AV false positive?

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
#1

I just ran Comodo Antivirus on-demand with Heuristics on High and it found this (please see attached file).

I’m guessing Indiv07.key, IndivBox.key are legitimate system components? If so, this must be a false positive?

Thanks.

EDIT: by the way, the attached file is a log of the antivirus post-scanning. It’s not the false positive files in question (which I think are Registry files).

[attachment deleted by admin]

#2

Thanks for the PM’s so far. Unfortunately I do not know how to send the files as I cannot find them when I navigate to the appropriate folder.

C:\Documents and Settings\All Users\DRM\Cache\Indiv07.key
C:\Documents and Settings\All Users\DRM\IndivBox.key

Anyone have any idea how I can find these files? They sound like Registry files to me? Thanks.

#3

Hi,
I hope this may help you to get the file. Please try the following.
1.Open command prompt
2.Type cd C:\Documents and Settings\All Users\DRM\ and hit 'enter
3.Type attrib and hit ‘enter’
4.Make sure it lists the file IndivBox.key

If the attrib command list the file(IndivBox.key) then please try disabling the ‘Hide Protected operating system files’ option under Folder options and then look for the files.
(Snapshot attached for your reference)

(Revert back the changes you’ve made under folder options)
Regards,
Vicky.

[attachment deleted by admin]

#4

Thanks very much!