Comodo Antivirus found on my laptop Threat !

Learn about Computer Security Virus/Malware Removal Assistance
#1

??? I need help how to clean this threat; Heur.Corrupt .PE@-1
C:/Windows\System32\mfc45.dll

I tried many times ,but it did not work at all ,every next scan appear again over and over.

Thanks

#2

Could you please upload the file to VirusTotal, and report back with a link :slight_smile:
So we can make sure that this is not a FP

Thanks
JAke

#3

??? I don’t know what you means ,I’m sorry I’m a beginner in this :embarassed:

#4

Hi fab777,

What Jacob is saying is for you to use this link (Virus total) http://www.virustotal.com/index.html , upload your file (the file that was detected by the antivirus), and post the link from VT here with the results.
FP means False Positive, witch is when an antivirus detects a file as a virus, but it is not (basically is a mistake).

#5

Hello,

I didn’t know if I had to start a new subject since I’ve got the same virus alert.

After an analysis of my computer, a threat with the name of Heur.Corrupt.PE@-1 was found by Comodo Antivirus.

The file is : AxInterop.WMPLib.dll.bak
It’s located at the path : C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\Backup\DSLUpdate

Here’s the link from VirusTotal :
http://www.virustotal.com/file-scan/report.html?id=b6390fdaeb902500c64c91984227f24c19620b11c5ea70f6ca4583bcd1ab477c-1301299825

Please tell me if it is a real threat or if, as I think, it’s a false positive.

Thank you!

#6

It could be a false positive. Can you upload the file to the new Valkyrie test service and post the url to its results?

#7

I Guess The Files Are From BigFishGames.com After I Installed A Couple Of Games.

http://valkyrie.comodo.com/Result.aspx?sha1=8BC7AF56D270CA7D65855AE4D3A03B466F1A565B&&query=0&&filename=downloadtest_F1331T1L1.bin

http://valkyrie.comodo.com/Result.aspx?sha1=D3CCED121F55A4A765DC616F1745D54D495E2FA6&&query=0&&filename=downloadtest_F2002T1L1.bin

#8

It could be a false positive. Please submit the file in the f/p board following How to report False Positives - Please read this before submitting !.

#9

Oops! I Thought That’s What I Already Did With The Valkyrie Page
Sorry. COMODO Cleaned It I Figured There Was No Harm In Letting COMODO Delete Them Since The Games Weren’t Working Anyways.

#10

I am showing this same corruption of the mfc45.dll file on 4 different machines. Two of them run Windows 7 64 bit & two run Windows XP 32 bit. The only software common to the 4 are Mozilla’s Firefox & Thunderbird (different versions), Iola’s latest version of System Mechanic and Comodo’s Internet Security. If I delete the corrupted file, it returns when I reboot the system. the Valkyrie site shows https://valkyrie.comodo.com/Result.aspx?sha1=a8f0607d3adc541476f1b8157b18561bfdd2be8a&&&query=0&filename=mfc45.dll