Welcome to the Comodo Forum
Welcome,
Guest
. Please
login
or
register
.
March 21, 2010, 11:20:46 AM
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
373451
Posts
41427
Topics
94164
Members
Latest Member:
luchtbedcommando
more news...
Search:
Advanced search
|
Tag Cloud
Welcome to the Comodo Forum
Desktop Security Products & Services
Comodo Internet Security - CIS
AV False Positive/Negative Detection Reporting
Bsectexp ( bootsectorexplorer from DiamondCS Website )
« previous
next »
Pages:
[
1
]
Author
Topic: Bsectexp ( bootsectorexplorer from DiamondCS Website ) (Read 724 times)
Regression
Malware Research Group
Comodo Family Member
Offline
Posts: 81
Peace... just Peace
Bsectexp ( bootsectorexplorer from DiamondCS Website )
«
on:
December 13, 2009, 09:55:32 PM »
Quote
Almost all scanners detect that wrongly. That file is as much as dangerous as flypoo on your office desk. It's packed with a PRIVATE(!) version of Pec2 (Bitsum) hence a lot of "incorrect" heuristic detections, especially because the file is also small and makes some "strange" registry activity. However, the registry activity is based on the way how wayne reads/accesses the bootsector. Via Registry physicaldevice. Nothing wrong with that.
( Inspector Clouseau AV Expert (VP Sunbelt Software) at
http://www.wilderssecurity.com/showthread.php?t=185994&page=12
)
FP
http://www.virustotal.com/en/analisis/1039a86536d273a79bfa04f9de5497f08894999219c9d3829b9bbbd99576fc8f-1255044489
http://www.threatexpert.com/report.aspx?md5=676f75abdb30d2d0b187b80aba6b657f
bootsectorexplorer from DiamondCS Website ... another false-positive.
Logged
One Ring to rule them all...
One Ring to bring them all and in the darkness bind them in the land of
M
ordor where the
$
hadows lie
> Panic may cause a user to do silly things.
hailong.wang
Global Moderator
Comodo's Hero
Offline
Posts: 612
Re: Bsectexp ( bootsectorexplorer from DiamondCS Website )
«
Reply #1 on:
December 13, 2009, 10:13:42 PM »
Quote from: Regression on December 13, 2009, 09:55:32 PM
bootsectorexplorer from DiamondCS Website ... another false-positive.
Hi Regression,
We are going to have a look at it and will get back to you after investigation.
Thanks and Regards,
hailong.wang
Logged
haja
Comodo Loves me
Offline
Posts: 125
Re: Bsectexp ( bootsectorexplorer from DiamondCS Website )
«
Reply #2 on:
December 14, 2009, 01:49:20 AM »
Hi Regression,
Quote from: Regression on December 13, 2009, 09:55:32 PM
bootsectorexplorer from DiamondCS Website ... another false-positive.
Reported FP has been fixed in DB 3237 .Please update and confirm.
Regards,
Haja
Logged
Regression
Malware Research Group
Comodo Family Member
Offline
Posts: 81
Peace... just Peace
Re: Bsectexp ( bootsectorexplorer from DiamondCS Website )
«
Reply #3 on:
December 15, 2009, 05:57:43 AM »
Quote from: haja on December 14, 2009, 01:49:20 AM
Hi Regression,
Reported FP has been fixed in DB 3237 .Please update and confirm.
Regards,
Haja
It is fixed Confirmed Thanks
Logged
One Ring to rule them all...
One Ring to bring them all and in the darkness bind them in the land of
M
ordor where the
$
hadows lie
> Panic may cause a user to do silly things.
Tags:
Boot
explorer
False-Positive
Pages:
[
1
]
« previous
next »
Jump to:
Please select a destination:
-----------------------------
General Category
-----------------------------
=> Melih's Corner - CEO Talk/Discussions/Blog
=> Comodo.TV - Our Internet Video Channel
===> Comodo.TV - News and Announcements
===> Comodo.TV - Program Lineup
===> Audience Feedback and Suggestions
=> Which Product do you want Comodo to develop next?
=> How Can I Help Comodo? (Please We Need You!)
===> Report Comodo Forum / Web Site Issues
===> Please Tell Us Your Views and Vote Here!
===> Help Spread the Word - Banners and Logos
=> General Discussion (off topic) Anything and everything...
===> Member Confessions :-)
===> Funny Photos :-)
===> Cool Stuff
-----------------------------
Desktop Security Products & Services
-----------------------------
=> Comodo Internet Security - CIS
===> News / Announcements / Feedback - CIS
=====> Wishlist - CIS
===> AV False Positive/Negative Detection Reporting
===> Help - CIS
=====> Guides - CIS
=====> AntiVirus Help - CIS
=======> AntiVirus FAQ - CIS
=====> Firewall Help - CIS
=======> Firewall FAQ - CIS
=====> Defense+ / Sandbox Help - CIS
=======> Defense+ / Sandbox FAQ - CIS
=====> Install / Setup / Configuration Help - CIS
=======> Install / Setup / Configuration FAQ - CIS
===> Bug Report - CIS
=> Comodo Backup - CB
===> News / Announcements / Feedback - CB
===> Comodo Online Backup - COB
===> Help - CB
=====> FAQ - CB
=> Comodo Time Machine - CTM
===> News / Announcements / Feedback - CTM
===> Help - CTM
=====> FAQ - CTM
===> Bug Reports - CTM
=> Comodo Dragon - CD
===> News / Announcements / Feedback - CD
=====> Wishlist - CD
===> Help - CD
=====> FAQ - CD
===> Bug Reports - CD
=> Comodo Disk Encryption - CDE
===> News / Announcements / Feedback - CDE
=====> Wishlist - CDE
===> Help - CDE
=====> FAQ - CDE
===> Bug Reports - CDE
===> Beta Corner - CDE
=> Comodo Secure Email - CSE
===> News / Announcements / Feedback - CSE
===> Help - CSE
=====> FAQ - CSE
===> Bug Reports - CSE
=> Comodo EasyVPN - CEVPN
===> News / Announcements / Feedback - CEVPN
===> Help - CEVPN
=====> FAQ - CEVPN
===> Bug reports - CEVPN
=> Comodo AntiSpam - CAS
=> Comodo TrustConnect - CTC
=> HopSurf - CHS
=> Comodo Instant Malware Analysis Online - CIMA
=> Verification Engine - CVE
-----------------------------
Desktop Utilities & Services
-----------------------------
=> Comodo System Cleaner - File/Registry/Privacy Cleaner - CSC
===> News / Announcements / Feedback - CSC
===> Help - CSC
=====> FAQ - CSC
=> Comodo Cloud Scanner - CCS
===> News / Announcements / Feedback - CCS
===> FAQ - CCS
=> Live PC Support
-----------------------------
Business / Enterprise Security Products & Services
-----------------------------
=> Digital Certificates
===> Code Signing Certificate
===> Content Verification Certificate
===> Email Certificate
===> SSL Certificate
=> PCI DSS Compliance
=> Comodo Endpoint Security Manager
=> Two Factor Authentication for Web Applications
=> Trustlogo
=> Hacker Guardian
-----------------------------
Learn about Computer Security and Interact with Security Experts
-----------------------------
=> General Security Questions and Comments
=> Virus/Malware Removal Assistance
=> Leak Testing/Attacks/Vulnerability Research
=> Digital Certificates, Encryption and Digital Signing
=> Other Security Products
-----------------------------
International Comodo Forums
-----------------------------
=> International Comodo Forums
===> 汉语语言, 漢語語言 / Chinese Simplified, Traditional
===> Česky / Czech
===> Dansk / Danish
===> Nederlands / Dutch
===> Suomi / Finnish
===> Francais / French
===> Deutsch / German
===> ελληνικά / Greek
===> Magyar / Hungarian
===> Italiano / Italian
===> Nihongo / Japanese
===> Norsk / Norwegian
===> Polski / Polish
===> Português/Portuguese
===> Română / Romanian
===> По-русски / Russian
===> Slovenský / Slovak
===> Slovenščina / Slovenian
===> Espanol / Spanish
===> Svenska / Swedish
===> Turkce / Turkish
===> Українська / Ukrainian
===> Việt / Vietnamese
-----------------------------
Other
-----------------------------
=> Forum Policy Violation Board
-----------------------------
Archived Boards
-----------------------------
=> Discontinued Products
===> Comodo Anti-Viruspyware (CAVS)
=====> Help for Comodo AntiVirus
=====> FAQ for Comodo Anti-ViruSpyware
=====> Feedback/Comments/Announcements/News about CAVS
===> Comodo BOClean Anti-Malware
=====> Announcements
=====> Comodo BOClean Anti-Malware FAQ
===> Comodo Diskshield
===> Comodo Firewall
=====> Feedback/Comments/Announcements/News
=====> Help for v3
=====> Help for v2
=====> Frequently Asked Questions (FAQ) for Comodo firewall
=====> Comodo Firewall Translations
=====> Bug Reports
===> i-Vault
===> Launch Pad (Discontinued)
===> Comodo Meet (Web Conferencing Product) (Discontinued)
===> Comodo Memory Firewall(Buffer Overflow Protection)
=====> Comodo Memory Firewall Beta Corner
=====> Help
=====> Frequently Asked Questions (Comodo Memory Firewall)
=====> Feedback/Comments/Announcements/News
===> Safesurf
===> Trusttoolbar (Discontinued)
===> Trustfax (online faxing) (discontinued)
===> Trustix Enterprise Firewall
===> User Anywhere (Remote Access product) (Discontinued)
===> UserTrust - First Independent Website Rating - Empowering our users!
===> Comodo Vulnerability Analyzer - CVA
===> ZTL
Page created in -0 seconds with 18 queries.
Powered by SMF 1.1.11
|
SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by
7dana.com