Scan result: Cmdagent.exe fake antivirus

[clockwork]

Lately i made a memory scan with a random antivirus product of another company.
The result was “surprisingly coincidently” and funny:

Cmdagent.exe
RISK: HIGH
Threat: Win32:FakeVimes-B Trojan

This kind of malware is fake antivirus category.
You must be a clown to think nothing bad about this “result”

[av2000]

It’s surprised me too! ;D It must be a mistake.

[siketa]

[captainsticks]

@clockwork post:1

This kind of malware is fake antivirus category.

This kind of antimalware is free antivirus category

They just can’t spell, that is all.

[Seany007]

@clockwork post:1

Lately i made a memory scan with a random antivirus product of another company.
The result was “surprisingly coincidently” and funny:

Cmdagent.exe
RISK: HIGH
Threat: Win32:FakeVimes-B Trojan

This kind of malware is fake antivirus category.
You must be a clown to think nothing bad about this “result”

LOL! New tactic so ppl don’t use Comodo…

[Chiron494]

Please report it as a false positive to whichever vendor is was:
How to Report Malware or False Positives to Multiple Antivirus Vendors

[clockwork]

First, something is wrong with the list.

Vendor l Submit Malware l Subm<---- whole section down is cut off like this

---

I wrote them about the unlucky circumstance.
The answer was: Theres no bug/FP to fix. We recommend to not use the memory scan.

This scan result is what i expected instead:
“Make sure that this process is part of a legit antivirus that you installed. Otherwise it might be a malicious fake antivirus.”
But after weeks, cmdagent “is” still a fake antivirus > trojan.
Like a fact.

[Seany007]

@clockwork post:7

First, something is wrong with the list.

Vendor l Submit Malware l Subm<---- whole section down is cut off like this

---

I wrote them about the unlucky circumstance.
The answer was: Theres no bug/FP to fix. We recommend to not use the memory scan.

This scan result is what i expected instead:
“Make sure that this process is part of a legit antivirus that you installed. Otherwise it might be a malicious fake antivirus.”
But after weeks, cmdagent “is” still a fake antivirus > trojan.
Like a fact.

Avast always find FP in the memory scan. Avast forum ppl say not to scan memory at all. Is it Avast?

[clockwork]

@Seany007 post:8

Avast always find FP in the memory scan. Avast forum ppl say not to scan memory at all. Is it Avast?

WOOL

[Seany007]

@clockwork post:9

WOOL - YouTube

Ha ha ha LOL! Good one! You broke the rules… No anger management issues there LOL!

[Citizen_K]

@Seany007 post:8

Avast always find FP in the memory scan. Avast forum ppl say not to scan memory at all. Is it Avast?

If a known safe process like cmdagent.exe keeps on being detected as malware then the ball is in Avast’s field.

If on top of that user at the Avast forums say not to scan memory at all then that is another big sign there is something not quite right with the Avast memory scanner.

[Seany007]

@EricJH post:11

If a known safe process like cmdagent.exe keeps on being detected as malware then the ball is in Avast’s field.

If on top of that user at the Avast forums say not to scan memory at all then that is another big sign there is something not quite right with the Avast memory scanner.

True. +1