Comodo isn't detecting malware even though it says Comodo has on VT and Virscan.

Comodo Internet Security - CIS News / Announcements / Feedback - CIS
1

I downloaded it to my sandboxie and Comodo is just silent on it. I even right clicked and scanned the exe. Nothing. Why is this happening? I have the AV set to On Access. Heuristics on medium.

2

Can you please post the VT link and check your D+ Trusted Files list to see if it is on there?

3

VirusTotal and I checked and it is in the trusted files list. Odd

4

Thank you for reporting this.

Could you please post the VT link and the name of the program in the Report trusted and whitelisted malware here-2012 (NO LIVE MALWARE!) topic? That way Comodo can fix this.

5

Thanks it got detected when I downloaded it just now. :slight_smile:

6

I guess the cloud did its thing.

7

File isn’t being detected anymore. I uploaded it again to VT and its only detected by 2 programs. Last time it was 10… ???

8

yes it is now by 11, its called installcore VirusTotal

9

I tried downloading it again and nothing on my part. ???

10

send me the link

11

Try clearing your trusted files list and then see if it’s detected.

12

we figured it out, it’s a different file now (different hash), they are repackaging it to avoid detection.

13

Sneaky. Is there any type of signature you can use to keep up with them?

14

I believe, at least with Comodo, this means that while it may not get detected when downloading or sitting on the computer, it would get detected when it tried to run. The reason for this is that before running in the memory it would have to unpack itself. Then it would be caught.

Someone please correct me if I’m wrong.

15

0d6d3.pdf
TestSignature.JS.Pdfka.FBQ

comodo does not quarantine the file in my PC

16

Is the file digitally signed?

Also, did you try reporting it here?

Thanks.

17

This is not a trusted malware.