I get an alert for "C:\Windows\Temp\CBXX.tmp" ( X = [0,F] ) on every startup !!!

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
#1

Hi !

I get this after every startup:


http://img263.imageshack.us/img263/6724/mware.jpg

Click on tha pic

First there is an alert by Comodo, and then shortly after that by avira. I always click remove but that bunch of CBXX files ( X is a hex character ) always remain in the temp folder for a while, and i cannot delete them manually as well, win says they are being used by another process. But after 30-40 sec, they became deleted anyways, regardless if i want remove them or not.

What the hell is this ?

#2

Did you do a Windows update over the last few days that included an Office update to?

Check out my post here:
https://forums.comodo.com/av-false-positivenegative-detection-reporting/unclassified-malware-after-windows-update-t54654.0.html

Hope this of some help.

#3

I thought it was avira flagging the cbxx.tmp files then (I’m guessing) some comodo users reported this as suspious then someone at comodo decided to flagged this without even checking it out ???

I believe those cdxx.tmp files are “comodo’s” anti-virus database files (temporarily of course :slight_smile: ) This only happens when comodos anti-virus gets updated

#4

Hi Vino,

Please submit detected file as false-positives at Comodo Antivirus Database | Submit Files for Malware Analysis and we will check them to confirm if they’re malware or not.

If you cannot access respective files, please specify the full detection name as “UnclassifiedMalware@xxxxx”.

Thanks and regards,
Ionel