View Full Version : Comodo Internet Security AV False Positive
TheKid7
June 2nd, 2009, 07:28 PM
How do you report an AV false postive to Comodo? I just made a Post on Comodo's forum a few minutes ago. I would like to upload the file for analysis but I do not have the upload link. The installation exe was scanned at VirusTotal before the installation and was reported to be clean. The individual file was also scanned with VirusTotal and was reported to be clean.
This is the software (GFIBackup2009) that set off the false positive:
http://www.wilderssecurity.com/showthread.php?t=243963
Thank you.
TheKid7
June 2nd, 2009, 11:29 PM
I got an answer on Comodo's forum. I did it the easy way. I removed the file from "Exclusions", browsed to the folder containing the file, Quarantined the file, and submitted it to Comodo.
minacross
June 3rd, 2009, 10:28 AM
http://forums.comodo.com/false_positivenegative_reporting_is_this_a_malware_that_cis_hasnot_detected/how_to_report_false_positivessuspicious_files_how_to_submit_them-t36051.0.html
eXPerience
June 3rd, 2009, 03:18 PM
-{ Quote: "http://forums.comodo.com/false_positivenegative_reporting_is_this_a_malware_that_cis_hasnot_detected/how_to_report_false_positivessuspicious_files_how_to_submit_them-t36051.0.html" }-
Thanks for posting my guide ;D
I sujest you post the FP on the forums, that way, it will be fixed as fast as possible, and I'll say : within 6 hours ;) . Comodo is now also providing more frequent updates for this.
-{ Quote: "I predict they will need at least one more year to improve that aspect of their AV component. Good luck!" }-
I can't say anything on this. It will all depend on the CAMAS heuristics that will be integrated.
Thank you
Dch48
June 3rd, 2009, 03:51 PM
I have never gotten a false positive from the Comodo antivirus. I leave the heuristics setting on low and it works fine.
aigle
June 3rd, 2009, 05:56 PM
Comodo has a lot of false positives. They must have a built-in utility to report it. Quranatine and then report it, is not a good idea at all. Why will one like to quaratine a legit file/ dll etc.
It.s also a bad idea IMO to report it in forums as false positives are too frquent. How many posts we will have to make in this case, just imagine.
3xist
June 4th, 2009, 04:59 AM
Hi Guys,
A new website will be live next week for FP Reporting also there. Comodo are very quick in fixing FP's now.
Cheers,
Josh
aigle
June 4th, 2009, 10:56 AM
must be something like antivir website. An option to upload false positives and suspicious files, without hassle of zip and password etc.
vBulletin® Copyright ©2000-2012, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2012, Wilders Security Forums