False Positive ffmpg.exe in VOB2MPG

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
#1

Hello, every time I run VOB2MPG I get a cloud scanner alert. The file path is C:\Users\name\AppData\Local\Xenocode\ApplianceCaches%APPNAME%.EXE_v2AF6BACO\Native\STUBEXE[at]PROGRAMFILES[at]\BadgerIT\VOB2MPG v3\ffmpeg.exe

http://imageshack.us/a/img707/6625/comodocloude.png

I have also another question: Comodo cloud scanner is not listed in my programs list, how do I uninstall it?

#2

Comodo cloud scanner is part of Defense+ so if you have CFW installed with D+ enable then you’ll have the cloud scanner detection.

#3

Thank you spywar, but I have D+ disabled and yet cloud alerts still pop up. ???

#4

submit the virus total link of the detected file then analysts can remove the FP.

#5

Defense±>Defense+ Settings->Execution Control Settings, Uncheck “Perform Cloud based Behavior Analysis of Unrecognized Files”.

Antivirus->Scanner Settings->Manual Scanning, Uncheck “Enable Cloud Scanning”.

Antivirus->Scanner Settings->Scheduled Scanning, Uncheck “Enable Cloud Scanning”.

#6

Could you please tell me where I can find it?

Thank you L.A.R. Grizzly. Since I don’t have the antivirus part, I suppose disabling “Perform Cloud based Behavior Analysis of Unrecognized Files” from D+ should be enough.

#7

Please follow the path you provided in your first post and upload the file to VirusTotal:

Then post a link to the results in your next post.

#8

I have all of my Cloud Based settings unchecked and have never gotten a Cloud Alert. I hope it works for you.

#9

I uploaded it. This is the link: VirusTotal

#10

Hi hippiemaster ,

Thank you for reporting this.
We’ll check it and get back to you soon.

Best regards
Qiuhui.■■■■

#11

Hi hippiemaster ,

This is to inform you that false-positive has been fixed.
You can update to AV database Version <13649> of Comodo Internet Security Version<5.10.228257.2253> and confirm it.

Best regards
Qiuhui.■■■■

#12

I ran VOB2MPG again just now, but I get again the same message as in my first post, for the same file.

I’d like to add that I use comodo only as firewall with D+ disabled, so although I have the latest version, I am not sure about the database version.