same file on two pc, same md5 cheksum, one flagged as virus not the other

[Guest]

[notsofast]

same file on two pc,
same md5 cheksum,
one flagged as virus not the other.
Both pc using comodo internet security premium
same engine ***.2197
same virus definitions. 11399
filename is dxdllreg_x86.cab downloaded from steam.
clues?

[Nemesis31]

Hi notsofast,

i think the file is patched.

did you make a VirusTotal scan  with the file dxdllreg_x86.cab ?

or a scan with another Anti-Virus....?

[notsofast]

I tried www.virustotal.com valkyrie.comodo.com both show no virus.
Im sure there is no virus in the file, just very curious as to why it keeps getting detected.

This is another file with the same "symptoms"
HardLinkShellExt_win32.exe
I just copied both files from one pc to the other with a USB stick.
No viruses detected there either for both files.

unfortunately its bedtime for me so no replies from me for a few hours.

[Chiron]

Can you please post links to the valkyrie results?

Also, if you're not sure if a file is malicious or not then please follow my advice in How to Tell if a File is Malicious.

[notsofast]

https://valkyrie.comodo.com/Result.html?sha1=1516f92215e254299c4c6bd82fb4fda1335a6be8&&query=0&&filename=dxdllreg__x86.cab

last virus update didn`t skip them either 11408.

[EricJH]

Can you compare the sha1 hashes of these two files?

[notsofast]

read this thread i also have posted.

https://forums.comodo.com/virusmalware-removal-assistance/comodo-cleaning-essentials-flags-files-comodo-internet-security-av-does-not-t81406.0.html

Sadly i come to the conclusion that comodo cleaning essentials can´t be trusted for "normal" scans. For my use at least.

[Tags:]