<?xml version="1.0"?>
<rss version="2.0"><channel><title>Virus and Ransomware related questions Latest Topics</title><link>https://forum.kaspersky.com/forum/virus-and-ransomware-related-questions-157/</link><description>Virus and Ransomware related questions Latest Topics</description><language>en</language><item><title>My domain has been flagged</title><link>https://forum.kaspersky.com/topic/my-domain-has-been-flagged-40461/</link><description><![CDATA[<p>
	Hi there, <br />
	I see that your website/application has put my domain on phishing category which may be happen as in last year it was hacked but now it's clean and running,
</p>

<p>
	so please take a look and unflag my domain softlinkx.com
</p>

<p>
	Thanks
</p>
]]></description><guid isPermaLink="false">40461</guid><pubDate>Sat, 06 Apr 2024 18:35:46 +0000</pubDate></item><item><title>My site is marked as dangerous by Kaspersky</title><link>https://forum.kaspersky.com/topic/my-site-is-marked-as-dangerous-by-kaspersky-40358/</link><description><![CDATA[<p>
	Hello!
</p>

<p>
	 
</p>

<p>
	Customer reported me that he can't open my site and see notice by Kaspersky. I've already scanned my site by all available instruments and haven't found any viruses. Could you please recheck it? <span class="ipsEmoji">🙏</span>
</p>

<p>
	 
</p>

<p>
	 
</p>

<p><a href="https://forum.kaspersky.com/uploads/monthly_2024_04/photo_2024-04-03_20-17-06.jpg.4250f56c18a4a815cff2f896c889960d.jpg" class="ipsAttachLink ipsAttachLink_image" ><img data-fileid="18921" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" data-src="https://forum.kaspersky.com/uploads/monthly_2024_04/photo_2024-04-03_20-17-06.thumb.jpg.171534e12d27ad2463aca721ce092d0e.jpg" data-ratio="68.8" width="500" class="ipsImage ipsImage_thumbnailed" alt="photo_2024-04-03_20-17-06.jpg"></a></p>]]></description><guid isPermaLink="false">40358</guid><pubDate>Wed, 03 Apr 2024 18:21:01 +0000</pubDate></item><item><title>Website Blacklist Removal</title><link>https://forum.kaspersky.com/topic/website-blacklist-removal-40376/</link><description><![CDATA[<p>
	<span style="background-color:#ffffff;color:#444444;font-size:14px;">Please I have my website https://www.idico-idi.com.vn, which does not have a malware now. I totally cleaned it but Kaspersky keeps flagging my domain as dangerous. Kindly reanalyze for me. Help me remove the blacklist. Thank you!</span>
</p>
]]></description><guid isPermaLink="false">40376</guid><pubDate>Thu, 04 Apr 2024 02:51:42 +0000</pubDate></item><item><title>Network attack detected by Scan.Generic.PortScan.TCP</title><link>https://forum.kaspersky.com/topic/network-attack-detected-by-scangenericportscantcp-39790/</link><description><![CDATA[<p>
	Hello,
</p>

<p>
	Not long ago, I started receiving messages saying that my IP address was being attacked, by a software called Scan.Generic.PortScan.TCP. What must I do? Is my computer in danger? Thanks in advance.
</p>
]]></description><guid isPermaLink="false">39790</guid><pubDate>Sun, 17 Mar 2024 11:19:06 +0000</pubDate></item><item><title>False Malware</title><link>https://forum.kaspersky.com/topic/false-malware-40338/</link><description><![CDATA[<p>
	Good morning, since yesterday I have had a problem due to very unpleasant behavior regarding the creation of an executable file. During compilation, my Kaspersky Antivirus software reports that the .exe file contains malicious software: HEUR:Trojan-Spy.MSIL.Bobik.gen
</p>

<p>
	In fact, there are no viruses or any other harmful code in the mentioned file. There may be some suspicious strings in this EXE file. Could you inspect and resolve this issue please?
</p>

<p>
	I emphasize that using this version of the file it was working since 03/26/2024 and previous versions also for at least five years and everything was always correct - until 04/02/2024, when the problem appeared out of nowhere.
</p>

<p>
	If I pause AV protection everything works correctly and the installation file is created. However, after resuming protection, the created file is labeled as described above and Kaspersky deletes it.
</p>

<p>
	Thanks.<br />
	Cintia
</p>
]]></description><guid isPermaLink="false">40338</guid><pubDate>Wed, 03 Apr 2024 10:01:56 +0000</pubDate></item><item><title>New Tab Page Hacked</title><link>https://forum.kaspersky.com/topic/new-tab-page-hacked-40276/</link><description><![CDATA[<p>
	I all of the sudden have a new set of links showing up on my google chrome browser. See attached. How do I change it back? Is that from a malware?
</p>

<p><a href="https://forum.kaspersky.com/uploads/monthly_2024_04/NewTabpageLinks.png.701f7fb7e94da17fdfb03363801c77d3.png" class="ipsAttachLink ipsAttachLink_image" ><img data-fileid="18886" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" data-src="https://forum.kaspersky.com/uploads/monthly_2024_04/NewTabpageLinks.thumb.png.eec8868c316cdc38cb46cb3398f6bf86.png" data-ratio="51" width="500" class="ipsImage ipsImage_thumbnailed" alt="New Tab page Links.png"></a></p>]]></description><guid isPermaLink="false">40276</guid><pubDate>Tue, 02 Apr 2024 16:46:37 +0000</pubDate></item><item><title>Stubborn malware/virus</title><link>https://forum.kaspersky.com/topic/stubborn-malwarevirus-40183/</link><description><![CDATA[<p>
	Hello all. I've got the malware/virus blues. Despite the installation of Kaspersky plus, and a deep scan, I still have these annoying popup ads on my laptop. In addition, they're interfering with Medieval Total War 2. Here are the pics. I couldn't screenshot the ads, so I used my phone instead. I'm also using Windows 10. Any help would be appreciated. 
</p>

<p><a href="https://forum.kaspersky.com/uploads/monthly_2024_04/kaspersky1.jpg.fe2e127d75d536a6f192e2ec2af7f73b.jpg" class="ipsAttachLink ipsAttachLink_image" ><img data-fileid="18831" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" data-src="https://forum.kaspersky.com/uploads/monthly_2024_04/kaspersky1.thumb.jpg.dac1826fd93a5fb4b63924c5650db90c.jpg" data-ratio="75" width="500" class="ipsImage ipsImage_thumbnailed" alt="kaspersky1.jpg"></a></p>
<p><a href="https://forum.kaspersky.com/uploads/monthly_2024_04/kaspersky2.jpg.90cd013fbac4d411b607fc96acd05be0.jpg" class="ipsAttachLink ipsAttachLink_image" ><img data-fileid="18832" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" data-src="https://forum.kaspersky.com/uploads/monthly_2024_04/kaspersky2.thumb.jpg.8ead8a444fc1bd25c7d3daf4fd6f9f75.jpg" data-ratio="75" width="500" class="ipsImage ipsImage_thumbnailed" alt="kaspersky2.jpg"></a></p>
<p><a href="https://forum.kaspersky.com/uploads/monthly_2024_04/kaspersky3.jpg.2614480e6b12ed7b6eb36546d07162a0.jpg" class="ipsAttachLink ipsAttachLink_image" ><img data-fileid="18833" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" data-src="https://forum.kaspersky.com/uploads/monthly_2024_04/kaspersky3.thumb.jpg.bfb3157bb7584c58dfd0d1be615491b5.jpg" data-ratio="75" width="500" class="ipsImage ipsImage_thumbnailed" alt="kaspersky3.jpg"></a></p>
<p><a href="https://forum.kaspersky.com/uploads/monthly_2024_04/kaspersky4.jpg.e3584e73bb42fa629e1e7a45caea57f9.jpg" class="ipsAttachLink ipsAttachLink_image" ><img data-fileid="18834" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" data-src="https://forum.kaspersky.com/uploads/monthly_2024_04/kaspersky4.thumb.jpg.d1b6be70c931d95c34e0b95f4d34141c.jpg" data-ratio="75" width="500" class="ipsImage ipsImage_thumbnailed" alt="kaspersky4.jpg"></a></p>]]></description><guid isPermaLink="false">40183</guid><pubDate>Mon, 01 Apr 2024 23:38:58 +0000</pubDate></item><item><title>KIS Detection/Block In Browser ct-ajax.js Further Action?</title><link>https://forum.kaspersky.com/topic/kis-detectionblock-in-browser-ct-ajaxjs-further-action-40146/</link><description><![CDATA[<p>
	Hello,
</p>

<p>
	Advice sought with gratitude on any further action required.
</p>

<p>
	Browsing    https : //www.chinese-tools.com/blog/     KIS detected and blocked on heuristic analysis Object Path:     https : //aws-ajax.com/    Object Name: ct-ajax.js
</p>

<p>
	Code: not-a-virus:HEUR:AdWare.Script.Generic, MD5: 3FE507553728BF6136C90179E183934A.
</p>

<p>
	Scanning with URL VOID for   https : //aws-ajax.com/   showed IP address 190.2.139.23.
</p>

<p>
	Other posts such as    https : //forum.avast.com/index.php?topic=326224.0    suggest it is a WPAD.dat attempt attack.
</p>

<p>
	 
</p>

<p>
	As KIS blocked, should I check or action anything further?
</p>

<p>
	Thank you for any advice, I appreciate your time.
</p>

<p>
	 
</p>

<p>
	Browser used was Chrome (123.0.6312.86, current main branch build).
</p>

<p>
	Windows 10 Build 19045
</p>

<p>
	KIS 21.3.10.391
</p>
]]></description><guid isPermaLink="false">40146</guid><pubDate>Sat, 30 Mar 2024 21:55:08 +0000</pubDate></item><item><title>what is this "Trojan.Multi.LockedFolder.a" in "Kaspersky Lab Setup Files"?</title><link>https://forum.kaspersky.com/topic/what-is-this-trojanmultilockedfoldera-in-kaspersky-lab-setup-files-39982/</link><description><![CDATA[<p>
	Hi,
</p>

<p>
	Today morningk, when i about th start using my laptop, i noticed a prompt stated about malicious object and asking the next course of action.
</p>

<p>
	Without thinking much, i clicked disinfect option. After it completed, i realised that the Kasperksy is running a background scan, which i have turned off permanently. 
</p>

<p>
	The malicious object with name "Trojan.Multi.LockedFolder.a" was located in "Kaspersky Lab Setup Files". However this object was never been flagged during my weekly full scan at all. The setting for my weekly full scanning can be seen on 2nd and 3rd screenshots.
</p>

<p>
	Hence I was anxious wondering how long has this malicious object been sitting in my computer given that I never turn on the background scan option given there is no setting can be configured for this background scan except to switch on / off.
</p>

<p>
	While I am pretty confident that my settings for full scan are on high end scanning setting but unable to detect this malicious object.
</p>

<p>
	Hence what's the underlying setting/option in background scan that need to be turn on in full scan setting so that such malicious object can be detected in future?
</p>

<p>
	Please advice.
</p>

<p>
	Thanks
</p>

<p><a href="https://forum.kaspersky.com/uploads/monthly_2024_03/20240326_070536.png.70053334c13358168fc117a4a2955afd.png" class="ipsAttachLink ipsAttachLink_image" ><img data-fileid="18635" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" data-src="https://forum.kaspersky.com/uploads/monthly_2024_03/20240326_070536.thumb.png.643fa7b60630f1346823591817010537.png" data-ratio="36.6" width="500" class="ipsImage ipsImage_thumbnailed" alt="20240326_070536.png"></a></p>
<p><a href="https://forum.kaspersky.com/uploads/monthly_2024_03/20240326_171304.png.d0acc2b0d5f822a28c8fc8779ee713ff.png" class="ipsAttachLink ipsAttachLink_image" ><img data-fileid="18636" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" data-src="https://forum.kaspersky.com/uploads/monthly_2024_03/20240326_171304.thumb.png.7e583be38580aef5c353a1f0b8e78c9c.png" data-ratio="193.8" width="258" class="ipsImage ipsImage_thumbnailed" alt="20240326_171304.png"></a></p>
<p><a href="https://forum.kaspersky.com/uploads/monthly_2024_03/20240326_171440.png.7c8dc71677b3ab3ef57b12650400e7f1.png" class="ipsAttachLink ipsAttachLink_image" ><img data-fileid="18637" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" data-src="https://forum.kaspersky.com/uploads/monthly_2024_03/20240326_171440.thumb.png.c2ca374766ec1d61a80e8a2cbc06905d.png" data-ratio="49" width="500" class="ipsImage ipsImage_thumbnailed" alt="20240326_171440.png"></a></p>]]></description><guid isPermaLink="false">39982</guid><pubDate>Tue, 26 Mar 2024 09:22:15 +0000</pubDate></item><item><title>No response, reanalyze</title><link>https://forum.kaspersky.com/topic/no-response-reanalyze-39985/</link><description><![CDATA[<p>
	No response, reanalyze false report, the problem was with Google Drive, and as a solution I adjusted the file, instead of PDF, I changed it to MarkDown with a link to github.
</p>

<p>
	 
</p>

<p>
	https:// otcipherbot . com /api/Download/Tutoria
</p>
]]></description><guid isPermaLink="false">39985</guid><pubDate>Tue, 26 Mar 2024 10:26:47 +0000</pubDate></item><item><title>Kaspersky keeps detecting Heur:Trojan.script.generic in erdarchitect.com secure site website</title><link>https://forum.kaspersky.com/topic/kaspersky-keeps-detecting-heurtrojanscriptgeneric-in-erdarchitectcom-secure-site-website-39968/</link><description><![CDATA[<p>
	Hello,
</p>

<p>
	I am trying to connect to the ERD Architect Data Modeler website (it is "erdarchitect.com" and is an https site but for obvious reasons I am not putting the full URL here in this note) and Kaspersky keeps indicating that there is a dangerous object trying to download. This object is the Heur:Trojan.script.generic trojan. This occurs in both Firefox and Brave browsers which would be expected.
</p>

<p>
	I understand that it is possible the site is in fact infected but I would like to confirm. I recall reading on the Kaspersky site about providing the same information as above in another area of the site so it can be reviewed. Unfortunately, I cannot recall where this is to submit this. I have also included screenshots as well.
</p>

<p>
	Can someone direct me to this area so I can see if it is in fact an issue or a false positive?
</p>

<p>
	Thank you
</p>

<p>
	 
</p>

<p><a href="https://forum.kaspersky.com/uploads/monthly_2024_03/Trojan_reported_03252024.png.a3350209afa1c773ab7f48f537a943b3.png" class="ipsAttachLink ipsAttachLink_image" ><img data-fileid="18619" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" data-src="https://forum.kaspersky.com/uploads/monthly_2024_03/Trojan_reported_03252024.thumb.png.8b58f725c935c5e662380961e85cb7a7.png" data-ratio="80.4" width="500" class="ipsImage ipsImage_thumbnailed" alt="Trojan_reported_03252024.png"></a></p>
<p><a href="https://forum.kaspersky.com/uploads/monthly_2024_03/Trojan_reported_2_03252024.png.133a2800acad73e2492e4ce4dbd99eae.png" class="ipsAttachLink ipsAttachLink_image" ><img data-fileid="18620" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" data-src="https://forum.kaspersky.com/uploads/monthly_2024_03/Trojan_reported_2_03252024.thumb.png.ec295403108c58b92e92fb821b3c3a3b.png" data-ratio="80.4" width="500" class="ipsImage ipsImage_thumbnailed" alt="Trojan_reported_2_03252024.png"></a></p>]]></description><guid isPermaLink="false">39968</guid><pubDate>Mon, 25 Mar 2024 18:34:05 +0000</pubDate></item><item><title>Couldn't disinfect</title><link>https://forum.kaspersky.com/topic/couldnt-disinfect-39964/</link><description><![CDATA[<p>
	I had this for 2 days and still couldn't work
</p>

<p>
	<img alt="image.png.cb534c81304b92ea180bf185b87f98c5.png" class="ipsImage ipsImage_thumbnailed" data-fileid="18608" data-ratio="62.40" style="height:auto;" width="500" data-src="https://forum.kaspersky.com/uploads/monthly_2024_03/image.png.cb534c81304b92ea180bf185b87f98c5.png" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" /><img class="ipsImage ipsImage_thumbnailed" data-fileid="18609" data-ratio="42.21" width="398" alt="image.png.7e4d3b79dc92261d46d80ccbcd15dfc7.png" data-src="https://forum.kaspersky.com/uploads/monthly_2024_03/image.png.7e4d3b79dc92261d46d80ccbcd15dfc7.png" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" />
</p>
]]></description><guid isPermaLink="false">39964</guid><pubDate>Mon, 25 Mar 2024 13:17:22 +0000</pubDate></item><item><title>Kaspersky blocks my new website</title><link>https://forum.kaspersky.com/topic/kaspersky-blocks-my-new-website-39946/</link><description><![CDATA[<p>
	<span style="background-color:#ffffff;color:#222222;font-size:small;">I have built a new website<span> </span></span>https : //davefinances.com/<span style="background-color:#ffffff;color:#222222;font-size:small;"><span> </span><br />
	<br />
	From the day one, when i try to visit it, Kaspersky blocks my access and displays a warning message. Besides harming my website, this issue prevents me from using Kaspersky while working on my site. Consequently, I am unable to renew my subscription until this issue is resolved. I already submitted a request for review more than a month ago, but the problem has not been solved yet</span>
</p>

<p>
	<a class="ipsAttachLink ipsAttachLink_image" href="https://forum.kaspersky.com/uploads/monthly_2024_03/1.png.946f2fd3a16d53bab91433856935b844.png" data-fileid="18587" data-fileext="png" rel=""><img alt="1.png" class="ipsImage ipsImage_thumbnailed" data-fileid="18587" data-ratio="57.8" style="height:auto;" width="500" data-src="https://forum.kaspersky.com/uploads/monthly_2024_03/1.thumb.png.4bb04ad621a205ab8ee0d4f69133e5be.png" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" /></a>
</p>
]]></description><guid isPermaLink="false">39946</guid><pubDate>Sun, 24 Mar 2024 14:53:34 +0000</pubDate></item><item><title>Object is infected by HEUR:Trojan.Script.Balada.gen</title><link>https://forum.kaspersky.com/topic/object-is-infected-by-heurtrojanscriptbaladagen-39863/</link><description><![CDATA[<p>
	Good morning. I am new to using Kaspersky and I am not familiar with all its tools. It really strikes me that two of them are contradictory. Just after downloading the Cinamaker App, complementary to the ZOOM platform, I obtained a report from Kaspersky that warned me that the HEUR:Trojan.Script.Balada.Gen virus was present on a web portal that invoked the installation of the Cinameker App. I ask: Could this virus have infected my computer? I attach the screenshot I obtained.<a class="ipsAttachLink ipsAttachLink_image" href="https://forum.kaspersky.com/uploads/monthly_2024_03/CapturadePantalla2024-03-20ala(s)11_27_50a.m..png.95dd1b24f469f8d764f5a57717a4a68a.png" data-fileid="18448" data-fileext="png" rel=""><img class="ipsImage ipsImage_thumbnailed" data-fileid="18448" data-ratio="18.60" width="500" alt="CapturadePantalla2024-03-20ala(s)11_27_50a.m..thumb.png.b11ac43aff204343e3f0e20313f5fc31.png" data-src="https://forum.kaspersky.com/uploads/monthly_2024_03/CapturadePantalla2024-03-20ala(s)11_27_50a.m..thumb.png.b11ac43aff204343e3f0e20313f5fc31.png" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" /><img class="ipsImage ipsImage_thumbnailed" data-fileid="18448" data-ratio="18.60" width="500" alt="CapturadePantalla2024-03-20ala(s)11_27_50a.m..thumb.png.b11ac43aff204343e3f0e20313f5fc31.png" data-src="https://forum.kaspersky.com/uploads/monthly_2024_03/CapturadePantalla2024-03-20ala(s)11_27_50a.m..thumb.png.b11ac43aff204343e3f0e20313f5fc31.png" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" /></a>
</p>
]]></description><guid isPermaLink="false">39863</guid><pubDate>Wed, 20 Mar 2024 16:30:15 +0000</pubDate></item><item><title>&#x641;&#x627;&#x64A;&#x631;&#x648;&#x633; &#x627;&#x644;&#x641;&#x62F;&#x64A;&#x647;</title><link>https://forum.kaspersky.com/topic/%D9%81%D8%A7%D9%8A%D8%B1%D9%88%D8%B3-%D8%A7%D9%84%D9%81%D8%AF%D9%8A%D9%87-27856/</link><description><![CDATA[<p>
	لقد اصاب الجهاز الكمبيوتر فايروس الفدية قبل استخدام المكافح الفيروس كاسبر من نوع
</p>

<p>
	norvas
</p>

<p>
	هل يوجد حل
</p>
]]></description><guid isPermaLink="false">27856</guid><pubDate>Sat, 24 Sep 2022 13:14:35 +0000</pubDate></item><item><title>My site was tagged as phishing</title><link>https://forum.kaspersky.com/topic/my-site-was-tagged-as-phishing-39833/</link><description><![CDATA[<p>
	Hello Kaspersky!
</p>

<p>
	My website, bagrola . com . br was tagged as phishing by Kaspersky.
</p>

<p>
	I asked for a revision at <a href="https://opentip.kaspersky.com/?tab=web" rel="external nofollow">opentip</a> two days ago, so I'm wondering what is the ETA, or, if it was rejected, the reason for that.<span> </span>
</p>

<p>
	Thanks in advance!
</p>
]]></description><guid isPermaLink="false">39833</guid><pubDate>Tue, 19 Mar 2024 15:12:23 +0000</pubDate></item><item><title>Kaspersky blocks installation of official software Epos Connect due to PDM:Trojan.Win32.Generic</title><link>https://forum.kaspersky.com/topic/kaspersky-blocks-installation-of-official-software-epos-connect-due-to-pdmtrojanwin32generic-39788/</link><description><![CDATA[<p>
	Hi,
</p>

<p>
	I'm trying to install EPOS Connect on my pc but Kaspersky blocks the installation due to PDM: Trojan.Win32.Generic.
</p>

<p>
	Epos Connect is the official software for my headset that I use for work.
</p>

<p>
	<img alt="image.png.cc466cf49096c75068f44278a33ee8d6.png" class="ipsImage ipsImage_thumbnailed" data-fileid="18358" data-ratio="39.52" style="height:auto;" width="210" data-src="https://forum.kaspersky.com/uploads/monthly_2024_03/image.png.cc466cf49096c75068f44278a33ee8d6.png" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" />
</p>

<p>
	Can it be that this message is false positive?
</p>

<p>
	How can I ignore this message and install the software?  I haven't found an overrule action in Kaspersky (or I don't know where to look <span>:-))</span>
</p>

<p>
	<span>My system: </span>
</p>

<ul>
	<li>
		<span>Windows 11</span>
	</li>
	<li>
		Kaspersky Plus 21.16.6.467(b)
	</li>
</ul>

<p>
	Epos software: https : //www.eposaudio.com/en/hk/software/epos-connect
</p>

<p>
	Can someone help me what I can do?
</p>

<p>
	Thanks!
</p>

<p>
	Grtz,<br />
	Davy
</p>
]]></description><guid isPermaLink="false">39788</guid><pubDate>Sun, 17 Mar 2024 10:41:58 +0000</pubDate></item><item><title>I Accidentally clicked a malicious link</title><link>https://forum.kaspersky.com/topic/i-accidentally-clicked-a-malicious-link-39764/</link><description><![CDATA[<p>
	Hi
</p>

<p>
	I accidentally clicked a link and received a report.
</p>

<blockquote class="ipsQuote" data-ipsquote="">
	<div class="ipsQuote_citation">
		Quote
	</div>

	<div class="ipsQuote_contents">
		<p>
			Event: Previously opened dangerous link detected<br />
			Application name: chrome.exe<br />
			Application path: C:\Program Files\Google\Chrome\Application<br />
			Component: Web Anti-Virus<br />
			Result description: Not processed<br />
			Type: Threat of data loss<br />
			Precision: Exactly<br />
			Threat level: High<br />
			Object type: Web page<br />
			Object path: pumb - whales . com<br />
			Reason: Cloud Protection
		</p>
	</div>
</blockquote>

<p>
	I spaced out the object path so it wouldn't be redirected there. Is my PC in trouble? If so how do I fix it?
</p>
]]></description><guid isPermaLink="false">39764</guid><pubDate>Sat, 16 Mar 2024 01:01:45 +0000</pubDate></item><item><title>Windows 11 version 23H2 build 22631.3296 Virus</title><link>https://forum.kaspersky.com/topic/windows-11-version-23h2-build-226313296-virus-39762/</link><description><![CDATA[<p>
	Kaspersky Standard
</p>

<p>
	AMD Ryzen 9 7950X
</p>

<p>
	 
</p>

<p>
	Virus = Annoying pop-up claiming I have a virus and need to install an anti-virus package located in India (yeah right).
</p>

<p>
	See the enclosed image.
</p>

<p>
	 
</p>

<p>
	Kaspersky does not remove it after a <strong>full scan</strong> operation. Please advise.
</p>

<p><a href="https://forum.kaspersky.com/uploads/monthly_2024_03/kaspersky_issue.png.83106cc1cb106627a759451bbd1663c4.png" class="ipsAttachLink ipsAttachLink_image" ><img data-fileid="18324" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" data-src="https://forum.kaspersky.com/uploads/monthly_2024_03/kaspersky_issue.thumb.png.998156dc2070778e6e56d32331cfa69c.png" data-ratio="46.2" width="500" class="ipsImage ipsImage_thumbnailed" alt="kaspersky_issue.png"></a></p>]]></description><guid isPermaLink="false">39762</guid><pubDate>Sat, 16 Mar 2024 00:29:27 +0000</pubDate></item><item><title>how to spot RATS in my pc?</title><link>https://forum.kaspersky.com/topic/how-to-spot-rats-in-my-pc-39734/</link><description><![CDATA[<p>
	hello i've been kinda concerned since theres aloot of weird stuff on my netstat that looks very odd does anyone know how to find RATS or how to remove them?
</p>
]]></description><guid isPermaLink="false">39734</guid><pubDate>Fri, 15 Mar 2024 07:25:55 +0000</pubDate></item><item><title>kapersky threat intelligence cant detect rats in dlls</title><link>https://forum.kaspersky.com/topic/kapersky-threat-intelligence-cant-detect-rats-in-dlls-39621/</link><description><![CDATA[<p>
	hello i've been using virus total for a while to spot rats and it works pretty well but when i use kapersky threat intelligence it doesnt detect the rat and says its safe
</p>

<p>
	<a href="https://www.virustotal.com/gui/file/a1d2e9ae54bb0227f48f80afdae9b16fefa2f989a6bec0ae3415bb05d5e72593/relations" rel="external nofollow">https://www.virustotal.com/gui/file/a1d2e9ae54bb0227f48f80afdae9b16fefa2f989a6bec0ae3415bb05d5e72593/relations</a>
</p>

<p>
	<a href="https://opentip.kaspersky.com/A1D2E9AE54BB0227F48F80AFDAE9B16FEFA2F989A6BEC0AE3415BB05D5E72593/results?tab=upload" rel="external nofollow">https://opentip.kaspersky.com/A1D2E9AE54BB0227F48F80AFDAE9B16FEFA2F989A6BEC0AE3415BB05D5E72593/results?tab=upload</a>
</p>

<p>
	if you wonder how i know the dll its a rat is because.
</p>

<p>
	1.-comes from a not repuateble website
</p>

<p>
	2.-its a crack
</p>

<p>
	3.-URLDownloadToFileW
</p>

<p>
	URLDownloadToFileW is normal to find in dlls that are rats
</p>
]]></description><guid isPermaLink="false">39621</guid><pubDate>Sun, 10 Mar 2024 06:21:42 +0000</pubDate></item><item><title>quick driver update</title><link>https://forum.kaspersky.com/topic/quick-driver-update-39709/</link><description><![CDATA[<p>
	Hallo!
</p>

<p>
	Habe soeben erstmals Kaspersky auf meinem Rechner installiert, der Grund war, dass am rechten unteren Bildschirmrand ein kleines quadratisches Fenster aufging mit der Meldung "quick driver update" - ich halte das für einen Virus oder sonstigen Trojaner oder Müll. Nach der Installation und vollständiger Systemprüfung erscheint das Fenster immer noch. Es lässt sich mit dem  Task Manager unter "task beenden" wegklicken.
</p>

<p>
	Weiss jemand, was das "quick driver update" ist? - ein Virus, Trojaner, sonstwas?
</p>
]]></description><guid isPermaLink="false">39709</guid><pubDate>Wed, 13 Mar 2024 20:54:14 +0000</pubDate></item><item><title>Website is infected by HEUR:Trojan.Script.Balada.gen</title><link>https://forum.kaspersky.com/topic/website-is-infected-by-heurtrojanscriptbaladagen-39639/</link><description><![CDATA[<p>
	<br />
	When I log into a website, this error will appear.<br />
	But I confirmed through the following two websites that there is no problem with the web page.<br />
	I would like to ask how I can find out what is wrong with this website?<br />
	URL: https:// www . ikonixasia . com<br />
	<br />
	<img alt="image.png.c7933601622438e2b9493d25649b47f0.png" class="ipsImage ipsImage_thumbnailed" data-fileid="18140" data-ratio="84.03" style="height:auto;" width="407" data-src="https://forum.kaspersky.com/uploads/monthly_2024_03/image.png.c7933601622438e2b9493d25649b47f0.png" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" /><br />
	<br />
	<a href="https://www.virustotal.com/g" rel="external nofollow">https://www.virustotal.com/</a><br />
	<a href="https://opentip.kaspersky.com/" rel="external nofollow">It's OK</a><br />
	<a class="ipsAttachLink ipsAttachLink_image" data-fileext="png" data-fileid="18141" href="https://forum.kaspersky.com/uploads/monthly_2024_03/image.png.1b3aafe516f6e55605402e4d49387354.png" rel=""><img alt="image.thumb.png.cc0a6f0456f1d5859eed96498ee2b85d.png" class="ipsImage ipsImage_thumbnailed" data-fileid="18141" data-ratio="60.40" style="height:auto;" width="500" data-src="https://forum.kaspersky.com/uploads/monthly_2024_03/image.thumb.png.cc0a6f0456f1d5859eed96498ee2b85d.png" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" /></a><br />
	<br />
	<a href="https://opentip.kaspersky.com/" rel="external nofollow">https://opentip.kaspersky.com/<br />
	It's OK</a><br />
	<a class="ipsAttachLink ipsAttachLink_image" data-fileext="png" data-fileid="18142" href="https://forum.kaspersky.com/uploads/monthly_2024_03/image.png.cd937663a8b515df514fe627ff8d4082.png" rel=""><img alt="image.thumb.png.64f7065630fc5052f7c8fc254f77170b.png" class="ipsImage ipsImage_thumbnailed" data-fileid="18142" data-ratio="19.60" style="height:auto;" width="500" data-src="https://forum.kaspersky.com/uploads/monthly_2024_03/image.thumb.png.64f7065630fc5052f7c8fc254f77170b.png" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" /></a>
</p>
]]></description><guid isPermaLink="false">39639</guid><pubDate>Mon, 11 Mar 2024 08:19:40 +0000</pubDate></item><item><title>Kaspersky premium detect a official Bank apps as Trojan</title><link>https://forum.kaspersky.com/topic/kaspersky-premium-detect-a-official-bank-apps-as-trojan-39684/</link><description><![CDATA[<p>
	This morning an official banking app was detect a Trojan, which is that possible?
</p>

<p>
	App was update in Play store, Samsung s24 ultral, and Android 14, and oneui6. 1
</p>

<p><a href="https://forum.kaspersky.com/uploads/monthly_2024_03/Screenshot_20240313_105908_Kaspersky.jpg.c95cafa9690a56bd5fb5e696998d664a.jpg" class="ipsAttachLink ipsAttachLink_image" ><img data-fileid="18238" src="https://forum.kaspersky.com/applications/core/interface/js/spacer.png" data-src="https://forum.kaspersky.com/uploads/monthly_2024_03/Screenshot_20240313_105908_Kaspersky.thumb.jpg.0188142614891e0c33893e41da68d624.jpg" data-ratio="216.45" width="231" class="ipsImage ipsImage_thumbnailed" alt="Screenshot_20240313_105908_Kaspersky.jpg"></a></p>]]></description><guid isPermaLink="false">39684</guid><pubDate>Wed, 13 Mar 2024 04:47:44 +0000</pubDate></item><item><title>Website scan</title><link>https://forum.kaspersky.com/topic/website-scan-39679/</link><description><![CDATA[<p>
	Hi, would you please scan https : //noteshandling.site/
</p>

<p>
	 Thanks in Advance.
</p>
]]></description><guid isPermaLink="false">39679</guid><pubDate>Tue, 12 Mar 2024 18:14:01 +0000</pubDate></item></channel></rss>
