Report trusted and whitelisted malwares here! [Don't attach Live Malware !!]

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
34

Not true.

Please provide evidence to back up this accusation.

35

it wasnt an accusation.
If i believed that then i wouldnt use comodo full stop.
Although there are shady organisations within the computing world.
Anyway i dont trust paretologic as i consider their products harmful like most registry cleaners are,
Ive never thought comodo was a dubious company,on the contrary i saw melihs video on how comodo is superior and i love the product.
And i like melih very much too he seems a very genuine and passionate person about his goals for comodo and i believe he shall succeed.
Unfortunately like most things in life…if your good at what you do then there is always detractors who will try and bring you down.

also i must apologise to you if i appeared rude and discourteous.
But ive had a couple of bad things happen concerning registry cleaners and i dont like them.
I for one believe peoples opinions do count enormously and i base my opinion on paretologic purely on this reason.
im using the WOT because i dont know of any alternatives.

many kind regards to you.

36

Hi DARREN.1972,

Apart from what Chiron commented,

here is notes in support to what HeffeD pointed:

The topic was created for reporting “digitally signed malware” that exists and/or may not yet be known to Comodo as far as I understand

It should be proven that it’s malware.
I doubt that community voting can play any role in determination and final verdict regarding that

You can have disasters consequences & ruined systems because of well known trusted Software
Those are introduced bugs in many cases in combination with some specific system (hardware/software) environments that were not taken into consideration; etc.

  • take sytems ruined because of FPs (quite recently by Avast! Bitdefender…and others);
  • some installs/uninstalls causing BSODs, inability co connect and/or install other Software properly afterward (CIS can be included);
  • have a look at the set of other Comodo products (CDE/CTM/CSC)

Can users call that “malware” even being extremely frustrated? I don’t think so.

Well, probably many of such very troublesome Software can be called a “crapware”…
Then that is your choice: don’t use such Software or you can remove anything from the List of Trusted. Many prefer not using the latter at all and wiping it.

All that …. but not a “malware” yet until malicious intends were proven

My regards

37

Hi!

-Comodo by VirusTotal: “Heur.Packed.Unknown”
-CIS 5.3: undetected

VT link:
http://www.virustotal.com/file-scan/report.html?id=9e993a6e595184195bde718445109e52704c33e41857ecfe67b6c896251ed844-1294652785

Thanks and Regards,
vv5204

38

Hi vv5204,

The issue will be fixed with following CIS virus database updates.

Thanks and regards,
Ionel

39
40

Hello salaficall,

This is already being checked.
https://forums.comodo.com/news-announcements-feedback-cis/malware-using-signed-signatures-merged-topic-t66609.0.html;msg479245#msg479245

Best regards,
FlorinG

41

Hi!

I have already submitted this file but nothing happened.
Are you sure it’s safe?

-Comodo by VirusTotal: “UnclassifiedMalware”
-CIS 5.3: undetected

http://www.virustotal.com/file-scan/report.html?id=631ab7f16d588def9eb44bc0c8e823928f7c6c3f0be4c4d493ab657ebabcb28c-1294825862

Thanks and Regards,
vv5204

42

Hi vv5204,

We are looking into it!

Regards,
Ionel

43

Hi vv5204,

Associated vendor was removed from TVL.

Thanks and regards,
Ionel

44

Hi!

Some suspect files:

-VirusTotal result: 5/43
-CIS 5.3: vendor in TVL or whitelisted

http://www.virustotal.com/file-scan/report.html?id=f60aea11e524e90e362a35bceb0112474e9431267bb6222f08bf264c593e7203-1294964249

-VirusTotal result: 1/43
-CIS 5.3: vendor in TVL or whitelisted

http://www.virustotal.com/file-scan/report.html?id=bf4b6ca339c4ee3fda063b82f1145c2273fa3b502a1440b3c442fa0ab0b41a35-1294964272

-VirusTotal result: 8/43
-CIS 5.3: vendor in TVL or whitelisted

http://www.virustotal.com/file-scan/report.html?id=61b9b91465076b9d7eed6e6acfe489afbcd3fbd6ded62769a4eb3112a77d01e3-1294964339

-VirusTotal result: 11/43
-CIS 5.3: vendor in TVL or whitelisted

http://www.virustotal.com/file-scan/report.html?id=f5b30026b45b948855132458cfc7991f3f8e158ab485807a0fb6a3e2feaeef80-1294964477

-VirusTotal result: 19/43
-CIS 5.3: vendor in TVL or whitelisted

http://www.virustotal.com/file-scan/report.html?id=353dd1af55814a256adc5cd12e0aa411c225938c421fe2320dc7061c12656e40-1294964846

Thanks and Regards,
vv5204

45

Any idea from Comodo how to fix the dangerous vendors of TVL and entries of whitelist?

46

What do you mean “dangerous vendors”

47

Hi vv5204,
Thanks for malware submission. We are going to check this out and if found malware,detection will be added.
Thanks and Regards,
Lin mengze

48

!ot!

Files are infected by malware and trusted by Comodo. (TVL, whitelist)

49

http://www.virustotal.com/file-scan/report.html?id=15af4aa25b598fa5de3df9681681f0a1d41aeae48933362c0d7ea69c2fb67f57-1294955626

50

are you sure about that.?
they wouldnt be trusted if infected with malware.

51

Hi, guys!

Please check this…

http://www.virustotal.com/file-scan/report.html?id=b866232bd12229ba1fb0c7e139c680007c92a7e1d1bd78cd8e04c07ee904c6f1-1295022481

It is signed by DRPU Software Private Limited and trusted by Comodo.

http://www.virustotal.com/file-scan/report.html?id=89f776398451f81f9859384c4a65a1a82875c855faf9ac7b2e2fd4bbda7f3b30-1295020586

It is signed by Shanghai Emoney Software Technology Company Ltd and trusted by Comodo.

52

Hello,

Thank you for your submissions. We’ll check these.

Best regards,
FlorinG

53

!ot!

Ok, but why does exist this topic? :slight_smile: