Author Topic: False-Positive GameNet.ru launcher application #2  (Read 11477 times)

Offline maksim.karevich

  • Comodo Member
  • **
  • Posts: 39
False-Positive GameNet.ru launcher application #2
« on: August 20, 2015, 05:59:44 AM »
Hello,

I am technical support specialist of GameNet team (www.gamenet.ru). We are developers of QGNA application: an application to launch multiple games on PC.
Having run some tests we found that your software identifies installation maganer of our application (https://gamenet.ru/aboutapp) as TrojWare.Win32.Agent.KDV, and also one of its files (GameExecutorHelperX86.dll) as malware (TrojWare.Win32.Wowlik.BE[at]334462592). Error screenshot and the files attached.

This situation occur on 2 versions of your software: Comodo Antivirus and Comodo Internet Security .

We ask you to check it on the instruction below:
1. antivirus install
2. antivirus update
3. PC reboot
4. download the application https://gamenet.ru/aboutapp
5. install application
6. check its launch
7. scan folder C:\Program Files (x86)\QGNA

Please, run this test on Comodo Antivirus and Comodo Internet Security and tell me the results.

[attachment deleted by admin]

Offline HariKrishnan

  • First Response Group
  • Comodo Loves me
  • *****
  • Posts: 163
Re: False-Positive GameNet.ru launcher application #2
« Reply #1 on: August 20, 2015, 06:22:33 AM »
Hi maksim.karevich,

Thank you for reporting this.
We'll check them and get back to you soon.

Regards,
Harikrishnan M

Offline Chunli

  • Malware Research Group
  • Comodo's Hero
  • *****
  • Posts: 2582
Re: False-Positive GameNet.ru launcher application #2
« Reply #2 on: August 21, 2015, 11:31:42 PM »
Hi,maksim.karevich

This is to inform you that false-positive has been fixed.
You can update to AV database Version <23060> of  Comodo Internet Security Version<8.2.0.4674> and confirm it.

Best regards
Chunli.chen

Offline maksim.karevich

  • Comodo Member
  • **
  • Posts: 39
Re: False-Positive GameNet.ru launcher application #2
« Reply #3 on: August 25, 2015, 08:45:47 AM »
Thx for you reponse.

But Virustotal.com still identify our file as TrojWare.Win32: https://www.virustotal.com/en/file/497fb8f5688db71bca4e8a17a14574d5a03b82bea9ef193e36adc08c2e6b3f0b/analysis/1440506397/
Pls check our file and do something.

Best regards,
Maksim Karevich.

Offline Ionel

  • Comodo Staff
  • Comodo's Hero
  • *****
  • Posts: 3528
Re: False-Positive GameNet.ru launcher application #2
« Reply #4 on: August 25, 2015, 10:13:40 AM »
Hi maksim.karevich,

Please submit the detected file to us via email at falsepositive[at]vlab.comodo.com

Thank you!

Regards,
Ionel

Offline yigido

  • Malware Research Group
  • Comodo's Hero
  • *****
  • Posts: 5691
  • COMODO Rocks!
    • Free Comodo Products!
Re: False-Positive GameNet.ru launcher application #2
« Reply #5 on: August 25, 2015, 10:32:15 AM »
Thx for you reponse.

But Virustotal.com still identify our file as TrojWare.Win32: https://www.virustotal.com/en/file/497fb8f5688db71bca4e8a17a14574d5a03b82bea9ef193e36adc08c2e6b3f0b/analysis/1440506397/
Pls check our file and do something.

Best regards,
Maksim Karevich.
You have to provide the sample of this virustotal report
I downloaded samples from your first post and there is no detection for the files.
False positives are fixed, I can confirm..
« Last Edit: August 25, 2015, 10:33:53 AM by yigido »
COMODO Cloud Antivirus
Firefox Quantum
Encrypt the web! Use HTTPS Everywhere..
Block spying ads and invisible trackers! Use Privacy Badger..

Offline maksim.karevich

  • Comodo Member
  • **
  • Posts: 39
Re: False-Positive GameNet.ru launcher application #2
« Reply #6 on: September 10, 2015, 08:43:06 AM »
Hello.

Your application again lock some our files.
Pls check it one more time. All files and screenshots atached.

Best regards,
Maksim Karevich.

[attachment deleted by admin]

Offline FlorinG

  • Comodo Staff
  • Comodo's Hero
  • *****
  • Posts: 3547
Re: False-Positive GameNet.ru launcher application #2
« Reply #7 on: September 10, 2015, 09:44:36 AM »
Helo maksim.karevich,

Thank you for reporting this, we'll verify it.

Best regards,
FlorinG
If possible please post your malware submissions as SHA1 lists (created with HashMyFiles or any other software). Always make sure first you have submitted the samples through CIS or CIMA.

Offline Qiuhui.Wang

  • Comodo Staff
  • Comodo's Hero
  • *****
  • Posts: 2098
Re: False-Positive GameNet.ru launcher application #2
« Reply #8 on: September 10, 2015, 10:03:40 PM »
Hi maksim.karevich,

This is to inform you that false-positive has been fixed.
You can update to AV database Version <23212> of  Comodo Internet Security Version<8.2.0.4703> and confirm it.

Best regards
Qiuhui.Wang

Offline maksim.karevich

  • Comodo Member
  • **
  • Posts: 39
Re: False-Positive GameNet.ru launcher application #2
« Reply #9 on: September 23, 2015, 10:28:19 AM »
Again same story. Please, do something with this false-positive detect, or we will recomend our users don't use your application.
Files atached.

Best regards, Maksim Karevich
technical support GameNet team.

[attachment deleted by admin]

Offline FlorinG

  • Comodo Staff
  • Comodo's Hero
  • *****
  • Posts: 3547
Re: False-Positive GameNet.ru launcher application #2
« Reply #10 on: September 23, 2015, 01:28:22 PM »
Hello maksim.karevich,

Thank you for letting us know about this, we'll check it and get back to you soon.

Best regards,
FlorinG
If possible please post your malware submissions as SHA1 lists (created with HashMyFiles or any other software). Always make sure first you have submitted the samples through CIS or CIMA.

Offline Sathish P

  • First Response Group
  • Comodo Loves me
  • *****
  • Posts: 197
Re: False-Positive GameNet.ru launcher application #2
« Reply #11 on: September 24, 2015, 02:36:53 AM »
Hi maksim.karevich,

This is to inform you that false-positive has been fixed.
You can update to AV database Version <23291> of  Comodo Internet Security Version <8.2.0.4702> and confirm it.

Regards,
Sathish

Offline maksim.karevich

  • Comodo Member
  • **
  • Posts: 39
Re: False-Positive GameNet.ru launcher application #2
« Reply #12 on: September 24, 2015, 07:34:06 AM »
Yeap, now is fine. Thanks. If you can, check our files after updates your database, to avoid this in the future.

Best regards, Maksim Karevich
technical support GameNet team.

Offline maksim.karevich

  • Comodo Member
  • **
  • Posts: 39
Re: False-Positive GameNet.ru launcher application #2
« Reply #13 on: November 04, 2015, 11:48:54 AM »
Hello, again.

Check our file one more time please and add him to your safe list.

Best regards, Maksim Karevich
Techical specialist GameNet team.

[attachment deleted by admin]

Offline FlorinG

  • Comodo Staff
  • Comodo's Hero
  • *****
  • Posts: 3547
Re: False-Positive GameNet.ru launcher application #2
« Reply #14 on: November 04, 2015, 11:53:15 AM »
Hello maksim.karevich,

The sample you have provided is not detected by CIS version 8.2.0.4703 with database version 23530.

Best regards,
FlorinG
If possible please post your malware submissions as SHA1 lists (created with HashMyFiles or any other software). Always make sure first you have submitted the samples through CIS or CIMA.

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek