Author Topic: Report False Positives for Valkyrie Service Here (Read 7127 times)

Siketa · « **Reply #15 on:** January 30, 2016, 08:58:05 AM »

They have very low VT detection ratio by few engines known for FPs (F-Prot, Zillya...).

yigido · « **Reply #16 on:** February 05, 2016, 08:58:01 AM »

Trusted Trojan Sample
https://valkyrie.comodo.com/get_info?sha1=817eace620e228c2b961d50853234f2f261f48fe

morphiusz · « **Reply #17 on:** February 05, 2016, 09:59:18 AM »

Quote from: yigido on February 05, 2016, 08:58:01 AM

Trusted Trojan Sample
https://valkyrie.comodo.com/get_info?sha1=817eace620e228c2b961d50853234f2f261f48fe

It looks like it has correct and verified digital signature.
Or a bug -> https://forums.comodo.com/comodo-valkyrie-fls/report-problems-with-valkyrie-file-verdict-service-t79618.0.html;msg828840#msg828840

yigido · « **Reply #18 on:** February 05, 2016, 10:07:37 AM »

Quote from: morphiusz on February 05, 2016, 09:59:18 AM

It looks like it has correct and verified digital signature.
Or a bug -> https://forums.comodo.com/comodo-valkyrie-fls/report-problems-with-valkyrie-file-verdict-service-t79618.0.html;msg828840#msg828840

I sent it to manual analysis, they fixed the "Safe" verdict.

fatih.orhan · « **Reply #19 on:** February 05, 2016, 10:18:05 AM »

Quote from: yigido on February 05, 2016, 08:58:01 AM

Trusted Trojan Sample
https://valkyrie.comodo.com/get_info?sha1=817eace620e228c2b961d50853234f2f261f48fe

This is a file which has stolen certificate. It should be validated by Valkyrie. The case was known to us, and it is already fixed, it will be available with next update.

The vendor is trusted.

yigido · « **Reply #20 on:** February 05, 2016, 10:21:31 AM »

Quote from: fatih.orhan on February 05, 2016, 10:18:05 AM

This is a file which has stolen certificate. It should be validated by Valkyrie. The case was known to us, and it is already fixed, it will be available with next update.

The vendor is trusted.

Actually, I am seeing no certificate on VT result and on file. Whats the vendor?

fatih.orhan · « **Reply #21 on:** February 15, 2016, 08:26:56 AM »

Quote from: yigido on February 05, 2016, 10:21:31 AM

Actually, I am seeing no certificate on VT result and on file. Whats the vendor?

The certificate is invalid. That's why some Windows versions display it as invalid, some doesn't display at all. Please check the image

[attachment deleted by admin]