Yet Another False Positive Aol\..\Proofreader\uninst.exe

[wrapper]

Comodo CIS identifies this module as “Unclassified Malware” using current engine and db1192

On VirusTotal, only CIS call it as malware; 39 other scanners do not.

On VirusScan, only CIS call it as malware; 37 other scanners do not.

Previous versions of CIS did not classify this module as malware.

The file has been submitted by email.

[system]

@wrapper post:1

Comodo CIS identifies this module as “Unclassified Malware” using current engine and db1192

On VirusTotal, only CIS call it as malware; 39 other scanners do not.

On VirusScan, only CIS call it as malware; 37 other scanners do not.

Previous versions of CIS did not classify this module as malware.

The file has been submitted by email.

Hi wrapper,

can u pls upload the samples to the forum? so that we can have a look at it and will get back to you after investigation.

Regards,
hailong.■■■■

[wrapper]

hi Hilong.■■■■,

Per the instructions on submitting false positive reports, I can’t upload the file to the forum. I have submitted the files - there are several - to Comodo via email, again as indicated in the instructions.

I’d be happy to upload the files, but please let me know specifically where you would like me to upload them. Do you want them attached to one of these messages? Doesn’t that violate the protocol setup to submit false positives?

Ray P

[gmohan]

Hi wrapper,

@wrapper post:1

Comodo CIS identifies this module as “Unclassified Malware” using current engine and db1192

Aol..\Proofreader\uninst.exe

We have fixed the mentioned FP.
Please check with DB 1223.

Regards,
-Chandra Mohan

[wrapper]

Yep,

db1224 has no problem with this.

Thanks