False positive: Kaspersky's tdsskiller.zip

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
1

tdsskiller.zip

erroneously flagged as:

Packed.Win32.MUPX.Gen@129019204

Kind regards, REBOL.

2

Hi,MorphOS REBOL

Thanks for reporting.
Could you please submit the detected file at
Comodo Firewall | Get Best Personal Firewall Software for $29.99 A Year.

Regards
Chunli.chen

3

http://media.kaspersky.com/utilities/VirusUtilities/EN/tdsskiller.zip

4

Hi malware1,

Thank you for reporting this.
We’ll check it and get back to you soon.

Regards,
Yuvaraj M

5

It seems that nobody wants to fix this false positive… The file on the server was changed, it seems that Kaspersky updated it.

I have reposted it here (the old file and the new one, both are detected): https://forums.comodo.com/av-false-positivenegative-detection-reporting/false-positives-t104158.0.html

6

Hello malware1,

This FP (SHA1:017b73a9411c70395c4d1052a444c883378d95d0 ) has been fixed with DB 18222.

Best regards,
FlorinG

7

CIS is detecting this (Packed.Win32.MUPX.Gen[at]129019204) here also. On this system, it resides in the C:\Windows\SoftwareDistribution\Download\etc… folder. The actual file in the folder is named (BITABDD.tmp). The Virustotal reports this to be a Portable executable win32.exe.

Virustotal report: VirusTotal

Valkyrie report: file too big / 33.4MB

8

Hello worldwidewiretap,

Thank you for reporting this, we’ll check it and get back to you.

Best regards,
FlorinG