New FP with CIS 3.10 - cltest.exe

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
#1

Hi all. Just upgraded from CIS 3.9.95478.509 to 3.10.102194.530 yesterday, and found what is probably another false positive. Path on my machine:

C:\Program Files\Cyberlink\PowerDVD\cltest.exe

File desc: “CLTest”
File size: 167,936 bytes
File mod date: Wednesday, November 03, 2004, 12:24:46 AM

Detected by CIS 3.10 AV as: “Heur.Suspicious@25545169”
Virus Signature Database Version: 1550

CIS 3.9’s AV never complained about this file, and CIS 3.10 didn’t either, until today’s Virus signature database was used. The file has apparently been there quite awhile. I ran this file through virscan.org, and it came back clean from ALL the scanning engines, including Comodo AV 3.9 (the most recent version virscan.org has, apparently). Windows Defender says it’s fine, too.

Given all this, I’m almost completely sure it’s an FP. Can someone at Comodo have a look?

I’ve submitted the file for Comodo’s analysis, via the Quarantine screen.

Thanks guys!

#2

Hi puddingpants，

We are going to have a look at it and will get back to you after investigation.

Regards,
hailong.■■■■

#3

Hi puddingpants，

This FP has been fixed.Please check in virus signature database 1555.

Regards,
hailong.■■■■

#4

Fix confirmed with virus signature database 1558.

Thanks!