Ad-Aware detected as Backdoor.Win32.Evilbot.SJ

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
1

Greetings,

I believe that CCE is false detecting ad-aware as malware. Here is the log:

====== System Information ======
Computer Name: XXXXXX
Log on User: XXXXXX
Memory Size: 15.93 GB.
Windows Directory: C:\Windows
Windows Version: 7 (64bit)
CCE Version: 2.4.225190.192

Virus database version: 11582

[20:55:06] Scan started.

====== Cleanup results ======
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe Backdoor.Win32.Evilbot.SJ[at]29502336 MEMORY Ignore OK
HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Lavasoft Ad-Aware Service Backdoor.Win32.Evilbot.SJ[at]29502336 AUTORUN Ignore OK
Global UAC SYSCHANGE Ignore OK

Can you help me on this please?

I got the Ad-Aware free from:
http://free.lavasoft.com/products.aspx

I have included the zipped version of AAWService.exe

[attachment deleted by admin]

2

Hi,

Thanks for reporting. We’ll check this and get back to you soon.

Regards,
Selvalakshmi

3

Hi unaligned,

This is to inform you that we have scanned AAWService.exe (SHA1: de0f0048705694c55d7d05d1575b25086832afbd) with latest antivirus database version 11594 of Comodo Cleaning Essentials Version 2.4.225190.192 and have not found this file being detected.

Please check again in DB 11594. If the problem persists please let us know.

Regards,
Selvalakshmi

4

I just scanned again, and it is still detecting it as Backdoor.Win32.Evilbot.SJ@29502336.

5

Hi unaligned,

Reported FP has been fixed in DB 11611. Please update and confirm it.

Regards,
Selvalakshmi

6

Version 11625 is no longer detecting it as EvilBot… it is now something else. Log:

====== System Information ======
Computer Name: XXXXXX
Log on User: XXXXXX
Memory Size: 15.93 GB.
Windows Directory: C:\Windows
Windows Version: 7 (64bit)
CCE Version: 2.4.225190.192

Virus database version: 11625

[09:33:58] Scan started.

====== Cleanup results ======
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe TrojWare.Win32.Downloader.Agent.SSW@34450611 MEMORY Ignore OK

HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Lavasoft Ad-Aware Service TrojWare.Win32.Downloader.Agent.SSW@34450611 AUTORUN Ignore OK

Global UAC SYSCHANGE Ignore OK

7

Hi,

Please, send this file to us using WebInterface, and it will be resolved as quickly as possible.
Thanks.

Kind Regards.
Erik M.