Virus and Ransomware related questions

I'm working on TestArchitect (TA). While installing TA on the Windows 10 machine, Kaspersky detected it as a trojan virus: PDM:Trojan.Win32.Generic and deleted the setup file. TA is an enterprise product and has signed digital. Additionally, I'm using "InstallShield" to pack the build and I also try to remove some actions in the build but the issue is still happening. I see that this is a false positive. I was wondering if you could review this false positive and fix it. Note: the setup file to analyze is bigger than 256 Mb (> 600 Mb), so I can not upload through https://opentip.kaspersky.com/?tab=upload. Please support me in another way to send you the file. …

Hello! I submitted my website to be re-analyzed and while the website screenshots were updated, it was still deemed dangerous. I have fixed the CSP for my HTTPS and HTML header to use hashes. There is no input form available on my website. There should be no way for malicious code to be implemented into the website by others, to the best of my knowledge. I've included the immuniweb scan of my last security test. Since then I've changed the filler nonce-values to hashes. For some reason Wapiti says I don't have X-XSS protection but I do, through cloudflare.

Hi, I am one of the founders at Gr4vy. We are a payment orchestration platform, and as part of this, we have a hosted payment form called "Secure Fields." These fields allow our customers to collect card data in a PCI-compliant way, much like Stripe, Braintree, Adyen, and Checkout would do. We noticed last week that one of the frames we use for this product has been marked as dangerous due to phishing. We have reported it to be re-analyzed but no luck so far. This is affecting one of our customer go-lives, and I'd love to know if there's any other way to get this resolved or to get some guidance on what we might be doing that marks this as dangerous. https://ope…

everytime that i scan something that gets like 40 or 50 detections in virutototal KasperskyThreat Intelligence Portal gets no detections. Is this a problem whit the Kaspersky Threat Intelligence Portal or is it correct? https://opentip.kaspersky.com/52E798A8040650A15E1FDDD293A8091930CDAB85550DA07273198DE890F56B0A/results?tab=upload https://www.virustotal.com/gui/file/52e798a8040650a15e1fddd293a8091930cdab85550da07273198de890f56b0a https://analyze.neiki.dev/reports/52e798a8040650a15e1fddd293a8091930cdab85550da07273198de890f56b0a

Hi – I run Windows 11 v 22H2 (OS Build 22621.3007) and have Kaspersky Free, application version 21.15.8.493(a) I just detected a folder called self_files in a document-only folder. It was installed recently but not by me. Googling it, these seem to be files associated with PS3, Vita, Coreboot, or RPCS3 devices. The only game I play on this laptop is Microsoft Solitaire. It seems that sometimes these self_files are associated with malware. Kaspersky didn’t flag or delete them but it seems very fishy to me. Any thoughts?

Good evening, I ended up receiving a notification that the antivirus prevented two attempts of the same thing I mentioned in the title. I did the full check more than 15 times and nothing unusual appeared, that is, everything among the parameters. But I end up worrying, because I'm very new to this and I have tremendous paranoia. I subscribe to the premium plan and I would like someone who works on the team or someone already experienced to tell me that everything is ok. I just need confirmation that everything will be ok, I have serious problems with that. Thank you very much in advance

Hello! I work on a startup and our website is being blocked by Kaspersky. I tried using OPENTIP to scan, it says there is an infection in the 301 redirect from http to https, which is weird. I need more information about what we need to change so Kaspersky doesn't block our website: → https : //console.reav.io Thanks!

I was going to watch something in a website that I've always used and never got any kind of redirect or suspicious thing going on with it, but today something happened. When using it, I got redirected to a ''Malicious link'' (from what Kaspersky said). The thing is, Kaspersky only said they detected the Malicious Link and that it had ''probability of unauthorized software download''. No message about blocking such a thing as a download or whatsoever. I closed it in a second, but I know very well that this doesn't mean I am safe at all. I'll show the link to where it did redirect me, if anyone know something about it, please tell me if I should worry about it …

Whenever I try compiling and running my "C" script in VS Code, I get "VHO:Trojan-Ransom.MSIL.Convagent.gen" for advanced disinfection. But when I'm running the code while keeping the Kaspersky disabled I'm not getting any warning or disinfection prompt, everything was working fine.

Hello there, I'm running Kali Linux in a VM and I want to add it's traffic to exclusions(Traffic from Kali VM Only). What's the best way to do it? This is the event details. Event: We found an application that can be used by intruders to damage your computer or personal data. User: NT AUTHORITY\SYSTEM User type: System user Application name: vmnat.exe Application path: C:\Windows\SysWOW64 Component: Safe Browsing Result description: Detected Type: Software that may cause harm Name: HEUR:HackTool.Python.Impacket.gen Precision: Heuristic Analysis Threat level: Medium Object type: File Object name: dcomexec.py Object path: http://kali.cs.nycu.edu.tw/kali/pool/ma…

It found malware and now it is stuck at 39 percent and I can't restart or do anything plz help I have work to do!

Hello, My website is marked as a false positive since a while, in the past my wordpress was hacked and I removed it. Can someone please remove the restriction? The domain below. VirusTotal - Domain - loja.casadelnonno.com.br BR Rodrigo

I have got a virus that someone stole my account in facebook, instagram, steam etc. I purchased kaspersky premium and did a format in 4 from 5 disks. The last disk in very important with many files from work so i cant format it. Maybe there is something left as a virus in there. After the purchase of Kaspersky Premium and the scans, now i got a virus in my email. I got about 200+ emails about subscribtion in newsletter of variety sites. What can i do? Thank you, Eirinaios Ioannidis

Hi, When I open some pages on www.notion.so, Kayspersky warns me that it has blocked "syncRecordValues". Is it a real virus? Is there anyone who has experienced this?

anyone can help us this guys asking more money here is sample file download if need more osmething help me to resovle this issue and save world with they bad peoples hope for best https : //uploadnow.io/en/share?utm_source=LNrXGjv file type extension : SiteMGMT_log.ldf_[*****@*****.tld].NQY SiteMGMT.mdf_[*****@*****.tld].NQY All Your Files Are Locked And Important Data Downloaded ! Your Files Are No Longer Accessible Don't Waste Your Time, Without Our Decryption Program Nobody Can't Help You . If Payment Isn't Made After A While We Will Sell OR Publish Some Of Your Data . You Don't Have Much Time! Your ID : DC…

Hey, I am a new User, but I am already unhappy. Although fully secured with Kaspersky, my Private Phone which is connected to my Jobs Servers (Michelin), was hacked. I found the case. I don't know what got hacked but found the worm, see picture. How can I ad it to the infected apps list? I don't have a Laptop with me, I am on a Business Trip. But I Have Time if needed I can travel wherever you say. How big the damage done is I have to find out with the IT from Michelin. Thank You in advance, you can call/text/email me 24/7 another sleepless night, I thought I was pretty safe with Kaspersky. I am Sorry but I have no trust into Kaspersky anymore. I am ready…

Hello community, It's been a while since I've been encountering an alarming situation on my system where some of my files are behaving oddly. There are unexpected changes, and I suspect a security issue might be at play. I'm looking for advice on how to address this concern. should I re install windows or are there specific tools or methods you found effective in dealing with such potential security threats, coz I don't believe in antivirus softwares as I think they are viruses themselves. Your insights on this issue would surely help me navigate and secure my system. Thank you.

hi, i uninstalled mozzila. they will fix the vulnerability as soon as possible? or is better choose google chrome and edge? thanks a lot

Respected Members, I’ve been a long-time user of Kaspersky within my environment and have found it to be highly effective in safeguarding my system. I’m currently facing an issue with a client’s WordPress website hosted on a shared platform. The website has been equipped with several free plugins, some of which have been identified to contain viruses causing harm to the site. These viruses might have stemmed from shared hosting environments. I know that Kaspersky does not provide any WordPress plugin. Do Kaspersky recommend or support any WordPress virus guard plugin ?

My computer fell victim to the CDMX ransomware attack, which encrypted all my files with the '.CDMX' extension. The attack is indicated by the display of a '_readme.txt' file containing the ransom note and instructions on how to contact the authors of this ransomware (Pls refer to the readme file content below). Unfortunately, all my files, including those on Google Drive, were affected by the virus. Please assist me in recovering my files. ATTENTION! Don't worry, you can return all your files! All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key. The only method of recovering fi…

I am a Kaspersky Total Security user, and my website (https:// bilgintaki . com) has been flagged as a phishing site, leading to access being blocked. However, my site and my server are clean and secure. The server automatically scans sites for malicious software. Even on scanning sites like VirusTotal, it appears to be marked as harmful only by Kaspersky. On 20 November 2023, I submitted a reanalyze request through https://opentip.kaspersky.com/, but I have not received any response yet. My website still appears on the blacklist. Please let me know if there is anything we can do to expedite this process, and I would appreciate your assistance in speeding up the resolutio…

I downloaded latest apk virus from this website https : //bazaar.abuse.ch/download/cd11271f2cfe2ea2e712b4b31955d0391aef5be3d6fae132df1bbab2b817e3be/ i unzipped it and automatic virus detect didn't detect the virus, so i used Folder Scan options to scan the apk file in my Download folder but it crashes kaspersky, but when i upload the virus to virustotal, it shows that kaspersky detected the virus,so i wonder if this is a bug or not

How do I get rid of the popup, the only option is to disinfect and restart the computer etc but if I do that it deletes my radarr setup. Everytime Radarr updates Kaspersky throws a fit and I spend ages marking things as trusted and reinstalling radarr a million times

On December 22, 2023, I was attacked by the Ransom family of Djvu Ljaz. With the help of Kaspersky free antivirus I managed to localize it. Some of my files are still encrypted. I've tried all the decrypters and none of them see or recognize it. Does anyone have any ideas for decryption? Thanks in advance!

I downloaded and executed it is it safe? kaspersky detected it but i disabled kaspersky and ran it however i never installed it