FP? CM108rm.exe

Comodo detecs it as: TrojWare.Win32.TrojanDownloader.Swizzor.Gen[at]87251472

file path: C:\WINDOWS\system32\CM108rm.exe

i am unable to upload it to virustotal, viruschief, virscan, and to Comodo Firewall | Get Best Personal Firewall Software for $29.99 A Year

Everytime i try my browser freeze, and i have to close the browser, and open it again. (tried with Chrome, Firefox, and IE)

VD: 4038
Heuristics: High
OS: Windows XP SP3

Try putting it in a password protected zip file and then uploading. Sometimes this helps.

Make the password ‘infected’.

I cant copy the file either, it says the file is in use or something…

I think it’s a file from latest updates from microsoft. as i changed my D+ settings rigth before, and changed it back afterwards, and the mrt.exe is also running about the same time, which is microsofts Malicious Software Removal Tool.

Hi Lasse88,

Can u offer the link of the sofeware? So that we can have a test,and we will get back to you after investigation.

Thanks and Regards,
hailong.■■■■

If i knew what it was from i could, but unfortunately i don’t.
But i think it’ s from when i installed updates from Microsoft 10 feb.

I tried to upload it from comodo “submit suspicious files” and there stands it’s already been submitted, so i think you have the file.

[attachment deleted by admin]

I have send it now, i where also able to upload it to virustotal.com now…

http://www.virustotal.com/analisis/bc6190fc4913446d485adff5ec38d34fdbe8e10f759cf9496397db6aed822790-1267012151

Hi Lasse88,

This false-positive was fixed with DB 4049. You can update and verify.

Thank you bringing this to our attention!

Regards,
Ionel

It’s fixed :slight_smile: