FP at a Kaspersky tool ("Unclassified malware")

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
1

Kaspersky GetSystemInfo 4.

Here is the file:
http://www.mediafire.com/download.php?zqjzy55uw1y
PW: clean

2

Hi evil_religion,

We have tried to open the url,but failed.If you can find the FP file,you can submit through this link:Comodo Firewall | Get Best Personal Firewall Software for $29.99 A Year we can go to have a look at it.

Thanks and Regards,
hailong.■■■■

3

I uploaded both files via your upload interface.

4

I’ve noticed one strange thing: The files get caught by the guard but not by the on demand scanner.

5

Hi evil_religion,

Two samples u uploaded are not detected by CIS 3.12.111745.560 DB 2576.Pls check it.If any questions,pls let us know.

Thanks and Regards,
hailong.■■■■

6

Sorry, CIS doesn’t detect the starter of the Kaspersky tool as trojan but the dropped main program.
And it detects it only with the AV guard, not the on demand scanner. I’ve attached the correct file now (PW: clean).

[attachment deleted by admin]

7

Hi evil_religion,

Thank you for your submission. We are going to check the file and get back to you shortly.

Best regards,
FlorinG

8

Could you please also check the issue why it is detected by the guard but not the on demand scan?

9

Hi evil_religion,

The false-positive was fixed with DB 2596. Thank you for reporting it!

We will investigate this to find the reason that could lead to such behavior.

Regards,
Ionel