Author Topic: same file on two pc, same md5 cheksum, one flagged as virus not the other  (Read 3330 times)

Offline notsofast

  • Newbie
  • *
  • Posts: 12
same file on two pc,
same md5 cheksum,
one flagged as virus not the other.
Both pc using comodo internet security premium
same engine ***.2197
same virus definitions. 11399
filename is dxdllreg_x86.cab downloaded from steam.
clues?

Offline Nemesis31

  • Comodo Loves me
  • ****
  • Posts: 149
    • Communauté multi-gaming SharK
Re: same file on two pc, same md5 cheksum, one flagged as virus not the other
« Reply #1 on: February 01, 2012, 06:16:03 PM »
Hi notsofast,

i think the file is patched.

did you make a VirusTotal scan  with the file dxdllreg_x86.cab ?

or a scan with another Anti-Virus....?

Offline notsofast

  • Newbie
  • *
  • Posts: 12
Re: same file on two pc, same md5 cheksum, one flagged as virus not the other
« Reply #2 on: February 01, 2012, 06:36:10 PM »
I tried www.virustotal.com valkyrie.comodo.com both show no virus.
Im sure there is no virus in the file, just very curious as to why it keeps getting detected.

This is another file with the same "symptoms"
HardLinkShellExt_win32.exe
I just copied both files from one pc to the other with a USB stick.
No viruses detected there either for both files.

unfortunately its bedtime for me so no replies from me for a few hours.
« Last Edit: February 01, 2012, 06:41:14 PM by notsofast »

Online Chiron

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 10877
Re: same file on two pc, same md5 cheksum, one flagged as virus not the other
« Reply #3 on: February 01, 2012, 08:02:11 PM »
Can you please post links to the valkyrie results?

Also, if you're not sure if a file is malicious or not then please follow my advice in How to Tell if a File is Malicious.


Offline EricJH

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 19190
Re: same file on two pc, same md5 cheksum, one flagged as virus not the other
« Reply #5 on: February 03, 2012, 05:07:12 PM »
Can you compare the sha1 hashes of these two files?

Offline notsofast

  • Newbie
  • *
  • Posts: 12
Re: same file on two pc, same md5 cheksum, one flagged as virus not the other
« Reply #6 on: February 03, 2012, 08:24:16 PM »
read this thread i also have posted.

https://forums.comodo.com/virusmalware-removal-assistance/comodo-cleaning-essentials-flags-files-comodo-internet-security-av-does-not-t81406.0.html

Sadly i come to the conclusion that comodo cleaning essentials can´t be trusted for "normal" scans. For my use at least.
« Last Edit: February 03, 2012, 08:29:43 PM by notsofast »

 

Seo4Smf 2.0 © SmfMod.Com | Smf Destek