FP

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
1

i received 3 fps from the program trinity rescue kit on my flash drive
http://trinityhome.org/Home/index.php?content=TRINITY_RESCUE_KIT____CPR_FOR_YOUR_COMPUTER&front_id=12&lang=en&locale=en

i upload them throught the ‘submit file’ in the cis gui

i attached a screenshot so you can have the detection name and file name

http://www.virustotal.com/file-scan/report.html?id=f8fd24394cbf8b5c3a25d6616427cf4781218e3e5f10ddd468b6c52ab48df0d2-1302122324
http://www.virustotal.com/file-scan/report.html?id=609ce01ade50a4567853b7073da33b7d651de3338d1fe856fc309b8def71c293-1302122102
http://www.virustotal.com/file-scan/report.html?id=c0bd26185a2840b82c5e5a8dfe83517ff067a5651b350373f198c96aad92e9dc-1302122190

http://valkyrie.comodo.com/Result.aspx?sha1=9DAA415BDA98F828B51D14B4D3367CCCC618D68A&&query=0&&filename=trspack-1_0.exe
http://valkyrie.comodo.com/Result.aspx?sha1=C84BD9D60A03B439F494DEF2EF7F8F96BDB16179&&query=0&&filename=trsrun-1_0.exe
http://valkyrie.comodo.com/Result.aspx?sha1=76AF75326EDA2E1F6E574C35BA98A538F8D85685&&query=0&&filename=trsrun-1_0-nq.exe

[attachment deleted by admin]

2

Hi wasgij6,
We are going to have a look at it and will get back to you after investigation.
Thanks and Regards,
Lin mengze

3

sounds good

4

Hi wasgij6,
I can’t download this file(SHA1 = C84BD9D60A03B439F494DEF2EF7F8F96BDB16179)
If you can find the FP file,you can submit through this
link:Comodo Firewall | Get Best Personal Firewall Software for $29.99 A Year we can go to have a look at it.
Thanks and Regards,
Lin mengze

5

i tried uploading the file to the online submit but it just says uploading and doesnt do anything. the file is only 1.65 mb idk y it wont work

EDIT: it has not ben about 40 mins and it still says its uploading. im cancelling it now
is there an alternative to submitting the file?

6

Hello wasgij6,

Please try again submitting the file using the following link but maybe archive it first: Comodo Antivirus Database | Submit Files for Malware Analysis

If you still can’t upload it then try attaching it to your post here just click on “Additional Options…” when you are posting and chose&upload the file. Thank you!

Best regards,
FlorinG

7

Hello wasgij6,

We finally got the last file also. We checked the files you have submitted and found them to be potentially unsafe. Detection naming will be changed to Application.Win32.VNC . In order to further use these applications you can add them to your “Exclusions” list. For more informations you can check the following link: https://forums.comodo.com/av-false-positivenegative-detection-reporting/cis-malware-naming-rules-for-potentially-dangerous-applicationsriskware-t38506.0.html .

Best regards,
FlorinG

8

ok thanksa lot for your help. i can see why this could be seen as a potentially unsafe application but i know how to use it and only use it for computer repairs

thanks again