Malformed packets when contacting Threatcast

Comodo Internet Security - CIS Resolved/Outdated Issues - CIS
#1

Hi,

FYI, I was in Wireshark yesterday and noticed Comodo pushing out malformed packets when trying to contact threatcast.comodo.com. There were no local Threat casts popup messages at this time. Just general browsing and paying my garbage bill at https://wmezpay.wm.com/.

I’ve attached a short Wireshark exported text log of the TCP/IP packets. It looks like Comodo makes a DNS lookup of threatcast.comodo.com, gets response of 72.9.241.58 and then sends malformed packets to 72.9.241.58.

The system here:

  1. CPU = AMD 32 bit
  2. OS = Win XP Pro SP3 fully patched
  3. Other active security = Eset NOD32 AV, AVG Linkscanner
  4. There are no overt symptoms visible to the user other than seeing the malformed packets in the Wireshark log. Bug happens during general browsing.
  5. I have no way to get into the Comodo’s TCP/IP requests to try to resolve the malformed packets.
  6. Comodo configuration: Firewall & Defense Plus were installed with “Maximum Proactive Security.” Firewall & D+ are both running in “Safe Mode.” No special restrictions on F or D+.
  7. No BSOD
  8. Running under a Limited User account

Best,

Stefan

[attachment deleted by admin]