[FIXED] False positive - MS Outlook Express

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
1

Hi,

Comodo CIS 3.9.95478.509
VSDB version 1350
Heuristic level HIGH
Real time scanner ON ACCESS
On Windows XP Pro 32 SP3 French detects :

Heur.Suspicious.Attribs

in the attached file
(during manual scanning only)

Thanks

[attachment deleted by admin]

2

Hi Camille,

We are going to have a look at it and will get back to you after investigation.

Regards,
Erik M.

3

You guys should really test out the db’s before releasing it … 88) Outlook is a very common app…

4

Hi,

do you forgot me ? :-\

The FP is still not fixed with DB 1372.

5

Please bump Post here your unfixed FP’s (only after 2 days) .

6

???

https://forums.comodo.com/false_positivenegative_reporting_is_this_a_malware_that_cis_hasnot_detected/post_here_your_unfixed_fps_only_after_2_days-t36306.0.html;msg301084#msg301084

7

Hi,

65 database versions later, the FP is still NOT FIXED. (:AGY)

8

Hi Camille Case,

;D ;D ;D 65 bases… very sad…
I see lot other fps are getting fixed on that day itself
but your fp still not fixed means, some bug might be ther while fixing…
i think they are taking long time (very…)… to fix.

-gva

9

Well I just PM’ed Umesh the boss of the AV analystis about this FP lets see if it gets fixed!

10

It might only happen on the French language version. Maybe they missed testing it on that.

11

(:CLP)

Hi guys,
[size=10pt]102[/size] updates later the FP is still NOT FIXED !

:comodo110:

12

Seams like your going to have to send it using this page:

13

Already done and posted here
Dennis

14

Hi,

Im sure the worst case is “waiting for next CIS release”…

-gva

15

Hmm maybe you have the 59MB DB bug.

16

Hi OmeletGuy,
I had this bug on June 9, 2009
https://forums.comodo.com/feedbackcommentsannouncementsnews_cis/comodo_av_database_update_page_now_5_million_signatures-t34216.0.html;msg297312#msg297312
But it was fixed one day later.

P.S. : the FP on msimn.exe is still present with DB 1489

17

How exacly did you fix it? Can you also attach the FP file, so i can check if its fixed? Because if its on my side and not on your side, theres a bug somewhere!

18

After this post from umesh : https://forums.comodo.com/feedbackcommentsannouncementsnews_cis/comodo_av_database_update_page_now_5_million_signatures-t34216.0.html;msg297583#msg297583

I have downloaded a new install package of CIS and re-installed it (after a clean uninstall, of course).

[attachment deleted by admin]

19

Well, i think it’s useless to continue this discussion. I give up. I will wait the next version of CIS.

(You may lock this topic if you want)

20

I just checked i also get that FP.

Melih:

Yep.. the fp u mentioned required a big change in our infrastructure.. we haven't ignored it.. the work is being done to fix the cause of it..