If you believe that you have encountered a false positive with the online verdict service you can report them here. This is NOT the place to report false positives for comodo antivirus.
When reporting Valkyrie false positives please post the Valkyrie analysis link and a Virustotal link.
Final verdict is “clean” but static analysis or dynamic analysis say “malware”
https://valkyrie.comodo.com/get_info?sha1=e6095f5a6ba701c583b2d8605c269bc68d16840d
https://valkyrie.comodo.com/get_info?sha1=c327764d6ea29acc2a00fe3d9cdf1838cf21b5d3
c44efc812036f969e9843fbfae3b4a1e958c0bb0
a clean installer EagleGet Download Manager
https://valkyrie.comodo.com/get_info?sha1=12eb3d4c64f5f76d689a98360b6ed36046f3cd33
9871bf12506e366aa20aa7abf3a7456d500c9d11
cf9de9d85fa15a9eecf53eb93bd80ed208526a1d
Trusted AutoIt Sample
Trusted “Adware Digital Signature” Problem over Valkyrie
Valkyrie Results
#1
#2
Files final verdicts are “Clean” because the digital signature of the samples are in Trusted Vendors List.
Please check “Optimal Software s.r.o.” in your CIS or CCAV.
It is a PUP/PUA provider.
Homepage - HerdProtect Knowledgebase
I will report it as trusted malware. Inform to you.
Thanks
I’ll check this vendor.
update: the original page and product for this vendor were located at http://www.wifiprotector.com. New findings revealed http://www.pcspeedup.co.uk/ (with your comment) and sha1 ab84b151b723dd7bff31f5eb3f6bf3c7254adcc2 was found to be an installer of scareware product. The list of vendors is updated.
Thank you very much for informing this. It’s highly appreciated.
Siketa, how do you conclude that these are FPs?
They have very low VT detection ratio by few engines known for FPs (F-Prot, Zillya…).
Trusted Trojan Sample
It looks like it has correct and verified digital signature.
Or a bug → https://forums.comodo.com/comodo-valkyrie-fls/report-problems-with-valkyrie-file-verdict-service-t79618.0.html;msg828840#msg828840
I sent it to manual analysis, they fixed the “Safe” verdict.
This is a file which has stolen certificate. It should be validated by Valkyrie. The case was known to us, and it is already fixed, it will be available with next update.
The vendor is trusted.