Author Topic: Windows Defender detects Comodo as malware/PUA even with PUA turned off.  (Read 494 times)

Offline andrew_nz

  • Newbie
  • *
  • Posts: 4
As above. Windows Defender Antivirus detects Comodo CIS setup as malware/PUA even with the potentially unwanted program detection turned off.

C:\Users\username\AppData\Local\Temp\fusion.dll

https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?name=PUABundler%3aWin32%2fFusionCore&threatid=311944



I understand several AVs detect this , I just thought it was good to let you know this setup also detects it, in my experience this setup has the least false positives and detects the least potentially unwanted programs, grayware , adware etc.

Yet it still detects and blocks fusion.dll from the CIS installer. I got the installer from Comodo.com.

« Last Edit: October 20, 2021, 09:14:29 PM by andrew_nz »

Offline comblaster

  • Comodo Family Member
  • ***
  • Posts: 51
Re: Windows Defender detects Comodo as malware/PUA even with PUA turned off.
« Reply #1 on: October 20, 2021, 10:13:19 PM »
fusion.dll is a remnant of a real PUA that was once embedded and offered by Comodo. It still has not cleanly removed from the installer even though Comodo no longer offers that PUA during the installation process.
This has been reported multiple times in this forums but unfortunately no corrective measure has been taken. It is sadly what it is.

Offline andrew_nz

  • Newbie
  • *
  • Posts: 4
Re: Windows Defender detects Comodo as malware/PUA even with PUA turned off.
« Reply #2 on: October 21, 2021, 04:03:41 PM »
fusion.dll is a remnant of a real PUA that was once embedded and offered by Comodo. It still has not cleanly removed from the installer even though Comodo no longer offers that PUA during the installation process.
This has been reported multiple times in this forums but unfortunately no corrective measure has been taken. It is sadly what it is.
Thanks for the reply, just good to have it on record that the default windows AV detects it even with PUA detection off.

Offline C.O.M.O.D.O RT

  • Comodo Staff
  • Moderator
  • Comodo's Hero
  • *****
  • Posts: 922
Re: Windows Defender detects Comodo as malware/PUA even with PUA turned off.
« Reply #3 on: October 24, 2021, 02:54:00 AM »
As above. Windows Defender Antivirus detects Comodo CIS setup as malware/PUA even with the potentially unwanted program detection turned off.

C:\Users\username\AppData\Local\Temp\fusion.dll

https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?name=PUABundler%3aWin32%2fFusionCore&threatid=311944



I understand several AVs detect this , I just thought it was good to let you know this setup also detects it, in my experience this setup has the least false positives and detects the least potentially unwanted programs, grayware , adware etc.

Yet it still detects and blocks fusion.dll from the CIS installer. I got the installer from Comodo.com.

Hi andrew_nz,

Thank you for reporting, May i know your win version & system type(32bit/64bit) ?

Thanks
C.O.M.O.D.O RT

Offline andrew_nz

  • Newbie
  • *
  • Posts: 4
Re: Windows Defender detects Comodo as malware/PUA even with PUA turned off.
« Reply #4 on: October 24, 2021, 05:35:49 PM »
Hi andrew_nz,

Thank you for reporting, May i know your win version & system type(32bit/64bit) ?

Thanks
C.O.M.O.D.O RT

Windows 10 Professional , 64bit

I assume it's detected by everyone with the latest Defender definitions, but my Windows version is 10.0.19043 Build 19043.

Offline C.O.M.O.D.O RT

  • Comodo Staff
  • Moderator
  • Comodo's Hero
  • *****
  • Posts: 922
Re: Windows Defender detects Comodo as malware/PUA even with PUA turned off.
« Reply #5 on: October 25, 2021, 07:23:56 AM »
Windows 10 Professional , 64bit

I assume it's detected by everyone with the latest Defender definitions, but my Windows version is 10.0.19043 Build 19043.
Hi andrew_nz,

Thanks for providing the information, we will reach you through private message to get required log for further investigation.

Thanks
C.O.M.O.D.O RT

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek