How do you submit files to CIMA?

[Guest]

[Ruester]

It's nice that there's a new CIMA, but how do I use it? Thanks all,

Noob

here are the results for my recent scan - I'm not sure about a couple of these...

Heur.Suspicious[at]22192631 C:\Users\Aza\AppData\Local\Temp\hp_webrelease\Patch\Uninst\enu\HPHuni03.exe
Heur.Suspicious[at]18970837 C:\Users\Aza\AppData\Local\Temp\hp_webrelease\Util\ccc\enu\Q818966_WXP_SP2_x86_ENU.exe
Heur.Suspicious[at]22192631 C:\Users\Aza\AppData\Local\Temp\hp_webrelease_\Patch\Uninst\enu\HPHuni03.exe
Heur.Suspicious[at]18970837 C:\Users\Aza\AppData\Local\Temp\hp_webrelease_\Util\ccc\enu\Q818966_WXP_SP2_x86_ENU.exe
Heur.Suspicious[at]22192631 C:\Users\Aza\AppData\Local\Temp\hp_webrelease__\Patch\Uninst\enu\HPHuni03.exe
Heur.Suspicious[at]18970837 C:\Users\Aza\AppData\Local\Temp\hp_webrelease__\Util\ccc\enu\Q818966_WXP_SP2_x86_ENU.exe
Heur.Dual.Extensions C:\Users\Aza\AppData\Local\Temp\nss8FF3.tmp.exe
UnclassifiedMalware[at]22035926 C:\Users\Aza\Downloads\HostsFile.7z
UnclassifiedMalware[at]14933235 F:\System Volume Information\_restore{4D47F711-BB41-4B71-BEC4-8711EE2B450B}\RP217\A0032502.exe
Heur.Pck.PKLITE32 F:\System Volume Information\_restore{4D47F711-BB41-4B71-BEC4-8711EE2B450B}\RP217\A0032841.exe
Heur.Suspicious[at]22192631 E:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphuni03.exe


Thanks for any info

[Melih]

It's nice that there's a new CIMA, but how do I use it? Thanks all,

Noob

here are the results for my recent scan - I'm not sure about a couple of these...

Heur.Suspicious[at]22192631 C:\Users\Aza\AppData\Local\Temp\hp_webrelease\Patch\Uninst\enu\HPHuni03.exe
Heur.Suspicious[at]18970837 C:\Users\Aza\AppData\Local\Temp\hp_webrelease\Util\ccc\enu\Q818966_WXP_SP2_x86_ENU.exe
Heur.Suspicious[at]22192631 C:\Users\Aza\AppData\Local\Temp\hp_webrelease_\Patch\Uninst\enu\HPHuni03.exe
Heur.Suspicious[at]18970837 C:\Users\Aza\AppData\Local\Temp\hp_webrelease_\Util\ccc\enu\Q818966_WXP_SP2_x86_ENU.exe
Heur.Suspicious[at]22192631 C:\Users\Aza\AppData\Local\Temp\hp_webrelease__\Patch\Uninst\enu\HPHuni03.exe
Heur.Suspicious[at]18970837 C:\Users\Aza\AppData\Local\Temp\hp_webrelease__\Util\ccc\enu\Q818966_WXP_SP2_x86_ENU.exe
Heur.Dual.Extensions C:\Users\Aza\AppData\Local\Temp\nss8FF3.tmp.exe
UnclassifiedMalware[at]22035926 C:\Users\Aza\Downloads\HostsFile.7z
UnclassifiedMalware[at]14933235 F:\System Volume Information\_restore{4D47F711-BB41-4B71-BEC4-8711EE2B450B}\RP217\A0032502.exe
Heur.Pck.PKLITE32 F:\System Volume Information\_restore{4D47F711-BB41-4B71-BEC4-8711EE2B450B}\RP217\A0032841.exe
Heur.Suspicious[at]22192631 E:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphuni03.exe


Thanks for any info

http://camas.comodo.com/

go to the above link and submit files.
thanks
Melih

[Ruester]

I submitted the file I saved from the virus scan log and another window came up, but I don't understand what it's telling me.

Here's what it says:

Automated Analysis System

File Info

    * Size: 910
    * MD5: 0f85d4660f8235062204d7f8513a7735
    * SHA1: 952b8027bd7d395464bb151e46eb4c46b7bf0f13
    * SHA256: cf8e3e68b5a3d8026cef1a9a18f8814668f59a90a63c1df27e5b7cd0887c8270
    * URL: /cgi-bin/submit?file=cf8e3e68b5a3d8026cef1a9a18f8814668f59a90a63c1df27e5b7cd0887c8270

[z2665]

   
You need to wait a while, and then the results will be analyzed. Like http://camas.comodo.com/cgi-bin/submit?file=7e1f5fb63e7937d9a73d7f3b0e8b125497a0d2e36c0529d88a33ab75176f82ca .


_{Edit by EricJH: made the url clickable}

[emhami2009]

CIMA looks great - but i have settings to "automatic quarantine" - so i guess there's no way of submitting these files as when i try it says "access denied" or words to that effect......i guess i could restore the items - BUT seems like a scarey option - why would i risk restoring a virus to my system...sorry if i sound ignorant - i'm pretty much self taught on the pc...

further to this - the whole reason i'm looking at this is cos i've been having issues today with superantispyware - which i've used for about a month w no probs...but today it wanted to update the version & i've been unable to get it to run - have uninstalled - directly downloaded latest version from cnet - but i think the prob is the files that have been quarantined - I HAD CIS ON INSTALLATION MODE - this makes me suspicious....i mean, shouldn't it have just set up with no probs like my original version a month ago...any ideas? help!

i include screenshot of quarantine folder for anyone who knows about this stuff to peruse....

thanks in advance for any help/advice anyone can give me!

Em.

[Tags:]