Pointstone System Cleaner - FP

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
1

Comodo detects our software as Heur.Packed.Unknown.

Product site: http://www.systemcleaner.com/
Direct file location: http://dl1.pointstone.com/download/systemcleaner/SystemCleanerSetup.exe
Name of detection: Heur.Packed.Unknown
CIS database number: unknown, I used VirusScan and also received a report from clean-mx.de

PS: I tried to use the Comodo Antivirus Database | Submit Files for Malware Analysis page but received a “Not a valid request” error message.

Thanks,
Steven M.

2

Hello smartins,

Thank you for your submission, we’ll check it and get back to you.

Best regards,
FlorinG

3

Hi smartins,

This is to inform you that false-positive has been fixed.
You can update to AV database Version <19042> of Comodo Internet Security Version<7.0.317799.4142> and confirm it.

Best regards
Qiuhui.■■■■

4

Hi there.

We’ve just released a minor update and the file is now again detected as “Heur.Packed.Unknown”.

Direct file location: http://dl1.pointstone.com/download/systemcleaner/SystemCleanerSetup.exe
Name of detection: Heur.Packed.Unknown
CIS database number: unknown, I used VirusScan: VirusTotal

Any way to white-label our setup so that this doesn’t continue happening with new releases?

Thanks!

5

Hi, If you distribute the file in question than you can apply here (Comodo Firewall | Get Best Personal Firewall Software for $29.99 A Year) for your file to be considered for whitelisting. If the file does not have a digital signature, you can make a form post here (https://forums.comodo.com/news-announcements-feedback-cis/submit-applications-here-to-be-whitelisted-2014-t100712.0.html)

6

Thanks I have just filled out the form.

7

Good, keep in mind that if Comodo whitelists your file and it ends up being flagged by the AV after you update the program again, the AV shouldn’t remove the file because files trusted by Comodo are exempt from being quarantined.