Welcome, Guest. Please login or register.
March 20, 2010, 06:50:48 AM

Login with username, password and session length

373177 Posts
41398 Topics
94084 Members

Latest Member: probo

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Desktop Security Products & Services
| |-+  Comodo Internet Security - CIS
| | |-+  AV False Positive/Negative Detection Reporting
| | | |-+  Potential Comodo/Vipre clash or something more sinister?
« previous next »
Pages: [1] Go Down Print
Author Topic: Potential Comodo/Vipre clash or something more sinister?  (Read 798 times)
dweeb1
Newbie
*
Offline Offline

Posts: 1


« on: November 20, 2009, 05:26:05 PM »

I've had Sunbelt's Vipre Anti-Virus software running alongside Comodo Internet Security for some time now (approx. about 1 year), and only just recently, Comodo has detected a Trojan within Vipre called:

TrojWare.Win32.TrojanProxy.Puma.~sw[at]22456394

This malware appears in the following Vipre files:

C:\Program Files\Sunbelt Software\VIPRE\SBAMSvc.exe

and

C:\Program Files\Sunbelt Software\VIPRE\sbamui.exe

Obviously, I have the problem that if I quarantine or delete these files, Vipre will stop operating.

Could this be a clash between Comodo and Vipre, where Comodo has misdiagnosed a piece of the Vipre software as a Trojan, or could this be something more sinister?

Any help would be much appreciated.


Logged
HeffeD
Comodo's Hero
*****
Offline Offline

Posts: 1681


« Reply #1 on: November 21, 2009, 03:47:28 AM »

I don't think it's anything more sinister than a possible false positive.

You can submit the file to VirusTotal and see what other scanning engines think.

If you feel it's a false positive, submit it to Comodo Malware Analysis.
Logged

legal
Newbie
*
Offline Offline

Posts: 1


« Reply #2 on: November 24, 2009, 04:02:54 PM »

Hi

I am a new memeber of these forums and joined precisely because I have the same problem - for over a year both COMODO and CounterSpy of Sunbelt Software got on fine together and in the last few days I've had the warning from Comodo that trojware.win32.trojanproxy.puma was infesting the start-up of my CounterSpy service in the same files as dweeb1 mentions, except that I have them as CounterSpy/sbam etc and not VIPRE.

So, what should I do - delete them or treat them as false positives?

Thanks

Legal
Logged
HeffeD
Comodo's Hero
*****
Offline Offline

Posts: 1681


« Reply #3 on: November 25, 2009, 03:43:26 PM »

So, what should I do - delete them or treat them as false positives?

Read my post above.
Logged

Ionel
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 429



« Reply #4 on: November 27, 2009, 07:34:18 AM »

Hi,

The reported detection was found to be false-positive and is already fixed with DB 3055 of Comodo Internet Security 3.13.121240.574. You can check and confirm.

Thanks and regards,
Ionel
Logged
Tags:
Pages: [1] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.05 seconds with 17 queries.
Powered by SMF 1.1.11 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by 7dana.com