CIS And CIMA Detect Comodo KillSwitch As Heur.Suspicious[at]172028030 :D

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
#1

CIS And CIMA Detect Comodo KillSwitch As Heur.Suspicious[at]172028030 :smiley:

CIS Version: 5.3.181415.1237

CIS Database: 7983

Heuristics High, Cloud Scanning Enabled, Rootkit Scanning Enabled, Submit Unknown Files Enabled, Automatically Quarantine Enabled.

File name: KillSwitch.exe

Submission date: 2011-03-15 00:58:26 (UTC)

Result: 1/ 43 (2.3%)

Additional information

MD5 : 3f312d5405fa0e9b27ef0551e4011721

SHA1 : f8ce5ee4ca7ff6a80e30784976b66be365f8ad75

SHA256: a0a96a1c688dbe9449425bf9eb99c5d7dd768bebc2dcb37c1dc5bdc90e713482

http://www.virustotal.com/file-scan/report.html?id=a0a96a1c688dbe9449425bf9eb99c5d7dd768bebc2dcb37c1dc5bdc90e713482-1300150706

http://camas.comodo.com/cgi-bin/submit?file=a0a96a1c688dbe9449425bf9eb99c5d7dd768bebc2dcb37c1dc5bdc90e713482

https://www.microsoft.com/security/portal/Submission/SubmissionHistory.aspx?SubmissionId=a1561b77-ac56-4b47-bc6f-b6f6c347b865&n=1

http://analysis.avira.com/samples/details.php?uniqueid=ATzHFSvKW5W00qEVEqSWmfbKJfUKBGGY&incidentid=703581

Also, I think CIS still does not alert me when something has been Automatically Quarantined, I had this problem in the last two versions or so; I could be wrong, but I think that this problem is still there in the latest version. :wink:

Thank you,
-John Jr :slight_smile:

[attachment deleted by admin]

#2

Hi goodjohnjr,
We are going to have a look at it and will get back to you after investigation.
Thanks and Regards,
Lin mengze

#3

You are welcome and thank you. :slight_smile:

#4

Hi goodjohnjr,

This FP has been fixed.You can confirm this with DB 7987.

Regards,
Haja

#5

Thank you. :slight_smile: