FP - Superantispyware 5.0.1118

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
#1

Once installed runsas.exe is flagged as Suspicious@#1rtgn2i5zsf8s

http://downloads.superantispyware.com/downloads/SUPERAntiSpyware.exe

pass = infected

[attachment deleted by admin]

#2

Hello Ronny,

Thank you for reporting this. We’ll check it and get back to you soon.

Best regards,
FlorinG

#3

Hi,Ronny

This is to inform you that false-positive with
(File name:<SUPERAntiSpyware.exe>
SHA1: )
has been fixed.
You can update to AV database Version <10090> of Comodo Internet Security Version<5.5.195786.1383> and confirm it.

Best regards
Chunli.chen

#4

Hi Chunli,

The reported FP is NOT fixed !!
It’s not flagging bd39d70df95d010d188208143e937313bb759b54 but the attached file to this post some file dropped by this one.

It’s Runsas.exe with SHA1 aae6b9a72e5f1d507aa95e1bc108fbfcae3b7e3c that’s causing the FP.
Suspicious[nobbc]@[/nobbc]#1rtgn2i5zsf8s

Please re-analyze.

Tested on 5.8.x.2075 db 10092

#5

Hello Ronny,

Please accept my apologies.That was my bad, I only downloaded&checked the sample from the link you have provided, and not the one you have attached to your post. Anyway this one will also be fixed very soon.

Best regards,
FlorinG

#6

No problem. I’ll await the fix.

#7

Hello Ronny,

This False Positive is now fixed. You can update to Virus Signature Database version 10102 and confirm.

Best regards,
FlorinG

#8

Confirmed Fixed :-TU