Comodo Internet Security - FP Heur.Suspicious@50656022

Last things i have installed are Broken Sword II and Broken Sword: The sleeping dragon. Both thru Valves Steam.

I can’t access to folder where the detected file is. I’m useing Windows XP Home Fi, how do i access to this file?

File is: C:\System Volume Information_restore{0EA56EAC-C4B9-46C9-BE03-484FC302F6D9}\RP12\A0001335.exe

And name is Heur.Suspicious@50656022

There is also second file detected
File is: C:\System Volume Information_restore{0EA56EAC-C4B9-46C9-BE03-484FC302F6D9}\RP19\A0006059.exe

And name is Heur.Suspicious@94838738

Are these false positives, or real threats?

If CIS database number is same as Virustunnisteiden versio, then it is 3794

Access the System Volume Information folder:

Windows XP using the NTFS File System.

  1. Click Start, and then click My Computer.
  2. On the Tools menu, click Folder Options.
  3. On the View tab, click Show hidden files and folders.
  4. Clear the Hide protected operating system files (Recommended) check box. Click Yes when you are prompted to confirm the change.
  5. Clear the Use simple file sharing (Recommended) check box.
  6. Click OK.
  7. Right-click the System Volume Information folder in the root folder, and then click Properties.
  8. Click the Security tab.
  9. Click Add, and then type the name of the user to whom you want to give access to the folder. Typically, this is the account with which you are logged on. Click OK, and then click OK again.
  10. Double-click the System Volume Information folder in the root folder to
    open it.

NOTE: The System Volume Information folder is now accessible in normal mode to users of Windows XP.

Sorry but i’m useing Windows XP home, and this doesn’t work on home edition.

Hi maturu,

We will verify this detection and get back to you after reaching a conclusion.

Regards,
Ionel

Sorry it didn’t work. I’m using Pro. It seems that you will need the “Calcs” tool for the Home Edition. It’s at the lower portion of this first page:

http://support.microsoft.com/kb/309531

http://support.microsoft.com/kb/318754

Hi maturu,

This FP has been fixed.Please check in virus signature database 3799.

Thanks and Regards,
hailong.■■■■