EQ2Interface

EQ2Interface (https://www.eq2interface.com/forums/index.php)
-   EQ2Map Troubleshooting (https://www.eq2interface.com/forums/forumdisplay.php?f=36)
-   -   Problem with Comodo Internet Security (https://www.eq2interface.com/forums/showthread.php?t=13463)

babycat22 10-12-2009 09:58 AM

Problem with Comodo Internet Security
 
When I run Eq2map Comodo Internet Security gives me a warning....

TrojWare. Win32.Dialer.Agent.SA@31183586.

Then the next time was
TrojWare.Win32.Spy.Pophot~UA@22653134

If I quarantine these eq2 map will not run. So do I need to contact Comodo and let them know that this is not a virus. Or is this a real virus. :confused: This is the frist time I have posted so I hope I posted this in the right place. Thanks for the help

gm9 10-12-2009 10:33 AM

The files are clean on the server, so it can either be a false positive and you should contact your AV vendor, or your system may be infected with a virus and it has spread to your updater files. The fact that your AV is reporting a different infection each time points to a false positive though.

EQAditu 10-12-2009 11:30 AM

I always upload possibly infected files here:
http://www.virustotal.com/

It'll scan the file against 35 or so different engines to eliminate the possibility of false positives. Not to mention it gives a link to show other people instead of saying this one engine said such and such.

lordebon 10-12-2009 11:46 AM

Quote:

Originally Posted by EQAditu (Post 86513)
I always upload possibly infected files here:
http://www.virustotal.com/

It'll scan the file against 35 or so different engines to eliminate the possibility of false positives. Not to mention it gives a link to show other people instead of saying this one engine said such and such.

Yep, the best way to really know is to check it with several of the major antivirus software packages.

The Virustotal analysis for EQ2MAP's updater is here: http://www.virustotal.com/analisis/a...b9a-1255365278.

You'll note only 1 has flagged it as a virus, meaning it is likely a false positive. It's interesting to note that Comodo did not flag it there -- are your definition files up to date?

In the anti-virus world, it's better to err on the side of giving false positives than false negatives. This is especially true for AV software from smaller companies (which may not have the resources to eliminate false positives as exhaustively as larger companies).

babycat22 10-12-2009 09:07 PM

Thanks for all your help and the website to scan the file. Comodo is up to date, I run all my updates daily. I ran the files, they are clean no virus. :nana:

Thanks again you guys are great!!


All times are GMT -5. The time now is 03:16 PM.

vBulletin® - Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
© MMOUI