False positive detection

Dear Comodo Team,

I’m the QA Manager at Exent Technologies LTD (www.exent.com). Our owned & operated games service is www.freeridegames.com (FRG).
FRG is a free games website which allows the consumer to play premium downloadable games for free, in return for his willingness to watch ads while playing these games.
The user is required to download and install our FRG games player which enables the serving of ads onto the premium downloadable games. Serving these ads allows us to offer those downloadable games, that otherwise would require the user to pay for them, totally for free.
The Free Ride Games service is operating since 2008 and is currently serving tens of thousands of happy customers mainly in North America.

We have just learned that starting today (12/3) Downloading our application and executing it causes it to stop if the Comodo Internet Security Complete 10 is installed (Your Software Blocks ours as suspicious), this prevents our users from running the game in our service.
Users that install our FRG games player and play our games consent to our EULA (Free Games - Download Free Games at FreeRide Games). Section 7 of the EULA contains explicit consent by our users to be watching ads in return for their ability to play the games.

We are awaiting your swift resolution to this issue, as this false positive alert is causing inconvenience to our users, severe damages to our reputation and significant monetary damages to us.

Feel free to contact me by email (msyvash@exent.com) any time if you have any questions relating this issue.

Best regards
Max Syvash
QA Manager
Exent Technologies LTD

Hello,
Thanks for your submission. We’ll check this matter and get back to you soon.

Best regards,
Andrei Savin

Hi
Thanks, I’m wainting

Hi,
This is to inform you that the false-positive you have submitted has been fixed.
Please update your AV database to version <28668> and confirm.

Best regards,
Andrei Savin

Hi,
I’ve update AV to latest databases, but I’m still getting a message that the game was blocked by Comodo Containment

Hi smax,

Thank you for reporting this.
We’ll check them and get back to you soon.

Regards,
Aravindhraj J

Hi,
This is to inform you that the false-positive you have submitted has been fixed.
Please update your AV database to version <28673> and confirm.

Best regards,
Andrei Savin

Hi,
Do you have any updates? I’m still waiting for your answer.

Hi,
Please update to latest database version and confirm.

Hi,
I’ve updated AV databases to latest version <28678> and i have the same results that the game was blocked by Comodo Containment.

Hi smax,

Can you please open Comodo Internet Security and go to Settings → File Rating → File list, remove all files that are related to your application from the list, hit OK and check again if the issue is still present?

Thank you!

Regards,
Ionel

Hi Ionel,
I did all of these steps that you wrote, but this issue is still present and when installing the game I’m getting message from Comodo containment that our application is not whitelisted by Comodo.

Hi smax!

The contained files are the exact same you reported to us in your first post? If not, please attach the exact same ones that are getting contained and we’ll verify.

Thanks,
Ionel

You need to submit your company to be added to the trusted vendors list using this form here. The original issue of the applications being detected by the AV is fixed and the issue you are having now is about having applications signed by the Exent digital signature to be automatically trusted so as not to be blocked by auto-containment, HIPS, or firewall components of CIS.

Hi smax,
The behavior you are seeing is not expected.

Please provide following data:
1.
You can find following file:
C:\ProgramData\Comodo\Firewall Pro\cislogs.sdb

and share with us.

Please go to “CIS–>Settings–>General Settings → Configuration” section and export active configuration and share with us.

Thanks
-umesh

Hi Comodo team.
I submitted company Exent Technologies LTD to trusted vendors list using this form Comodo Firewall | Get Best Personal Firewall Software for $29.99 A Year.
When can I get your answer?
Thanks

Hi smax,

The submitted vendor is already present in our cloud based whitelisting database (we found only “Exent Technologies Ltd.” as a valid signer, can you please provide download links for files signed by “Exent Technologies LTD” ?)

Thanks,
Bogdan

Hi Comodo team.
Antivirus is still blocking our games. I’ve submitted download links for file signed by “Exent Technologies LTD”

Hi smax,

Thank you for reporting this.
We’ll check them and get back to you soon.

Regards,
Aravindhraj J

This is what we see for provided download (we saw no files signed by “Exent Technologies LTD” ) :

Path Verified Publisher
temp folder
c:\users\user\appdata\local\temp\nswF9ED.tmp - Copy\System.dll Unsigned n/a
c:\users\user\appdata\local\temp\pft47FF.tmp - Copy\ExentCtl.ocx Signed Exent Technologies Ltd.
c:\users\user\appdata\local\temp\pft47FF.tmp - Copy\exs.dll Signed Exent Technologies Ltd.
c:\users\user\appdata\local\temp\pft47FF.tmp - Copy\Setup.exe Signed Exent Technologies Ltd.
c:\users\user\appdata\local\temp\SDM143 - Copy\cmhelper.exe Signed Exent Technologies Ltd.
c:\users\user\appdata\local\temp\SDM143 - Copy\ExentCtlInstaller.dll Unsigned n/a
c:\users\user\appdata\local\temp\SDM143 - Copy\Free Ride Games.exe Signed Exent Technologies Ltd.
c:\users\user\appdata\local\temp\SDM143 - Copy\resourceDll.dll Signed Exent Technologies Ltd.
c:\users\user\appdata\local\temp\SDM143 - Copy\Splasher.dll Unsigned n/a

download folder
c:\users\user\downloads\Luxor.exe Signed Exent Technologies Ltd.

installation folder
c:\program files (x86)\free ride games\AppLoader2KEx.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\AX32.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\cmhelper.exe Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\CrashDump.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\d3dx9_32.dll Unsigned n/a
c:\program files (x86)\free ride games\DoDlg.exe Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\exs.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\GameInst.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\GameLauncher.exe Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\glutil.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\GPlayer.exe Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\GPlrLanc.exe Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\GUpdater.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\GUpdater.exe Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\npExentCtl.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\npGameTreatWidget.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\Report.exe Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\Uninstall.exe Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\wh_Pr143.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\X4Ex_Pr143.sys Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\X4HSEx_Pr143.sys Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\X5Ex_Pr143.sys Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\X5XSEx_Pr143.sys Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\X6Ex_Pr143.sys Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\X6XSEx_Pr143.sys Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\X7Ex_Pr143.sys Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\X7XSEx_Pr143.sys Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\X8Ex_Pr143.sys Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\X8XSEx_Pr143.sys Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\IGL\13000049\Angie15.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\IGL\13000049\Broad.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\IGL\13000049\cm.exe Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\IGL\13000049\CM15.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\IGL\13000049\CrashDump.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\IGL\13000049\d3d8.elf Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\IGL\13000049\d3d9.elf Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\IGL\13000049\ddraw.elf Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\IGL\13000049\Minx.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\IGL\13000049\RunDllEx2.exe Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\IGL\13000049\Widget.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\IGL\13000049\cef\cef_helper.exe Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\IGL\13000049\cef\chrome_elf.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\IGL\13000049\cef\d3dcompiler_47.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\IGL\13000049\cef\libcef.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\IGL\13000049\cef\swiftshader\libEGL.dll Signed Exent Technologies Ltd.
c:\program files (x86)\free ride games\IGL\13000049\cef\swiftshader\libGLESv2.dll Signed Exent Technologies Ltd.