Netgear modem software - Google Toolbar Updater FP?

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
#1

Hi

Would appreciate any help with Viruses deteced below. As to whether FP or not

C:\ProgramData\Google\GoogleToolbar\Update\gtb8B9D.tmp.exe[b]Heur.Dual.Extensions@-1 [/b]

D:\netgear dg834g modem software\DG834G_V4-3.EXE\ stopsmartapp.exe
Worm.win32.AUTOIT.~NS@87254559

CIS Database No : 5216

Thanks

#2

Hello inthedark,

Thank you for posting this. In order to check this issues we’ll need you to upload the detected files using this link: Comodo Antivirus Database | Submit Files for Malware Analysis

Best regards,
FlorinG

#3

Hi FlorinG

Exactly which files would you like me to upload, is it just the virus detection page or full virus scan log, or another.

Regards

#4

Hello inthedark,

Just the files that get detected please, not the scan log/report. Thank you.

Best regards,
FlorinG

#5

Hi FlorinG
I’m new to this, i have sent the log report by mistake, exactly where do i get the files to send from.
As all i can see are the logs and quarantined items.

Regards

#6

You currently cannot report files from the quarantine. What you need to do is this:

  1. Disable Comodo Antivirus (You do not need to disable the entire suite, just the antivirus)

  2. Restore the file you want to submit from the quarantine (Please note the pathname so you can later find it)

  3. Go to the Comodo Malware/False-Positive Submission website and navigate to the file you want to report. (Be sure to report it as a false positive and give the name it’s currently being detected as)

  4. Now you can re-enable Comodo Antivirus. It will detect the file again and quarantine it.

  5. The Comodo team will send you an email letting you know the results of their analysis. If it is clean the detection will be removed and you can release it from quarantine without worrying about it being detected again.

Please tell me if any of these steps were vague or confusing in any way.

#7

Hi Chiron

Step 1,

Disable Internet Security Suite or Antivirus only?

Regards

#8

Antivirus only. The reason here is if you don’t then the second you release it from quarantine it will be detected again. You want to report it before it is moved to quarantine.

Also, I’ve edited my original post to make this more clear.

#9

Hi

Thanks Chiron and FlorinG, sent file awaiting results

Regards

inthedark