PPTICO virus

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
1

Today CIS detected PPTICO.exe as a virus worm.win32.bacteraloh.v0@104028326 when I tried to download a powerpoint presentation. Since it was detected when I was downloading from email, I thought it to be an ‘attached’ threat and asked to clean (which actually deletes!). Okay, my fault, could have quarantined it.

I feel that the said file is powerpoint icon file from Office 2003. Fortunately, the file was not powerpoint.exe and hence my presentations are opening and only ‘ppt’ icon is missing.

Please do fix it after verifying before other people are affected.

2

Hi layman,

Please submit the detected file at Comodo Antivirus Database | Submit Files for Malware Analysis and we’ll verify this issue.

Regards,
Ionel

3

As I said, when I clicked on ‘clean’ the file was deleted!

However, I feel that if you can click on any powerpoint presentation through MS Office 2003, this file may get activated and detected by CIS.

4

log in text format attached, if it is of any help to you.

[attachment deleted by admin]

5

Had this today as well also. Virus total

This is Office 2003 ??? 88)

Have you sent it yet Layman?

File info:

File: C:\Windows\Installer{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe
Size: 249856 bytes
Modified: 09 April 2010, 15:12:11
MD5: B4924F0F2B9166D50688D3EC94AAD14A
SHA1: F667EB6E50D457FC211BA139A851EE9553B0C3D2
CRC32: AA70AE51

Cheers,
Matt

6

Hi Matty_R,

We received the file with the hashes you mentioned and we already identified the problem. A fix will be available with the following updates.

Regards,
Ionel

7

Hello,

This False Positive has been fixed. You can check with Virus Signature Database 4550 and confirm it.

Best regards,
FlorinG