Re: COMODO Internet Security 3.10.102194.530 Bug Reports

[Guest]

[jp10558]

Seems to be a few false positives immediately on install in the AV.

One is the PSEXESVC service, from SysInternals psexec tool to remotely start processes. It was found in C:\Windows\PSEXESVC.EXE  - it is detected as Unclassified malware[at]8163993

The second appears to be part of ghostscript - used to view postscript files or generate PDFs by many free PDF printers. This one is in C:\gs\gs8.54\bin\gswin32.exe - this one is Huer.Suspicious[at]22637055

The others appear to be XenoCode settings which are web based VMs to run browsers for testing without installing them. They vary but are all Huer.Suspicious

[gmohan]

Hi jp10558,

Seems to be a few false positives immediately on install in the AV.

One is the PSEXESVC service, from SysInternals psexec tool to remotely start processes. It was found in C:\Windows\PSEXESVC.EXE  - it is detected as Unclassified malware[at]8163993

The second appears to be part of ghostscript - used to view postscript files or generate PDFs by many free PDF printers. This one is in C:\gs\gs8.54\bin\gswin32.exe - this one is Huer.Suspicious[at]22637055

The others appear to be XenoCode settings which are web based VMs to run browsers for testing without installing them. They vary but are all Huer.Suspicious

The reported FP will be fixed in next updates.

Regards,
-Chandra Mohan

[gmohan]

Hi jp10558,

Seems to be a few false positives immediately on install in the AV.

One is the PSEXESVC service, from SysInternals psexec tool to remotely start processes. It was found in C:\Windows\PSEXESVC.EXE  - it is detected as Unclassified malware[at]8163993

The second appears to be part of ghostscript - used to view postscript files or generate PDFs by many free PDF printers. This one is in C:\gs\gs8.54\bin\gswin32.exe - this one is Huer.Suspicious[at]22637055

The others appear to be XenoCode settings which are web based VMs to run browsers for testing without installing them. They vary but are all Huer.Suspicious

The reported FPs have been fixed in DB 1575.

-Chandra Mohan

[Tags:]