msg from COMODO

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by mikev, Mar 21, 2012.

  1. mikev

    mikev Private E-2

    Everytime Comodo runs at bootup it reports the following as "suspicious":

    C:\Program Files\Dell\NICCONFIGSVC\Appdrv.sys

    It asks you if I want to engage their tech support but then it says my trial period has ended even though I installed it 4 days ago. My antivirus never reports this file.

    Should I be concerned or are they fishing?

    mike
     
  2. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Please go to virustotal and upload the following files for analysis, and let me know the results.

    C:\Program Files\Dell\NICCONFIGSVC\Appdrv.sys
     
  3. mikev

    mikev Private E-2

    This file was already analysed by VirusTotal on 2012-03-20 07:37:21.

    Detection ratio: 0/42

    You can take a look at the last analysis or analyse it again now.
     
  4. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    So what antivirus do you use?
     
  5. mikev

    mikev Private E-2

    nortons
     
  6. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    So what from Comodo is detecting the file as suspicious? Firewall? :confused
     
  7. mikev

    mikev Private E-2

    yes.
     
  8. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    I would report it as a false positive on their forums. ;)
     
  9. mikev

    mikev Private E-2

    So, I should not be concerned?
    I can also add it as a "trusted file" in the firewall.
     
  10. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Are you able to zip up the file and attach it here for me to look at in more detail?
     
  11. mikev

    mikev Private E-2

    I have not a clue how to do that. Would I have to load some kind of zip program?
     
  12. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Yes. WinZip should do it.
     
  13. mikev

    mikev Private E-2

    downloading..
     
  14. mikev

    mikev Private E-2

    Got it! now what?
     
  15. mikev

    mikev Private E-2

    Here it is (I think)
     

    Attached Files:

  16. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    The file is fine. You need to do as I suggested in the first place.

    To clean up from our tool: Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
    related to MGtools and some other items from our cleaning procedures.
     
  17. mikev

    mikev Private E-2

    I looked back through the thread and didn't see any instructions except to zip the file and send it to you. I am confused by the cleaning procedure (novice). Where do I find MGtools and MGclean.bat.

    Thanks for your help...

    mv
     
  18. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    I am so sorry, my bad. You can just follow the steps below. :)

    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required (If we renamed it please rename it back to Combofix.exe.
      • "%userprofile%\Desktop\combofix" /uninstall
        • Notes: The space between the combofix" and the /uninstall, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
    3. Go back to step 6 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
    4. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    5. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    6. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    7. Go to add/remove programs and uninstall HijackThis.
    8. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
      related to MGtools and some other items from our cleaning procedures.
    9. If you are running Win 7, Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures pointed to by step 7 of the READ ME
        for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    10. After doing the above, you should work thru the below link:
     
  19. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Not really! The READ & RUN ME was never run so most of these steps ( if not all ), do not apply. And no malware was removed, so toggling of System Restore is not needed.
     
  20. mikev

    mikev Private E-2

    Final note: I did an internet search on the error in question, .heur.suspicious@1 and found page after page...Apparently Comodo is well aware but so far, no fix.

    mike
     
  21. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    *smacks head* I must have been having one of those days...
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds