Author Topic: False positive  (Read 351 times)

Offline danyb

  • Comodo Loves me
  • ****
  • Posts: 161
False positive
« on: June 28, 2019, 10:57:40 AM »
I have been using Comodo on my Dell laptop since I started using it 16/10/2018.
I ran several complete scans  since then.
I was having issues with automatic scans not running anymore.
To solve this I re-installed Comodo.
It ran a quick scan at startup. Nothing found.

I then ran a full scan. Now malware was found:
Malware[at]#1djogubu7bolu>  DellUpdateApp.msi
This was located in C:\\Windows.
I went looking at the given location and it was dated from 2018 - probably from the start of the laptop.
As I opened the map Comodo mentioned it had quarantained malware and the file was gone.
I found it in Comodo blocked application list and indicated it as false positive and deblocked it. It is now back in the original location but with yesterday's date.

I also found a mention of this in a Dell forum but I do not understand the answer given there (https://www.dell.com/community/Inspiron/Does-Dellupdateapp-msi-belong-on-my-laptop-insiron-15-7586/td-p/7303162)

Note: This file was never found in previous scans!!!!!!!



Offline Mathi R

  • Global Moderator
  • Comodo Loves me
  • *****
  • Posts: 149
Re: False positive
« Reply #1 on: June 28, 2019, 11:15:38 AM »
Hi danyb,

Thank you for posting, we are looking into it.

Offline Chunli

  • Malware Research Group
  • Comodo's Hero
  • *****
  • Posts: 2584
Re: False positive
« Reply #2 on: June 29, 2019, 01:03:12 AM »
Hi,danyb

This is to inform you that false-positive has been fixed.
You can update to AV database Version <31094> of  Comodo Internet Security Version<10.2.0.6526> and confirm it.

Best regards
Chunli.chen

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek