Help COMODO build worlds largest safelist

We need information on the following files.
If you could provide the setup’s or download links etc.

You’ll be helping us building the world largest SAFELIST (CNY).

Alternately you could provide us the setup’s that you want to be included in the safelist.

If you need anything (tool, service) that helps you in the process, we’ll be more than happy to help you.

NAME : autodown.exe
COMPANY : Computer Associates International, Inc.
VERSION : 2.1.0.2
SHA : 10f0262a665fa66f802ee4d93499f80fb658e729
SIZE : 462kb

NAME : bcont.exe
COMPANY : SupportSoft, Inc.
VERSION : 6.7.1154.0
SHA : c5b43098efc82192100461dfd564d89d87f06107
SIZE : 992kb

NAME : DSAgnt.exe
COMPANY : Gteko Ltd.
VERSION : 1.1.0.73
SHA : 4c548975c61e42b4efa25b348e0a01d33de9c51e
SIZE : 299kb

NAME : EverQuest.exe
COMPANY : ??
VERSION : ??
SHA : 9cd997043f95214d80feda6da385e29cf887c866
SIZE : 1,296kb

NAME : HPDeviceHost.exe
COMPANY : Hewlett-Packard Company
VERSION : 2.1.0.39
SHA : e1c2742340c79127d982d5adb292c49a367fbd0b
SIZE : 100kb

NAME : LEXBCES.EXE
COMPANY : Lexmark International, Inc.
VERSION : 9.37.0.0
SHA : 6fe4e849e4ab508c67c8e470d92014c0cc253f86
SIZE : 300kb

NAME : lobby.exe
COMPANY : Microsoft Corporation
VERSION : 9.3.1980.1
SHA : 69d511f7b8f0a84c4524a38e5eb55b9bc4c99e76
SIZE : 113kb

NAME : lsass.exe
COMPANY : Microsoft Corporation
VERSION : 5.2.3790.0
SHA : 3f21cf979fd67f0ff436da37a0296adc95bee69d
SIZE : 13kb

NAME : LuComServer_3_0.EXE
COMPANY : Symantec Corporation
VERSION : 3.0.0.160
SHA : 981b04411b56b22e19b1170fa973eb568b7eba54
SIZE : 1,998kb

NAME : mpssvc.exe
COMPANY : Microsoft Corporation
VERSION : 1.0.868.0
SHA : 3eaacdd360d6aedbf265df8165a91b04806f9d77
SIZE : 820kb

NAME : ServiceWrapper-4476822.exe
COMPANY : F-Secure Internet Security 2005
VERSION : 6.3.2.116
SHA : 67bfdc9b3ed67e6b7a3c69c7c0078ee2512d5ece
SIZE : 37kb

NAME : SprintVirtualAssistant.exe
COMPANY : Sprint
VERSION : 5.8.1.-3413
SHA : 66144d0bd77b666cca39605afae3e081459bd919
SIZE : 2,340kb

NAME : SpybotSD.exe
COMPANY : Safer Networking Limited
VERSION : 1.4.0.3
SHA : 824be0b2bf5a189d96f352680c47755a5e916596
SIZE : 4,291kb

NAME : StatusClient.exe
COMPANY : Hewlett-Packard
VERSION : 0.0.0.13
SHA : 0b34e10c009fceafbe37d619eb96e8eb61a34566
SIZE : 36kb

NAME : stdialup.exe
COMPANY : THOMSON Telecom Belgium
VERSION : 301.0.0.12
SHA : 3ddddcea8e8b00c2951366399a356dde45730ee7
SIZE : 1,613kb

NAME : wcescomm.exe
COMPANY : Microsoft Corporation
VERSION : 4.2.4876.0
SHA : b5c6a1b40fe5cc0f4b2ac4eec8d91df38dd80f0f
SIZE : 1,179kb

NAME : ybrowser.exe
COMPANY : Yahoo!, Inc.
VERSION : 2006.3.2.1
SHA : 8ebffcac6699b82a903a356f3914a38e76aff362
SIZE : 660kb

NAME : ycommon.exe
COMPANY : Yahoo!, Inc.
VERSION : 2005.2.23.1
SHA : c8e339cb3d479cbf505a8e936fbd901fee2eb542
SIZE : 224kb

NAME : UltraMon.exe
COMPANY : Realtime Soft
VERSION : 2.6.23.0
SHA : 8fd8c9759a6b072a9d4c38e142b2eb2ca86a55e6
SIZE : 184kb

NAME : TrueAssistant.exe
COMPANY : Esaya, Inc.
VERSION : 2.1.3.5
SHA : d06f245eef8397ba7c154978656e5968613896be
SIZE : 364kb

Thanks
Rahul

We really would appreciate if you could help us track down these applications.

These files have been submitted to us by our users, but in order to analyse it fully we need to identify the full setup to make sure they are legit.

We need your help in finding where we can get these from. Once we have found the full application we will analyse them and put them into safelist if they are safe.

thank you for your help (CNY) (CLY)

Melih

NAME : LEXBCES.EXE COMPANY : Lexmark International, Inc. VERSION : 9.37.0.0 SHA : 6fe4e849e4ab508c67c8e470d92014c0cc253f86 SIZE : 300kb

I think I submitted this :D. I think this is the download for it:
http://downloads.lexmark.com/cgi-perl/downloads.cgi?ccs=227:5:0:428:0:0&emeaframe=&fileID=1194&searchLang=en

It’s pretty much an automatic setup, and no real configuration for this software.

I have the software on CD for a Lexmark printer. If you want, and if I can, I’ll copy the CD and send it you.

Mike

Thanks Mike for submitting the file :wink: and providing the source.

P.S. : We need more participation from all Forum Users.

Rahul

Hey Rahul,

If I have a large quantity of executables to submit, do you prefer to receive them through the CPF submitter, or can they be FTP’d to somewhere?

Do you prefer to receive the SETUP file itself or are you primarily interested in the executable?

Is SHA-1 the preferred checksum?

Thanks in advance,
Ewen :slight_smile:

lsass.exe is from Microsoft as you write in the list.
IPSEC services
You could pick that one from any Windows computer.
They are in C:\WINDOWS\system32 and C:\WINDOWS\system32\dllcache

There is a virus that is called Isass.exe/isass.exe that you could confuse it with.

No problem, Rahul. I’m glad to help.

Mike

Hey Panic,

Thanks for your support.

It would be great if you could use CPF File Submit Utility to send us Setup’s (prefferably), and executables.

Yes, SHA-1 is the preffered checksum.

Rahul

Is there going to be a list to show what has been submitted from the list already? Are there more processes you want?

P.S. perhaps submitted lit in red or something :wink:

Thanks,

Paul

NAME : SpybotSD.exe COMPANY : Safer Networking Limited VERSION : 1.4.0.3 SHA : 824be0b2bf5a189d96f352680c47755a5e916596 SIZE : 4,291kb
Can be found here: http://www.spybot.info/en/mirrors/index.html It's an anti-spyware tool.

Thanks Arathorn,

Your help appreciated.

NAME : ybrowser.exe
COMPANY : Yahoo!, Inc.
VERSION : 2006.3.2.1
SHA : 8ebffcac6699b82a903a356f3914a38e76aff362
SIZE : 660kb

these files are from installing the verizon w/yahoo online dsl i dont have a a setup file because these get installed from a verizon portal (online)

NAME : ycommon.exe
COMPANY : Yahoo!, Inc.
VERSION : 2005.2.23.1
SHA : c8e339cb3d479cbf505a8e936fbd901fee2eb542
SIZE : 224kb

Thanks hyatt69

Your help appreciated.

no problem rahul,thanks for a good antivirus w/hips product and only getting better (R)

I would like to suggest, well if this can be done, an import file (like txt file) to do the black list or put other categories like block domains, block sites, bad_word keys, etc like squid,

Nice Work Guys!

I can’t seem to get CFP 2.4.6.114 Beta to upload files to Comodo ??? Is there an alternate way?

Anyway, http://www.ypopsemail.com/

LogMeIn Hamachi - is a virtual private networking (VPN) application.

In other words: "Hamachi is a zero-configuration virtual private networking application with an open security architecture and NAT-to-NAT traversal capabilities. "

Vendor: LogMeIn
http://www.hamachi.cc/

ver 1.0.1.5, 895 KB