FP on Libreoffice

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
#1

This happens EVERY single release of LibreOffice for the last few months (5.0.2 in this case, 64-bit). Can you fix your detection algorithm for this program?

The AV flags soffice.bin as CloudScanner.Trogen.Gen[at]2[at]1 and blocks all access to it.

Version: 8.2.0.4703
Database: 23289

If you manually scan it, it shows up as no problems found, but it stays blocked due to the scanner.

Also, Comodo has also stopped giving the option to ignore the alert – it just shows the dialog that the file has been blocked. It used to ask if you wanted to ignore the finding.

#2

Hi,TeutonJon78

Thanks for reporting.
Could you please submit the detected file at
Comodo Firewall | Get Best Personal Firewall Software for $29.99 A Year.

Regards
Chunli.chen

#3

Submitted — but an update already came though, as the program is loading up now.

#4

Hi TeutonJon78,

The sample you have submitted <soffice.bin> (SHA:291b6f772948f978055c6f92d9eba40d5e29f65b) as false-positive is not detected by Comodo Internet Security version <8.2.0.4702> with database version <23291>.

Please make sure the Antivirus database is updated and check again. If detection is still present, please submit the file on Comodo forums at
https://forums.comodo.com/false_positivenegative_reporting_is_this_a_malware_that_cis_hasnot_detecte-b154.0/ along with details about the environment on which this event occurred.

Regards,
Sathish