Advice Request Comodo installing PUP?!

[Tutman]

Has anyone seen this? Pay attention to the beginning of the video and he addresses it at the end of the video.

 

[EndangeredPootis]

When you install it it prompts you if you want to install a bundled program, but its often missed due to many users just going all out clicking the Accept/Next button when installing software.

 

[Ink]

When you install it it prompts you if you want to install a bundled program, but its often missed due to many users just going all out clicking the Accept/Next button when installing software.

The file appears as soon as running the installer, I haven't clicked on anything from within the installer.

fusion.dll
fusion.dll.tmp

Source: VirtualBox VM with Windows 10.

 

[Ink]

This is what happens when you Accept & Install with the default installer settings:

Screen 1; options



Screen 2; components



Screen 3; post-install

 

[EndangeredPootis]

The file appears as soon as running the installer, I haven't clicked on anything from within the installer.

fusion.dll
fusion.dll.tmp

View attachment 245933
Source: VirtualBox running Windows 10.

Huh, thats weird, from my experience it has sometimes not prompted you to download some extra software, but it hasnt downloaded it secretly in the background, ive also found those fusion.dll files aswell when using hitmanpro and having comodo installed on my system a year or so ago, but I never knew they were part of comodo, perhaps false positives?

Edit; ran it in my virtual machine, its possible fusion.dll is part of the process that downloads the bundled software, but isnt malicious in on itself, its also possible comodo uses the same service that adware/bundlers use.

Edit 2: looking up the detection names possibly confirms my theory Comodo may be using the same service, FusionCore, as many other bundlers use.

 

[ErzCrz]

The online installer has always had bundled software, well certainly for the last year or so. I think if you use the offline installer you won't get the other product offers. It's quite easy just to click decline or No when prompted. It's been awhile since I last installed it but I think it was just a case of declining the software offer. Maybe we'll see things change with this in upcoming versions but a couple of AVs have falsely detected the installer as PUP because of the software offers. Solution: use offline installer.

 

[TairikuOkami]

I have lost my faith in Comodo a long time ago. When you realize, that most signed malware uses Comodo certificates.

 

[Soulbound]

There has been some discussion about Fusion over the comodo forums.

This was at some point mentioned there:
FusionCore is PUP installer, not a malware installer.

 

[ErzCrz]

I have lost my faith in Comodo a long time ago. When you realize, that most signed malware uses Comodo certificates.

The funny thing is it was all Norton Certificates for malware not that long ago. Anyway, we'll just have to wait and see what the future holds.

 

[Soulbound]

As @ErzCrz said, offline installer doesnt contain the bundled comodo stuff.
CIS Premium Offline Installer also does not contain Internet Security Essentials, which according to their FAQ, only works with Internet Explorer at this moment still (in other words, useless, unless they havent updated their version 12 FAQ)

 

[Moonhorse]

Fusioncore is used as adware bundler, thats why its detected by every av...comodo just uses it as bundler too, but theres nothing suspicious about it in this case

 

[koloveli]

comodo internet is free and protected PCs;
others companies software antivirus offer bundled, then if think about it... not used devices would return read books

 

[Soulbound]

"mystery solved" and all relevant info is already available in this thread in relation to Fusion.

As such, locking thead.