Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Spyware Doctor False Positive?


  • Please log in to reply
10 replies to this topic

#1 GMD

GMD

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:12:59 AM

Posted 02 December 2007 - 10:52 AM

Hi,

I have just installed Comodo Firewall Pro (Comodo 3) and now Spyware doctor reports (product version 5.0.1.200 / database version 5.07550) that I have a Backdoor.Hackdoor Trojan Horse within the application data for Comodo. I also now have Keenvalue within the application data for Comodo.

Is this really spyware, or is this a false positive? Any other experiences from other users?

Thanks for reading
Graham

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,281 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:59 PM

Posted 02 December 2007 - 10:56 AM

Did your scan provide a specific file name associated with the Backdoor.Hackdoor Trojan Horse threat?
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 GMD

GMD
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:12:59 AM

Posted 02 December 2007 - 11:51 AM

Did your scan provide a specific file name associated with the Backdoor.Hackdoor Trojan Horse threat?



Yes...

126_d.sld
202_d.sld
4_d.sld

The scan by spyware doctor also showed up something called Kenvalue, again within the application folder of comodo of the C: drive and these are all .sld files...36 of them



I cannot find anything on the web about comodo being a trojan but i want to be sure.

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,281 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:59 PM

Posted 02 December 2007 - 01:29 PM

I'm not familiar with those files and cannot find any info on them. I suggest you contact and advise Comodo Support about these scan reports so they can investigate.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 GMD

GMD
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:12:59 AM

Posted 02 December 2007 - 02:44 PM

I'm not familiar with those files and cannot find any info on them. I suggest you contact and advise Comodo Support about these scan reports so they can investigate.



Is comodo a safe firewall though, and not a trojan?

I ran nod32, Superanti spyware and spybot 1.5 and did not detect anything with them, only spyware doctor

#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,281 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:59 PM

Posted 02 December 2007 - 03:43 PM

Comodo Free Firewall is a safe firewall that is recommended by a lot of folks. It is not a Trojan. That's not to say there could be a problem with one of its files and that's why its being flagged. This can happen from time to time with an application and why the vendor needs to know. However, if none of your other scans are finding anything, I'm still inclined to suspect this is a FP.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 GMD

GMD
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:12:59 AM

Posted 02 December 2007 - 05:06 PM

Comodo Free Firewall is a safe firewall that is recommended by a lot of folks. It is not a Trojan. That's not to say there could be a problem with one of its files and that's why its being flagged. This can happen from time to time with an application and why the vendor needs to know. However, if none of your other scans are finding anything, I'm still inclined to suspect this is a FP.


From my further research, it seems adaware 2007 was flagging this as having a backdoortrojan but lavasoft have since said its an fp...so would seem spyware dr is also reporting a fp

#8 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,072 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:59 PM

Posted 02 December 2007 - 05:50 PM

From the Comodo Forum..........

Spyware Doctor identified keenvalue wich is an adware used by eUniverse in folders created by comodo.Are you using this third party software? if yes this is not good as Spyware Doctor has always identified keenvalue as an Adware before you bundled it with comodo.

Thank you for your post.

We did not bundle anything with CFP!!!

1)make sure the files are not legitimate Comodo files being falsely identified as something else
2)once done that, pls report to spyware doctor people as a false positive.

We do NOT bundle anything with our software.

Melih


Melih is Comodo's Senior Moderator and he goes on further to explain it is a false positive.
You should report it to spyware doctor.
I have been using the Comodo firewall for about 2 years and it is definately safe.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#9 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,281 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:59 PM

Posted 02 December 2007 - 08:42 PM

Yes, the more folks who report/complain about the FP, the more likely quick action will be taken to correct it.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#10 GMD

GMD
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:12:59 AM

Posted 03 December 2007 - 04:34 PM

hi guts, thanks for your help and advice :thumbsup:

#11 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,281 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:59 PM

Posted 03 December 2007 - 06:12 PM

Your welcome from both of us. :thumbsup:
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users