False positives?

[rajahd]

My computer ran it’s weekly scan overnight and this morning I found a message from CAV:

Heur.Suspicious@105620382 E:\install\win2003ee\I386\LANG\IMSCINST.EX_|imscinst.exe
Heur.Suspicious@105620382 F:\WINDOWS\system32\dllcache\imscinst.exe

E: & F: are on a USB connected SATA drive which came out of a server whose motherboard fried and I am recovering the data. It’s very unlikely the server was infected with any viruses and the files in question are dated 3/25/2003. I ran an UltraCompare (IDM Computer Solutions) against the IMSCINST.EX_ on E: and the same file on the original Microsoft 2003 Enterprise Edition CD it was copied from - UltraCompare reported the files were identical.

[meidan]

@rajahd post:1

My computer ran it’s weekly scan overnight and this morning I found a message from CAV:

Heur.Suspicious[at]105620382 E:\install\win2003ee\I386\LANG\IMSCINST.EX_|imscinst.exe
Heur.Suspicious[at]105620382 F:\WINDOWS\system32\dllcache\imscinst.exe

E: & F: are on a USB connected SATA drive which came out of a server whose motherboard fried and I am recovering the data. It’s very unlikely the server was infected with any viruses and the files in question are dated 3/25/2003. I ran an UltraCompare (IDM Computer Solutions) against the IMSCINST.EX_ on E: and the same file on the original Microsoft 2003 Enterprise Edition CD it was copied from - UltraCompare reported the files were identical.

Hi rajahd,

When you encounter a False Positive (=FP) or a suspicious file please follow 1 of these 3 ways so it can be resolved as quickly as possible.
Thanks.

Kind Regards.
Erik M.

[meidan]

@rajahd post:1

My computer ran it’s weekly scan overnight and this morning I found a message from CAV:

Heur.Suspicious[at]105620382 E:\install\win2003ee\I386\LANG\IMSCINST.EX_|imscinst.exe
Heur.Suspicious[at]105620382 F:\WINDOWS\system32\dllcache\imscinst.exe

E: & F: are on a USB connected SATA drive which came out of a server whose motherboard fried and I am recovering the data. It’s very unlikely the server was infected with any viruses and the files in question are dated 3/25/2003. I ran an UltraCompare (IDM Computer Solutions) against the IMSCINST.EX_ on E: and the same file on the original Microsoft 2003 Enterprise Edition CD it was copied from - UltraCompare reported the files were identical.

Hi,

This is to inform you that reported false-positive with has been fixed.
You can update to AV database Version <6960> of Comodo Internet Security
Version<5.0.163652.1142> and confirm it.

Thanks.

Kind Regards,
Erik M.
Comodo AntiVirus Lab