Win32:Dropper-LJP [Drp] during Comodo Firewall Setup - False Positive?

[DrHaze]

Simple. the installer you are downloading is not signed or has been substituted. The Avast Network/Web Shield shield aborts the download/network connection because it sees it as infected.
is there a p[rticular file that it says is infected i have extracted the 5.10 installer you said to download and extracted it completely with 7zip. i scanned it and found no threats. see attachment

[cska133]

this is a temp file in the temp folder. Look at the screenshot in my first post http://forum.avast.com/index.php?topic=113585.msg887394#msg887394. I dont think that Avast can get it when you scan the installer. L

[cska133]

and have you or can you compared the file hashes?

the hashes are identical with these on the Comodo side https://forums.comodo.com/news-announcements-feedback-cis/comodo-internet-security-5102282572253-released-t82809.0.html . Compare with http://forums.comodo.com/install-setup-configuration-help-cis/i-need-ciscf-510-or-512-t90635.0.html;msg653558#msg653558 and http://forum.avast.com/index.php?topic=113585.msg887856#msg887856

[securitest]

I use some old Firefox
(might be the cause of 'The connection to the server was reset' when I try to report at http://www.avast.com/contact-form.php?loadStyles).

Someone else could maybe try to report since the 'cispremium_installer_510.exe' is available from
http://www.cogneo.org/images/news/jan17/cispremium_installer_510.exe (link provided on the Comodo forum as I said before)

To DrHaze :
I also don't get an alert while scanning 'cispremium_installer_510.exe',
but only when actually installing (from a cis1.tmp file in the Temp folder)
The 'cispremium_installer_510.exe' (for CIS v 5.10.228257.2253) is signed, and the hashes are the ones given on the comodo forum...