Author Topic: Heur.Dual.Extensions  (Read 27700 times)

Offline peopleinside

  • Newbie
  • *
  • Posts: 18
Heur.Dual.Extensions
« on: July 07, 2009, 02:34:28 PM »
Hi,
comodo internet security free allert me of a C:\Program Files\Widget vodafone.it\Widget vodafone.it.exe
(Vodafone www.vodafone.com) infected by Heur.Dual.Extensions, virus

what is this virus? I think there are not a virus!
Mark

Offline Ragwing

  • Comodo's Hero
  • *****
  • Posts: 3498
Re: Heur.Dual.Extensions
« Reply #1 on: July 07, 2009, 02:42:44 PM »
Hello!

This sounds like a so called false positive, not a virus, assuming that you do use a program from Vodafone. Normal files use the format name.extension (explorer.exe, cmd.exe, svchost.exe etc.) as their name, while this one uses name.something.extension (i.e. it looks like it has two extensions), which is the meaning of the phrase 'heur.dual.extensions'. 'Heur' is short for 'heuristics', and means that it might be malicious, not that it is. Please read here on how to report a false positive:
https://forums.comodo.com/false_positivenegative_reporting_is_this_a_malware_that_cis_hasnot_detected/how_to_report_false_positivessuspicious_files_how_to_submit_them-t36051.0.html

Offline EricJH

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 19560
Re: Heur.Dual.Extensions
« Reply #2 on: July 08, 2009, 06:14:05 PM »
Moved to the FP board.

hailong.wang

  • Guest
Re: Heur.Dual.Extensions
« Reply #3 on: July 08, 2009, 10:22:32 PM »
Hi,
comodo internet security free allert me of a C:\Program Files\Widget vodafone.it\Widget vodafone.it.exe
(Vodafone www.vodafone.com) infected by Heur.Dual.Extensions, virus

what is this virus? I think there are not a virus!
Mark

Hi  peopleinside,

If you can find the FP file,you can submit with this link:http://internetsecurity.comodo.com/submit.php.Then We can go to have a look at it.

Regards,
hailong.wang

Offline shell0653

  • Newbie
  • *
  • Posts: 1
Re: Heur.Dual.Extensions
« Reply #4 on: October 10, 2010, 09:24:11 AM »
Hi,
comodo internet security free allert me of a C:\Program Files\Widget vodafone.it\Widget vodafone.it.exe
(Vodafone www.vodafone.com) infected by Heur.Dual.Extensions, virus

what is this virus? I think there are not a virus!
Mark



I'm having the same problem but it has infected all the files under  LocalSetting/ApplicationData in my c drive. when i try to delete the problem comodo just says it couldnt delete all them? (Meaning it deleted none)

Offline EricJH

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 19560
Re: Heur.Dual.Extensions
« Reply #5 on: October 10, 2010, 05:19:06 PM »


I'm having the same problem but it has infected all the files under  LocalSetting/ApplicationData in my c drive. when i try to delete the problem comodo just says it couldnt delete all them? (Meaning it deleted none)
Also for an apparent Vodafone widget? What does the virus alert tell exactly?

Offline FangFang

  • First Response Group
  • Comodo Member
  • *****
  • Posts: 49
Re: Heur.Dual.Extensions
« Reply #6 on: October 10, 2010, 06:38:29 PM »
Also for an apparent Vodafone widget? What does the virus alert tell exactly?
Hi  EricJH,

If you can find the FP file,you can submit through this link:http://internetsecurity.comodo.com/submit.php.Then we can go to have a look at it.

Thanks and Regards,
FangFang

Offline Syl

  • Comodo's Hero
  • *****
  • Posts: 531
Re: Heur.Dual.Extensions
« Reply #7 on: October 12, 2010, 12:33:31 PM »
The website doesn't work for the moment, I can't upload my FP.
I'll PM you.

 

Seo4Smf 2.0 © SmfMod.Com | Smf Destek