Welcome, Guest. Please login or register.
March 20, 2010, 08:47:50 AM

Login with username, password and session length

373191 Posts
41401 Topics
94091 Members

Latest Member: suzieq

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Desktop Security Products & Services
| |-+  Comodo Internet Security - CIS
| | |-+  AV False Positive/Negative Detection Reporting
| | | |-+  Preparing suspicious files for submission using Windows XP
« previous next »
Pages: [1] Go Down Print
Author Topic: Preparing suspicious files for submission using Windows XP  (Read 1293 times)
Bad Frogger
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 938



« on: December 16, 2008, 09:28:01 PM »

To submit suspect files for analyses using only Windows XP


1. In Windows Explorer, open the folder that contains the suspect malicious software files.
2. Right-click a blank area in the window, point to New, and then click Compressed (zipped) Folder.
3. Type malware.zip to name the new archive file, and then press ENTER.
4. Drop the suspected malicious software files into the archive file as you would drop them into a typical Windows  folder.
5. Double-click the archive file.
6. On the File menu, click Add a Password.
7. In the Password box, type infected
8. In the Confirm Password box, retype infected and then click OK.


Refer to this link for the mailing instructions for your ready to go zipped file.

https://forums.comodo.com/false_positivenegative_reporting_is_this_a_malware_that_cis_hasnot_detected/reporting_false_positivessuspicious_files_submitting_them_to_the_lab-t27062.0.html;msg197464#msg197464


Some may find this simpler than installing/using archiving software.
Hope it may help someone.

Later
Logged

CIS    Firefox  NoScript  Please remember to follow The Forum Policy.
layman
Comodo's Hero
*****
Offline Offline

Posts: 419


« Reply #1 on: December 17, 2008, 02:58:47 AM »

I have seen that sticky posts about 7zip. But, the problem is, when we use XP to zip, at least in my case, I had observed that even after password protecting, the mail providers block it (refuse to attach) saying it contains a virus, whereas through 7zip I was able to attach and send it by password protecting and hopefully Comodo also received it (as it did't return).

Also, I have seen that the 'worm' which I zipped was trying to access internet even after zipping it with XP (I don't remember whether it was before password protecting or after password protecting).  It was a confirmed worm and not a false positive. Since I could not use XP Zip, I then downloaded 7zip and sent the same as per instructions of 3xist. 
Logged
Bad Frogger
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 938



« Reply #2 on: December 17, 2008, 03:24:21 AM »

That whole scene went all wonky.
I didn't mean for 3xist to replace his tutorial with mine.
If there were 5 apps or ways to do it, then a complete forum could have them all.

There are all kinds of people with all different skill levels and all kinds of software.
7zip,winzip,ultimate zip, windows built in zip utility etc.
I intended to help to broaden the  knowledge base here not replace it.

If we ask nice maybe 3xist will put his tutorial back.
We can put all the info out there and let people decide how to go about things
based on their own comfort level with what is available.
 
Peace out
Logged

CIS    Firefox  NoScript  Please remember to follow The Forum Policy.
layman
Comodo's Hero
*****
Offline Offline

Posts: 419


« Reply #3 on: December 17, 2008, 04:16:04 AM »

I think the only reason why 3xist recommended 7zip was because it is too small (only 840 Kb), which even dial up users can download without heckles. Besides, it is free and do its job quite nicely. There are also programs like Tugzip and others, but I think he chose the best way out for both the users and Comodo. Afterall his basic intention was to ensure reaching the 'viruses' to Comodo to add signatures (than to describe the products).  I am also sure he is also aware of this 'constraint' of blocking of XP Zipped files by mail providers, which, if I am not wrong, was also discussed in the forum.
Logged
3xist
Guest
« Reply #4 on: December 17, 2008, 05:41:56 AM »

Don't worry guys... It's cool. I'm making another sticky now to resolve all this ! :-)

Cheers,
Josh
« Last Edit: December 17, 2008, 05:44:31 AM by 3xist » Logged
3xist
Guest
« Reply #5 on: December 17, 2008, 05:51:27 AM »

Okay, I will go ahead and close this one - New thread made which has both 7-Zip (Which is MY personal recommendation) and the built in OS tutorial.

Cheers,
Josh
Logged
Tags:
Pages: [1] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.209 seconds with 20 queries.
Powered by SMF 1.1.11 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by 7dana.com