Please submit all applications you would like to see trusted here. Whenever possible provide links to the application/software. This will provide much faster results.
Submit Entire Program For Whitelisting
Please include:
The name of the application/software
A download link to the application/software (assuming you know that it’s not potentially dangerous)
Submit Individual Files For Whitelisting
Include the name of the application/software (if possible)
Also upload the file to either Comodo Valkyrie , or VirusTotal and post a link to the results in your post
Thanks.
2 Likes
@JothiDeepan @FlorinG
Application Name: IrfanView Language Installer
SHA-1
SHA-256
Hi New_Style_xd,
Your request has been processed.
Regards,
1 Like
zoopar
March 8, 2025, 12:42pm
4
1 Like
Hi zoopar,
We are processing your request.
Regards,
1 Like
Hi zoopar,
Your request has been processed.
Regards,
Hi Avos-New-Forum,
We are processing your request.
Regards,
1 Like
Hi @JothiDeepan ,
We don’t see any PE files in this add-on. Did you face any issues due to cis while using this add-on?
Hi @JothiDeepan ,
Hi @JothiDeepan ,
opened 11:19AM - 14 Jun 24 UTC
closed 12:42PM - 15 Jun 24 UTC
### INFO FROM GHOSTERY:
This is false-positive. We are looking for a solution… .
---
Hello,
We have security alert with our plugin today, what's happening?
```
Security alert: Malicious code found in file. The file was quarantined.
From: xxx 2024-06-14 12:06:42 +02:00
Details: Malicious code found in file C:\Users\xxxx\AppData\Local\Temp\chrome_Unpacker_BeginUnzipping14192_461896876\node_modules\@cliqz\adblocker\dist\esm\src\codebooks\cosmetic-selector.js.
Infection: Trojan-Downloader:JS/Locky.D
Action: The file was quarantined.
File hash: c883d63e1f3cbc7879ec9b61ba553250347279c7
Accessor path: C:\Program Files\Google\Chrome\Application\chrome.exe
Accessor hash: c97cdf54791461f07088762995f8419e44422729
Access operation: Close
File size: 4.73 KB
Created: N/A
Modified: N/A
Downloaded from: N/A
Container path: N/A
Security alert: Malicious code found in file. The file was quarantined.
From: xxx 2024-06-14 12:06:42 +02:00
Details: Malicious code found in file C:\Users\xxx\AppData\Local\Temp\chrome_Unpacker_BeginUnzipping14192_461896876\node_modules\@cliqz\adblocker\dist\esm\src\codebooks\raw-cosmetic.js.
Infection: Trojan-Downloader:JS/Locky.D
Action: The file was quarantined.
File hash: 70ce94e63a06695e0365fc058dfce5872c3fa237
Accessor path: C:\Program Files\Google\Chrome\Application\chrome.exe
Accessor hash: c97cdf54791461f07088762995f8419e44422729
Access operation: Close
File size: 3.33 KB
Created: N/A
Modified: N/A
Downloaded from: N/A
Container path: N/A
Security alert: Malicious code found in file. The file was blocked.
From: xxxx, 2024-06-14 12:06:43 +02:00
Details: Malicious code found in file C:\Users\xxx\AppData\Local\Temp\chrome_Unpacker_BeginUnzipping14192_1122083957\node_modules\@cliqz\adblocker\dist\esm\src\codebooks\raw-cosmetic.js.
Infection: Trojan-Downloader:JS/Locky.D
Action: The file was blocked.
File hash: 70ce94e63a06695e0365fc058dfce5872c3fa237
Accessor path: C:\Program Files\Google\Chrome\Application\chrome.exe
Accessor hash: c97cdf54791461f07088762995f8419e44422729
Access operation: Close
File size: 3.33 KB
Created: N/A
Modified: N/A
Downloaded from: N/A
Container path: N/A
Security alert: Malicious code found in file. The file was blocked.
From: xxxx, 2024-06-14 12:06:43 +02:00
Details: Malicious code found in file C:\Users\xxxx\AppData\Local\Temp\chrome_Unpacker_BeginUnzipping14192_1122083957\node_modules\@cliqz\adblocker\dist\esm\src\codebooks\cosmetic-selector.js.
Infection: Trojan-Downloader:JS/Locky.D
Action: The file was blocked.
File hash: c883d63e1f3cbc7879ec9b61ba553250347279c7
Accessor path: C:\Program Files\Google\Chrome\Application\chrome.exe
Accessor hash: c97cdf54791461f07088762995f8419e44422729
Access operation: Close
File size: 4.73 KB
Created: N/A
Modified: N/A
Downloaded from: N/A
Container path: N/A
Security alert: Malicious code found in file. The file was quarantined.
From: xxxx, 2024-06-14 12:08:17 +02:00
Details: Malicious code found in file C:\Users\xxx\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij\10.3.7_0\node_modules\@cliqz\adblocker\dist\esm\src\codebooks\cosmetic-selector.js.
Infection: Trojan-Downloader:JS/Locky.D
Action: The file was quarantined.
File hash: c883d63e1f3cbc7879ec9b61ba553250347279c7
Accessor path: C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
Accessor hash:
Access operation: Open for reading
File size: 4.73 KB
Created: 2024 Jun 14 12:08
Modified: 1980 Jan 1 01:00
Downloaded from: N/A
Container path: N/A
Security alert: Malicious code found in file. The file was quarantined.
From: xxxx 2024-06-14 12:08:17 +02:00
Details: Malicious code found in file C:\Users\xxxx\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij\10.3.7_0\node_modules\@cliqz\adblocker\dist\esm\src\codebooks\raw-cosmetic.js.
Infection: Trojan-Downloader:JS/Locky.D
Action: The file was quarantined.
File hash: 70ce94e63a06695e0365fc058dfce5872c3fa237
Accessor path: C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
Accessor hash:
Access operation: Open for reading
File size: 3.33 KB
Created: 2024 Jun 14 12:08
Modified: 1980 Jan 1 01:00
Downloaded from: N/A
Container path: N/A
Security alert: Malicious code found in file. The file was blocked.
From: xxxx 2024-06-14 12:08:19 +02:00
Details: Malicious code found in file C:\Users\xxxx\AppData\Local\Temp\chrome_Unpacker_BeginUnzipping2756_388181674\node_modules\@cliqz\adblocker\dist\esm\src\codebooks\raw-cosmetic.js.
Infection: Trojan-Downloader:JS/Locky.D
Action: The file was blocked.
File hash: 70ce94e63a06695e0365fc058dfce5872c3fa237
Accessor path: C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
Accessor hash: 25d013e3b393d3f9f44c09616167e2a0dba39462
Access operation: Close
File size: 3.33 KB
Created: N/A
Modified: N/A
Downloaded from: N/A
Container path: N/A
Security alert: Malicious code found in file. The file was blocked.
From: xxxx, 2024-06-14 12:08:19 +02:00
Details: Malicious code found in file C:\Users\xxxx\AppData\Local\Temp\chrome_Unpacker_BeginUnzipping2756_388181674\node_modules\@cliqz\adblocker\dist\esm\src\codebooks\cosmetic-selector.js.
Infection: Trojan-Downloader:JS/Locky.D
Action: The file was blocked.
File hash: c883d63e1f3cbc7879ec9b61ba553250347279c7
Accessor path: C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
Accessor hash:
Access operation: Close
File size: 4.73 KB
Created: N/A
Modified: N/A
Downloaded from: N/A
Container path: N/A
```
We have F-secure
Hi Avos-New-Forum,
Your request has been processed.
Regards,
1 Like
Hi New_Style_xd,
Your request has been processed.
Jothi S
@JothiDeepan @FlorinG
Application Name: ScreenToGif.exe
Link: https://www.screentogif.com
MD5
af56f36624ca99b3abd3be00a3065492
SHA-1
c59359410bbe3ede9b61f46e74840c6df6e1a0ef
SHA-256
405da9bf047908cb96ffbe529ef6614f6f2c27206a32d250fd7d77319db54815
Hi New_Style_xd,
Your request has been processed.
Regards,
1 Like
@JothiDeepan @FlorinG
Application name: Asussoftwaremanager.exe (part of MyAsus OEM software).
Link: https://www.asus.com/uk/support/myasus-deeplink/
It’s OEM software and individual file not accessible. It’s background updating creates Comodo Temp script file repeatedly every time it updates in the background causing Containment alerts.
On a similar note, AsusKeyboardHost has to be whitelisted in containment, see below log.
AsusNotifications also needs to be whitelisted in CIS/CFW Containment
Anyway, the main issue is Comodo creating temporary scripts for these powershell updates. I know it’s possible to just disable Shellcode Injection for powershell but that’s not a great idea.
1 Like
@JothiDeepan @FlorinG
Application name: Cloudflare_WARP_2025.4.929.0
Link: https://one.one.one.one
MD5
fe51e549d80e4a9b2f276200df4ada02
SHA-1
2991c1dba552cb5b1f3ececd339124e721df37d1
SHA-256
26bad679b589a3ed1a2ae501f22c7a7297159b31c5fc76d28413c4ab3e787828
Please whitelist this program, because it undergoes updates and every time I cannot update.
Hello, could you put this program above requested a few weeks ago?
