DEPLOY.CAB|factory.exe - FP

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
#1

DEPLOY.CAB|factory.exe is detected as SUSPICIOUS.

Name of detection: Suspicious@#1tdr7lmuwp09d (Malware:Heur.Suspicious)
CIS database: 11488

https://valkyrie.comodo.com/Result.html?sha1=a2cf027736de0bea0e9d428b50ac105830a44cc5&&query=0&&filename=DEPLOY.CAB

#2

Hi w-e-v,

Thank you for your submission. We’ll check it and get back to you soon.

Kind Regards,
Erik M.

#3

Hi,

This is to inform you that false-positive has been fixed.
You can update to AV database Version <11493> of Comodo Internet Security
Version<5.9.219863.2196> and confirm it.

Thanks.

Kind Regards,
Erik M.

#4

Thank you! :-TU

#5

I get the same scan result:

Suspicious[at]#19tu3ij5vplgs
C:\DISTRIB\WINDOWSXPSP2B.RUS\SUPPORT\TOOLS\DEPLOY.CAB|factory.exe

CIS database: 11924

#6

Hi vadimsob,

Thanks for reporting. We’ll Check this.

Regards,
RaviKant

#7

Hi,vadimsob

This is to inform you that false-positive with
(SHA1: <95f40a6979fc346dcd9d2b3ba86f60a4402ef516>)
has been fixed.
You can update to AV database Version <11932> of Comodo Internet Security Version<5.10.228257.2253> and confirm it.

Regards,
Chunli.chen
Comodo AntiVirus Lab

#8

Thank you, now it isn’t this message appears. But what it was? Why Comodo reported about this Microsoft’s file?