FP - Heur.Pck.RLPack

jimbell · March 28, 2009, 5:06pm

Hi,

Was installing Power DVD 9 on a friend’s computer and came across the following alerts which I believe to be false positives. Please see screenshot.

Unfortunatly I do not have a copy of the files to do a virus total scan.

DB: 1087

Thanks

[attachment deleted by admin]

system · March 29, 2009, 8:50am

Hi,JimBell
My colleague have processed CyberLink PowerDVD 9.1501D. But no files are found as threat by CIS. Please offer your CIS product version. And If you submit file it will be helpful for us to fix.

   Download Link : http://download.cnet.com/CyberLink-PowerDVD/3000-7970_4-10352449.html?tag=mncol

Thanks

jimbell · March 29, 2009, 9:44am

These are the files I get alerts on:

cldabc.dll: http://www.virustotal.com/analisis/50b10bb1346861055efb0b8d2967813e
cl264dec.ax: http://www.virustotal.com/analisis/5bf4b40f3a697cca9cd25ff9ecfab516
cldabcd.dll: http://www.virustotal.com/analisis/2394078ec87d699dd70d166573f0c199
cldor2.dll: http://www.virustotal.com/analisis/f9841d9aeadec0d9229e8c6368558b00
cldor2d.dll: http://www.virustotal.com/analisis/5f3b2b5743361474e909725826729bb7

An example alert is attached as a screenshot.

Program version: 3.8…477, Heuristics: low

[attachment deleted by admin]

system · March 30, 2009, 1:39am

Hi.JimBell

pls upload these samples to the forum,so that we can confirm it asap.

Thanks

jimbell · March 30, 2009, 8:37am

Hi,

Have sent you a PM with the download link for these files.

Thanks,

system · March 30, 2009, 8:57am

Hi,JimBell

I have got the sample.We are going to have a look at it and will get back to you after investigation.

Thanks

kummu_lucious · March 31, 2009, 2:54pm

Hi JimBell,

This False positive has been fixed. Please check with our latest virus database version 1092.

Thanks,
Kumaraguru.V

wandborg · April 5, 2009, 7:22am

Hi.

I get the same problem when starting PoverDVD for the first time on my new computer branded with CyberLink PowerDVD version 7.3.3314.0. The problem I have is just on one file, and that the program refuse to start any more.
I have uploaded the files comodo report???

I have the 1099 virus data base.

Hope you can solve it!

Bosse

gmohan · April 6, 2009, 6:00am

Hi wandborg,

Can you please upload the detected file to the forum, so that we can confirm it.

Thanks,
Chandra Mohan

wandborg · April 6, 2009, 4:15pm

Do not understand how to get the file out of Quarantine folder???
But i saved a log i think

Bosse

[attachment deleted by admin]

gmohan · April 7, 2009, 7:08am

Hi wandborg,

You can use the following steps to restore a file from quarantine:
[1]. In CIS main window, Choose “Quarantined Items”
[2]. Select the file you want to restore and click “Restore” option
[3]. Restored file will be saved in actual location,

Please submit the restored file.

Please read the link for more info on submission of files.
https://forums.comodo.com/false_positivenegative_reporting_is_this_a_malware_that_cis_hasnot_detected/how_to_report_false_positivessuspicious_files_how_to_submit_them-t36051.0.html

Thanks,
-Chandra Mohan

wandborg · April 7, 2009, 6:19pm

Hi,

Ives zipped the file and hope it will work for you.

Bosse

[attachment deleted by admin]

gmohan · April 8, 2009, 12:01pm

Hi wandborg,

The submitted false positive has been fixed in v1105, Please update your database and confirm.

Thanks
-Chandra mohan

wandborg · April 8, 2009, 12:44pm

Going to do that as soon i am home!

Thanks