Detection with CAV fails

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
#1

Hi,

thanks for adding a signature for the following files!

But in my experience and this combination, this is a rarely occurring phenomenon …

File detection with VT and Valkyrie = OK
File detection with CAV = FAILS

The FLS ratings are defined as “unknown”.

I ask you to check this and I would also like to give feedback as soon as a detection with CIS Version.12.0.0.6818 takes place. :P0l

p.s. At the time of this post, the last two or three update intervals have already been called up!

Kind Regards!
pio

#2

I have to correct myself regarding 2 files!!!

So these are the remaining files that what I said apply to:

Adware.PUA.AnonymizerGadget

Valkyrie Verdict

VirusTotal

Adware.PUA.WebDiscover

Valkyrie Verdict

VirusTotal

PUA.Variant.InstallCore

Valkyrie Verdict

VirusTotal

I apologize for any unnecessary effort!!! :a0

Best Regards!
pio

#3

Hi pio,

Can you open CIS, go to Settings>Antivirus>Scans, go to each defined scan from Scans list, set the “Limit maximum file size to” to a value larger than eg.1024MB and check again?

Thanks and regards,
Ionel

#4

Hi Ionel,

I tested that with “1025MB”, but unfortunately ended up with the same negative result.

Kind Regards!
pio

#5

This File is NOW successfully detected with CAV. FLS rating is NOWdefined as malicious!

Valkyrie Verdict

VirusTotal

For this flie FLS rating is NOW defined as Trusted from Comodo > Detection = FAILS

Valkyrie Verdict

VirusTotal

The following strange behavior can be observed with this file. If I manually scan the whole folder in which the file is located, then I have NO recognition. But if I am in the folder and mark the file with the mouse, then the recognition is successful. A behavior that I have never seen before. :o FLS rating is STILL defined as Unknown!

Valkyrie Verdict

VirusTotal

#6

Hi pio,

Can you check again and tell us if issue is fixed for this one as well?

We’re investigating the issue, we’ll get back to you.

Thanks and regards,
Ionel

#7

Hi Ionel,

First I have to manually set the user rating to “Unknown” so that it can be recognized. Comodo FLS rating is still defined as “Trusted”.

Best Regards!
pio