.Heur.Suspicious.1 - Found Malicious

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
#1

Hi there,

I downloaded what I figured to be a reputable software, I did a MS Essentials scan on the install and it came up clean. I went to install it and Comodo said it found “.Heur.Suspicious.1” as ‘Found Malicious’.

[edit]
I’m changing the location from where I got the file.

A Google Ad on:

Led me to (a site in question):
http://apps.foxtab.com/g4/video-converter/a/

Where I downloaded the file in question:
→ VideoConverterSetup.exe

SUPER ©   Video Converter | Video Encoder | Free 3D Video Converter | Free 3D Video Encoder from http://www.erightsoft.com/
appears to possibly be a legitimate installation file. My apologies but the Google Ads were well disguised.
[/edit]

The majority of these (heur) mentions I’ve been reading to be false positives, although they have been from other sources, so figured I’d ask.

If this post is in the wrong spot, my apologies, but there appear to be about over 200 places to determine where to put a question like this.

Thanks!

Keith D Commiskey

#2

Hi,KDCinfo

Thank you for reporting this.
We’ll check it and get back to you soon.

Best regards
Chunli.chen

#3

Hi,

The samples you submitted as false-positive is not detected by Comodo Internet Security version <5.5.195786.1383> with database version <9486>(We downloaded that software "AVSVideoConverter.exe"SHA1 and install it.
).
Please make sure the Antivirus database is updated and check again.

Regard.
Chunli.chen

#4

Wow. Quick reply! :slight_smile:

Before I posted, because I’d noticed a few of the other .heur posts had had the databases updated to accommodate them, I opened Comodo, went to “More”, and did a “Check for Updates”. It said I was up to date. Is there somewhere else I can update the definitions?

Thanks!

#5

Hi,

Could you please submit the detected file at
Comodo Firewall | Get Best Personal Firewall Software for $29.99 A Year.

Regards
Chunli.chen

#6

I uploaded it there after I posted here… Sorry if it was considered a double-post.

Thanks.