masm32.zip seems to have TrojWare What to do?

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
1

hello everyone at comodo, I am a new user to CIS.
I have just done my first scan of all my drives, and have found
a threat called TrojWare.Win32.Agent.~NSI@97331933
It is in a zip of a program called masm32.zip I downloaded from the HLA website.
It is in the INSTALL.EXE|Unsfx|LIBLIST.EXE
I would like to install this program again on another computer, but am now very worried
about using it. How do you know if it is Positive or Negative reading for this program?
All help will be most appreciated.
Thanks, :slight_smile:

[attachment deleted by admin]

2

Hi stantheman1,

Thanks for reporting.We will check that and get back to you.

Regards,
Haja

3

Thanks.
Now I have just finished a long scan of my external backup drive it has come back with two more threats.
In zip: Microsoft-Programming_with_MFC_2nd_ed.zip
Threat: TrojWare.Win32.Agent.ghuh@138444763
Location: Chap11/MdiSquares/Release/MdiSquares.exe

In zip: Routersim2.1.zip by CISCO
Threat: Packed.Win32.MUPX.Gen@129019204
Location routersim/shkrccna/shkccna2.exe

Will send second file in second post cause of file limit size.
Should I quarantine or Ignore these old ebooks?

[attachment deleted by admin]

4

Here is the second file
but I want like to know the best way to handle these threats.
It says in the Threat results that they are a high risk, yet they are in ebooks I have had for ages.
Kaspersky av I used to use never saw them as a threat nor did Nortons av online scanner.
So why is it with CIS?
Thanks again for your assistance.

[attachment deleted by admin]

5

Hi stantheman1,

These False-Positives are fixed.You can check with DB <6881>.

Also,we have checked shkccna2.exe and found to be a patcher.Generally patchers, loaders, trainers,crackers and keygens won’t be seen as goodware.If you plan to use this application further, you can add it to exclusion list.

Regards,
Erik M.

6

Thank you for your work. :slight_smile: