reply #21 on: May 13, 2008, 05:51:30 AM »

The false posivite with shadowprotectsvc.exe is back AGAIN  Angry

This is becoming ridiculous...

The only good news is that it seems to be resolved with today update (Wow! only 2 days and a half to rectify this F/P  Clapping )...

Thanks,

 We cool yet?  =)
Logged

"I reject your reality and substitute my own." - (Adam Savage, "MYTHBUSTERS" TV show)
Tags:
Pages: 1 [2] Go Up Print 
« previous next »
Jump to:  

SSL Firewall
Page created in 0.142 seconds with 18 queries.
Powered by SMF 1.1.5 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by 7dana.com