false positives?

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
1

8/3/2009 5:05:07 AM Detect F:\FirefoxPortable.exe UnclassifiedMalware@27205243 Success
8/3/2009 5:05:07 AM Detect F:\Recycled.exe UnclassifiedMalware@27205243 Success
8/3/2009 5:05:07 AM Detect F:\Recycle.exe UnclassifiedMalware@27205243 Success
8/3/2009 5:05:16 AM Ignore F:\FirefoxPortable.exe UnclassifiedMalware@27205243 Success
8/5/2009 8:54:26 AM Detect F:\FirefoxPortable.exe UnclassifiedMalware@27205243 Success
8/5/2009 8:54:26 AM Detect F:\Recycle.exe UnclassifiedMalware@27205243 Success
8/5/2009 8:54:26 AM Detect F:\Recycled.exe UnclassifiedMalware@27205243 Success
8/5/2009 8:54:57 AM Ignore F:\FirefoxPortable.exe UnclassifiedMalware@27205243 Success
8/6/2009 6:53:44 AM Detect F:\FirefoxPortable.exe UnclassifiedMalware@27205243 Success
8/6/2009 6:53:44 AM Detect F:\Recycle.exe UnclassifiedMalware@27205243 Success
8/6/2009 6:53:44 AM Detect F:\Recycled.exe UnclassifiedMalware@27205243 Success
8/6/2009 6:53:49 AM Ignore F:\FirefoxPortable.exe UnclassifiedMalware@27205243 Success
8/9/2009 7:16:27 PM Detect F:\Recycle.exe UnclassifiedMalware@27205243 Success
8/9/2009 7:16:27 PM Detect F:\FirefoxPortable.exe UnclassifiedMalware@27205243 Success
8/9/2009 7:16:27 PM Detect F:\Recycled.exe UnclassifiedMalware@27205243 Success
8/9/2009 7:16:42 PM Ignore F:\Recycle.exe UnclassifiedMalware@27205243 Success
8/16/2009 8:16:39 AM Detect C:\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\BIT34FD.tmp Heur.Suspicious@38787095 Success
8/16/2009 8:38:27 AM Detect C:\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\BIT337A.tmp Heur.Suspicious@38787095 Success
8/16/2009 8:38:37 AM Ignore C:\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\BIT337A.tmp Heur.Suspicious@38787095 Success
8/16/2009 8:40:28 AM Detect C:\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\BIT337A.tmp Heur.Suspicious@38787095 Success
8/16/2009 8:53:02 AM Detect C:\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\BIT8777.tmp Heur.Suspicious@38787095 Success
8/16/2009 8:54:11 AM Ignore C:\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\BIT8777.tmp Heur.Suspicious@38787095 Success
8/16/2009 8:54:11 AM Detect C:\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\BIT8777.tmp Heur.Suspicious@38787095 Success
8/16/2009 8:54:14 AM Ignore C:\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\BIT8777.tmp Heur.Suspicious@38787095 Success
8/16/2009 8:54:14 AM Detect C:\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\BIT8777.tmp Heur.Suspicious@38787095 Success
8/16/2009 8:54:25 AM Ignore C:\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\BIT8777.tmp Heur.Suspicious@38787095 Success
8/16/2009 8:54:25 AM Detect C:\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\5c7ebc97f2676a098764a4c710e83d9c733bb92c Heur.Suspicious@38787095 Success
8/16/2009 8:54:30 AM Ignore C:\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\5c7ebc97f2676a098764a4c710e83d9c733bb92c Heur.Suspicious@38787095 Success
8/16/2009 8:54:30 AM Detect C:\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\5c7ebc97f2676a098764a4c710e83d9c733bb92c Heur.Suspicious@38787095 Success
8/16/2009 8:54:45 AM Ignore C:\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\5c7ebc97f2676a098764a4c710e83d9c733bb92c Heur.Suspicious@38787095 Success
8/16/2009 8:54:45 AM Detect C:\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\5c7ebc97f2676a098764a4c710e83d9c733bb92c Heur.Suspicious@38787095 Success
8/16/2009 8:54:51 AM Ignore C:\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\5c7ebc97f2676a098764a4c710e83d9c733bb92c Heur.Suspicious@38787095 Success
8/16/2009 8:54:51 AM Detect C:\Windows\SoftwareDistribution\Download\5c7ebc97f2676a098764a4c710e83d9c733bb92c Heur.Suspicious@38787095 Success
8/16/2009 8:54:55 AM Ignore C:\Windows\SoftwareDistribution\Download\5c7ebc97f2676a098764a4c710e83d9c733bb92c Heur.Suspicious@38787095 Success
8/16/2009 8:55:18 AM Detect C:\Windows\SoftwareDistribution\Download\5c7ebc97f2676a098764a4c710e83d9c733bb92c Heur.Suspicious@38787095 Success
8/16/2009 8:55:21 AM Ignore C:\Windows\SoftwareDistribution\Download\5c7ebc97f2676a098764a4c710e83d9c733bb92c Heur.Suspicious@38787095 Success
8/16/2009 8:55:21 AM Detect C:\Windows\SoftwareDistribution\Download\5c7ebc97f2676a098764a4c710e83d9c733bb92c Heur.Suspicious@38787095 Success
8/16/2009 8:55:24 AM Ignore C:\Windows\SoftwareDistribution\Download\5c7ebc97f2676a098764a4c710e83d9c733bb92c Heur.Suspicious@38787095 Success
8/16/2009 8:55:25 AM Detect C:\Windows\SoftwareDistribution\Download\Install\mpas-fe_bd.exe Heur.Suspicious@38787095 Success
8/16/2009 8:55:29 AM Ignore C:\Windows\SoftwareDistribution\Download\Install\mpas-fe_bd.exe Heur.Suspicious@38787095 Success
8/16/2009 9:44:37 PM Detect \Device\HarddiskVolumeShadowCopy6\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\BIT34FD.tmp Heur.Suspicious@38787095 Success
8/16/2009 9:44:37 PM Detect \Device\HarddiskVolumeShadowCopy6\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\BIT337A.tmp Heur.Suspicious@38787095 Success
8/17/2009 5:21:57 AM Detect \Device\HarddiskVolumeShadowCopy5\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\BIT337A.tmp Heur.Suspicious@38787095 Success
8/17/2009 5:21:57 AM Detect \Device\HarddiskVolumeShadowCopy5\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\BIT34FD.tmp Heur.Suspicious@38787095 Success
8/17/2009 11:29:30 AM Detect C:\Users\Jon\Jons files\1. Business\Work\manuals\rov info\Useful software\Wordweb for MS Word XP\wordweb.exe UnclassifiedMalware@8300320 Success
8/17/2009 11:34:41 AM Detect C:\Users\Jon\Jons files\vista progs\games\Chicken Invaders 3 ChristmasEdition\makeDesktopIcon.exe TrojWare.Win32.TrojanDropper.Agent.~JSA@29737497 Success
8/17/2009 2:08:21 PM Quarantine C:\Users\Jon\Jons files\1. Business\Work\manuals\rov info\Useful software\Wordweb for MS Word XP\wordweb.exe UnclassifiedMalware@8300320 Success
8/17/2009 2:08:21 PM Quarantine C:\Users\Jon\Jons files\vista progs\games\Chicken Invaders 3 ChristmasEdition\makeDesktopIcon.exe TrojWare.Win32.TrojanDropper.Agent.~JSA@29737497 Success
8/18/2009 7:40:26 AM Detect \Device\HarddiskVolumeShadowCopy5\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\BIT337A.tmp Heur.Suspicious@38787095 Success
8/18/2009 7:40:27 AM Detect \Device\HarddiskVolumeShadowCopy5\Windows\SoftwareDistribution\Download\3025ffaab71569e02f375871c7fa4baa\BIT34FD.tmp Heur.Suspicious@38787095 Success

2

Hi 40apple40,

The reported false positives are being verified.

-Chandra Mohan

3

Hi 40apple40,

The following detections are not false positives.

TrojWare.Win32.TrojanDropper.Agent.~JSA[at]29737497
UnclassifiedMalware[at]27205243

Please be aware of that they are real malwares.
The other reported detections will be fixed in next updates.

Regards,
-Chandra Mohan

4

Have a look at this https://forums.comodo.com/leak_testingattacksvulnerability_research/what_is_mpasfebdexe-t25919.0.html;msg187348

5

Hi 40apple40,

The following false positives have been fixed in DB 2011.

UnclassifiedMalware[at]8300320
Heur.Suspicious[at]38787095

Regards,
-Chandra Mohan

6

thankyou. :slight_smile: