RogueKiller

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
#1

Product site: RogueKiller Download - Geeks to Go Forum
Name of detection. Heur.Suspicious
CIS databse number: 14855

I recall this having been fixed just a few months ago, but now Comodo detects it as suspicious again.
Comodo and TrendMicro-HouseCall are the only ones to detect it on virustotal.com

#2

Hi emanresuoseehc ,

Thank you for reporting this.
We’ll check it and get back to you soon.

Best regards
Qiuhui.■■■■

#3

Hi emanresuoseehc,

This is to inform you that false-positive has been fixed.
You can update to AV database Version <14859> of Comodo Internet Security Version<6.0.260739.2674> and confirm it.

Regards,
Priyadharsini.G

#4

Thanks, although my CIS still picks up a detection on it, and I have updated to the latest definitions.

I tried to run the program and Comodo warned the file was .Heur.Suspicious[at]1

Comodo offered more information via:
http://cima.security.comodo.com/report/29f07b658fd7f60e71e8fa639f6834c93fb000d2.htm

Checking Defense+ events also shows that the file was scanned online and found malicious.

edit: I just noticed you were talking about Comodo version 6.
I’m using version 5.12.256249.2599. Whenever I use Comodo’s Updater it says my product is currently up-to-date. I’m starting to wonder, is my system’s security severely compromised with v.5 instead of v.6?

#5

Hi emanresuoseehc ,

You can download CIS V6.0 from this link,

and Installation upgrade.

Best regards
Qiuhui.■■■■

#6

Thanks. I upgraded and am using the latest definitions, but CIS still detects RogueKiller as suspicious.

#7

Confirmed. Still not fixed.

[attachment deleted by admin]

#8

Hello,

This False Positive had been fixed.You can update to AV database Version 14874 of Comodo Internet Security Version 6.0.260739.2674 and confirm it.

Best regards,
FlorinG