I am trying to find out if ‘Backdoor.Win32.Prosti.~N5@42653872’ that Comodo keeps finding and quarantining is a real threat, or a false positive?
Comodo states that the file is located in IOBit Security\is360srv.exe. (Comodo reported and quarantined the file on the 12th & 14th Feb and also today)
I have looked for the rejoice.dll file which apparantly should exist if the threat is real, but its not on my PC.
Also, If a file is quarantined, how can the same file keep being active a few days later on?
Someone from the AV labs will post in your thread that they’ll investigate if it’s malware.
And they will report back (normally within a few hours/day) if it’s FP or not and if they fixed it in version X of the DB.
I have IO Bit Security and I got exactly the same thing. Comodo said it hadn’t found any threats but put Backdoor Win 32. Prosti in the log and said it had quarantined it but when I looked there was nothing in the quarantine. I had to uninstall the IO Bit hopefully that’s got rid of it