Virus and Ransomware related questions

Hello, I receive the following error What command or code is the problem? Detected: 17/04/2024 08:47:00 Web address: https:// parsayaran . com/ Reason: object is infected Application: HEUR:Trojan.Script.Generic

If I upload a questionable exe or program to it and it says clean, yet some of its components are flagged as "suspicious", is it still safe to run?

Hey everyone, I've encountered an issue with Kaspersky Total Security blocking access to chat.hackerai.co and flagging it as a phishing risk. Every time I attempt to visit the URL directly or even search for it on a search engine, I receive a warning message stating, "Visiting an untrustworthy website has been prevented." This seems to be a false positive, as I haven't found any credible evidence or reports suggesting that chat.hackerai.co is indeed a phishing site. Moreover, when I search for it, KSN (Kaspersky Security Network) classes it as a phishing risk, which adds to the confusion. Could anyone shed some light on why Kaspersky might be blocking this …

Hi my web site holtonprecisionaudio.com has been tagged as a Phishing and has been blocked by my local web site provider, Telstra.com Can someone please rescan my site and get it cleared. I was lead to this site below. https://www.virustotal.com/gui/domain/holtonprecisionaudio.com Kind regards Anthony Holton

Hello, Kaspersky has marked our entire domain (poke-nexus.com) and all subdomains as phishing. This started with our native application server subdomain being marked (live-srv.poke-nexus.com), and has now spread to the whole domain. The sub-domain has it's own internal server running so that the native application can use TLS without having to go through the Cloudflare CDN, which we *do* want for the main website as we utilise their caching - the same goes for the cdn sub-domain as we use the cloudflare cache to help reduce server load for shared resources. 1) The live-srv subdomain returns 444 on https which should be "No Response" to terminate the connection. …

My website "zootd.io" has been wrongly flagged for containing malware, when we most certainly do not. We are an Ecom Store. We don't have any download links, ads on the site or literally anything of the sort. I'm at a total loss as to how to solve this problem as its costing us a lot of money and we are getting a lot of comments and emails from concerned customers. Please help.

I'm running Windows 10 and the most up-to-date version of Kaspersky Total Security. Ever since yesterday KTS deletes the start .exe for the Lord of the Rings Online launcher, causing the game to fail initializing. The LotR:O launcher will redownload the .exe after closing and reopening it but KTS keeps deleting it after logging in to the launcher. I know it is Total Security doing it because pausing protection will allow the game to run like normal.

When I checked Kaspersky Threat Intelligence Portal Report Shows my website showing Flagged because of one of cloudflare IP i dont think its not good to flag because of cloudflare IP site URL: gamedrive.org cloudflare IP: 172.67.216.195

Hello, I downloaded an .exe for a program called RDR Explorer, which allows you to explore and extract the files of the game Red Dead Redemption. After scanning the .exe with Kaspersky (as I usually do with unfamiliar programs), Kaspersky flagged something in it as UDS:DangerousObject.Multi.Generic and deleted the .exe file altogether. I’m guessing it’s a false positive, as the program is open source and seems very innocuous, but I’d like to be sure. Can anyone determine if it’s safe? I’ve attached a report created by Kaspersky, if that helps. Thank you. Info: Windows 10 x64 Version 21H2 (OS Build 19044.1466) Kaspersky Security Cloud - Free / Version 21.3.10.391 (h) RDR…

Hello, Our customer recently installed our application from Google Play Store, and Kaspersky has indicated that there is a dangerous object trying to download. This object is the Trojan.AndroidOS.Obfus.a Could someone please direct me to this area so I can investigate whether it is in indeed a genuine issue or a false positive? Thank you

Helo; I am her because I want subcrite to Mac agree tool. I have a Mac mini with Sonoma.Sonce One year I have big security difficulty. I am a graphic designer and people try or pick my word on my computer. I am suspecting a sort of root kit on my Mac. Before I was sore on windows;I was an hidden virus on a lot of part on my computer.I was was erase it withKasersky rescue tool. Si I was unconect my external drive.I am thinking they are alway this hidden virus on my external drives I am thinking It have contaminated my Mac mini. My computer is sometime drive by distant. I have disconnect IPV6,upnp.I have firewall for Internet, l…

Windows 10 Pro 19045.4170 Kaspersky total security with official subscription hello im using this software called realtime voice changer https : //github.com/w-okada/voice-changer/blob/master/README_en.md old version 1.5.3.17b is working alright without any notifications from KTS today i tried to install and run latest version which is 1.5.3.18a and KTS gives me notification says its trojan Event: Process terminated Application: MMVCServerSIO.exe User: DESKTOP-3RMDC6P\admin User type: Active user Component: System Watcher Result description: Terminated Type: Trojan Name: PDM:Exploit.Win32.Generi…

Every few weeks I'll get notified it got detected in-memory, I let KS do its full clean, full scan, it finds nothing on disk, repeat. Win 10 22H2 (19045.4170) Kaspersky Standard 21.16.6.467(c) Any idea on how to find out where its hiding and clean it out?

Hi there, I see that your website/application has put my domain on phishing category which may be happen as in last year it was hacked but now it's clean and running, so please take a look and unflag my domain softlinkx.com Thanks

Hello! Customer reported me that he can't open my site and see notice by Kaspersky. I've already scanned my site by all available instruments and haven't found any viruses. Could you please recheck it? ?

Please I have my website https://www.idico-idi.com.vn, which does not have a malware now. I totally cleaned it but Kaspersky keeps flagging my domain as dangerous. Kindly reanalyze for me. Help me remove the blacklist. Thank you!

Hello, Not long ago, I started receiving messages saying that my IP address was being attacked, by a software called Scan.Generic.PortScan.TCP. What must I do? Is my computer in danger? Thanks in advance.

Good morning, since yesterday I have had a problem due to very unpleasant behavior regarding the creation of an executable file. During compilation, my Kaspersky Antivirus software reports that the .exe file contains malicious software: HEUR:Trojan-Spy.MSIL.Bobik.gen In fact, there are no viruses or any other harmful code in the mentioned file. There may be some suspicious strings in this EXE file. Could you inspect and resolve this issue please? I emphasize that using this version of the file it was working since 03/26/2024 and previous versions also for at least five years and everything was always correct - until 04/02/2024, when the problem appeared out of n…

I all of the sudden have a new set of links showing up on my google chrome browser. See attached. How do I change it back? Is that from a malware?

Hello all. I've got the malware/virus blues. Despite the installation of Kaspersky plus, and a deep scan, I still have these annoying popup ads on my laptop. In addition, they're interfering with Medieval Total War 2. Here are the pics. I couldn't screenshot the ads, so I used my phone instead. I'm also using Windows 10. Any help would be appreciated.

Hello, Advice sought with gratitude on any further action required. Browsing https : //www.chinese-tools.com/blog/ KIS detected and blocked on heuristic analysis Object Path: https : //aws-ajax.com/ Object Name: ct-ajax.js Code: not-a-virus:HEUR:AdWare.Script.Generic, MD5: 3FE507553728BF6136C90179E183934A. Scanning with URL VOID for https : //aws-ajax.com/ showed IP address 190.2.139.23. Other posts such as https : //forum.avast.com/index.php?topic=326224.0 suggest it is a WPAD.dat attempt attack. As KIS blocked, should I check or action anything further? Thank you for any advice, I appreciate your time. …

Hi, Today morningk, when i about th start using my laptop, i noticed a prompt stated about malicious object and asking the next course of action. Without thinking much, i clicked disinfect option. After it completed, i realised that the Kasperksy is running a background scan, which i have turned off permanently. The malicious object with name "Trojan.Multi.LockedFolder.a" was located in "Kaspersky Lab Setup Files". However this object was never been flagged during my weekly full scan at all. The setting for my weekly full scanning can be seen on 2nd and 3rd screenshots. Hence I was anxious wondering how long has this malicious object been sitting in m…

No response, reanalyze false report, the problem was with Google Drive, and as a solution I adjusted the file, instead of PDF, I changed it to MarkDown with a link to github. https:// otcipherbot . com /api/Download/Tutoria

Hello, I am trying to connect to the ERD Architect Data Modeler website (it is "erdarchitect.com" and is an https site but for obvious reasons I am not putting the full URL here in this note) and Kaspersky keeps indicating that there is a dangerous object trying to download. This object is the Heur:Trojan.script.generic trojan. This occurs in both Firefox and Brave browsers which would be expected. I understand that it is possible the site is in fact infected but I would like to confirm. I recall reading on the Kaspersky site about providing the same information as above in another area of the site so it can be reviewed. Unfortunately, I cannot recall where this…

I had this for 2 days and still couldn't work