heuristics FP's

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
#1

CAMAS -

http://camas.comodo.com/cgi-bin/submit?file=2353212cb0149bb2e81bb54ef96e0d594e5673067cb94e171c3a94a51fab7caf

Virus total -

http://www.virustotal.com/analisis/d578ab9a76c93a6cd6ed09e81ea084bd

CIS Detected as Heur.packed.unknown

CIS Version - 3.864xxx

#2

False Positive - AVSredirect.dll in Windows/system32

Detection - Heur.pck.eTlock

CAMAS -

http://camas.comodo.com/cgi-bin/submit?file=699c9881650feefc8c5a33abca02c12f010a40be10ce4bfccd6b45892a18f920

VIRUS TOTAL -

http://www.virustotal.com/analisis/c8a18272a85301f42a9f77c7ebf8fb80

#3

False Positive X2.64.exe in C:/Windows

Detection - Heur.pck.UPX-Scrambler

CAMAS - http://camas.comodo.com/cgi-bin/submit?file=f95d95e55bfb1cbae65421ff1c8200e3aae4250dcf2be4b2137d4018bf6f1fca

VIRUS TOTAL - http://www.virustotal.com/analisis/705bb7d6bd67a6c0b770f09b618654ae

#4

False Positive - Uninstall.exe in Windows Dir

Detection - Heur.packed.unknown

CAMAS - http://camas.comodo.com/cgi-bin/submit?file=32af38b8ef68902c9308a5967cd8a3428d85c22430cc0abb4725d67cb716e35e

VT - http://www.virustotal.com/analisis/c4ba6bb2e2a374473ad332751e3768e5

#5

False Positive - MOTA113.exe in Windows Dir

Detection Heur.Packed.Unknown

CAMAS - http://camas.comodo.com/cgi-bin/submit?file=32af38b8ef68902c9308a5967cd8a3428d85c22430cc0abb4725d67cb716e35e

VT - http://www.virustotal.com/analisis/d3c8aea395f646feaf4ad39984fd28e6

#6

Hi,

These FP’s are fixed, please update to latest CIS V477 and update virus signature database to latest.

Thanks
Ramanan

#7

False Positive - MOTA113.exe in Windows Dir
This is still being detected with virus DB 1030

Total virus shows 4/39 (Comodo did not detect?) http://www.virustotal.com/analisis/d94fded158328f5efd76759a333b1342

http://camas.comodo.com/cgi-bin/submit?file=350f4d9c3a9d016394a35152eb13ddfb9df625171eec838f71937da2c8d498c6

File has been submitted.

#8

With heuristics set to “medium”, these files are reported to be malicious (which seems to be incorrect):

xpy.exe
http://xpy.whyeye.org/

rwparam.exe

Also, the installer for this program is claimed to be malware. Can this be verified?

#9

Hi Jim__,

FP has been fixed. Please check with our latest updates.
Thanks for Reporting.

Thanks and Regards,
Suresh.