Multiple Heur.Suspicious files detected after install of COMODO

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
#1

I’ve redownloaded the installers for these games from the GameHouse web site and the installed executables were reflagged as infected so I’ve Quarantined these file pending your investigation.

Definitions current as of 03/13/2010 6:00am Central

Identified As
Heur.Suspicious@97142344 file submitted via CIS 5spots.exe
Heur.Suspicious@84293871 file submitted via CIS 5spots2.exe
Heur.Suspicious@85128679 file submitted via CIS AdventureInlay.exe
Heur.Suspicious@96331034 file submitted via CIS BackspinBilliards.exe
Heur.Suspicious@37243146 file submitted via CIS Bejeweled2.exe
Heur.Suspicious@94599727 file submitted via CIS Chocolatier.exe

#2

Hi Eric_G,

We are going to have a look at it and will get back to you after investigation.
Thanks.

Kind Regards,
Erik M.

#3

Hi Eric_G,
This is to inform you that reported false-positive has been fixed.
You can update to AV database Version <4252> of Comodo Internet Security
Version<4.0.135239.742> and please confirm it.

Thanks
Kind Regards,
Erik M.

#4

Hello,

I also have a similar problem. I’m trying to reinstall my tv tuner application and i get the following message:

Heur.suspicious@101144166

C:\program files\winfast\wftvfm\WFWI34cc.rra

oops… now (i just tried to reinstall it to view the exact message), end of the message has changed as following:

Heur.suspicious@101144166

C:\program files\winfast\wftvfm\WFWI970d.rra

i chose “remove” and now i’m trying again…

Heur.suspicious@101144166

C:\program files\winfast\wftvfm\WFWIf88c.rra

can you please help me with this?

Thank you

#5

Hi traian79,

We are going to have a look at it and will get back to you after investigation.

Thanks and Regards,
hailong.■■■■

#6

Hi traian79,

Reported FP is fixed.You can confirm this with DB 4256 of CIS V4.0.135239.742.

Regards,
Haja

#7

Hi there

I have recently bought a new laptop and installed COMODO Internet Security and virus software. When I came to instal my drivers for my JVC GR-D270e the following error was displayed Heur.Suspicious@98033736 . This was the threat name. Is this an actual virus and is it dangerous? The file it came from is called JVCG726E.EXE. Please could you advise if I can continue with my install or not with my JVC drivers.

thanks
Dave

#8

Hi davesjwilliams,

We will investigate this and get back to you after reaching a conclusion.

Regards,
Ionel

#9

Hi davesjwilliams,

This FP has been fixed in DB 4663. Please update and confirm it.

Regards,
Haja

#10

I am using Freecall, its a VOIP client. I get heur.suspicious@81953860 which I believe is wrong.

Kindly Look into it

Thanks in advance
Ashfaq

#11

I am using Freecall, its a VOIP client (www.freecall.com). I get heur.suspicious@81953860 which I believe is wrong.

Kindly Look into it

Thanks in advance
Ashfaq

#12

Hello ashfaq.ghori,

Thank you for letting us know about this. We’ll check the file and get back to you soon.

Best regards,
FlorinG

#13

Hi ashfaq.ghori,
This FP has been fixed. Please check in virus signature database 4705.

Thanks and Regards,
zouyipeng

#14

Awesome, cheers for COMODO team :-TU very quick response

#15

I install new comodo and it again report me freecall as suspicious and some how it make my freecall application corrupt. also it by some application that where provided to me by my system vendor i.e HP it shows suspicion like QuickPlay

Please help me in rectifying it.

Ashfaq Ghori

#16

Hi ashfaq.ghori,

Please submit the detected files at: Comodo Antivirus Database | Submit Files for Malware Analysis and we will check it and get back to you soon.

Regards,
Haja