Virus and Ransomware related questions

I'm working with Creality Falcon A1 laser, using Falcon Design Space. Today Kaspersky decided that it's a virus and blocked it, deleting most of its files. I didn't know what to do so I clicked disinfect without restarting. Suddenly it started rolling back everything, or so it seemed so. When it finished, there was no icon on the desktop. I tried to run maintenance service of Falcon Design Space, but couldn't fix the issue. Windows said such program doesn't exist. Uninstalled Kaspersky and removed all Falcon files. Now I can't even install it again. I'm furious!

Dear Kaspersky Support Team, Our domain incrediblefinancialsolutions.com.au was previously hosted on a shared WordPress hosting account that was compromised by attackers. Several malicious files were injected without our knowledge. After Digital Pacific (our hosting provider) confirmed the compromise, we completely deleted the entire website, removed all infected content, and migrated the domain to a brand-new, clean VPS server environment. We now host a safe static maintenance page only: https://incrediblefinancialsolutions.com.au/ There is no malware, phishing content, or suspicious activity on our domain or server anymore. We k…

Good afternoon, I work as a translator of games made in RPGM or games that use Nw.js. I had recently formatted my laptop to free up space, I installed Kaspersky, Brave and the program that I use to translate games called "Translator++". I downloaded the latest version of the program on their website: https://dreamsavior.net/download/ When I ran the program I updated it to the latest version, while Kaspersky it alerted me that the program was a High Threat Level Trojan and it told me that it was a "PDM:Trojan.Win32.Generic" It seemed strange to me because I have used that program for years while I have Kaspersky open and this has never happened to me. I suspect it …

Is this Burn_Card_Maker.exe file malware or a false positive? My file in VT had 3 detections, OpenTip Kaspersky cleaned it, and in the hybrid analysis Falcon Sandbox Reports result it was malicious. https://www.virustotal.com/gui/file/91c707f73b4a0d13d4ad0906ea9cee5925c2fa59c7f54c1d88375c81238d7d1f https://hybrid-analysis.com/sample/91c707f73b4a0d13d4ad0906ea9cee5925c2fa59c7f54c1d88375c81238d7d1f https://opentip.kaspersky.com/91C707F73B4A0D13D4AD0906EA9CEE5925C2FA59C7F54C1D88375C81238D7D1F/results?tab=upload Another person downloaded the file with the same name Burn_Card_Maker.exe other hash and it wasn't detected in VT. https://www.virustotal.com…

1) Recently, my Microsoft Defender removed a malicious file: AppData\Roaming\secure\QtWebKit4.dll (Trojan:Win32/Wacatac.C!ml) Before migrating to Microsoft Defender, I used Kaspersky Free as my main antivirus and scanned with Malwarebytes Free. 2) The files in the secure folder are dated 08/12/2024. I found a Malwarebytes Free log, and this log shows that a removal occurred on the same day the secure folder was created, 08/12/2024. 3) Are these events interconnected? And why didn't Kaspersky Free's real-time protection block and remove the malware? Only Malwarebytes Free detected and removed these files from the log, and only Microsoft Defender later removed AppD…

Kaspersky premium version: 21.23.6.614 windows 11 24.H2 OS build: 26100.6899 A few days ago Kaspersky showed a full scan result of 65 disinfected objects, and I was devastated because I never install unknown or pirated applications and After scanning the PC with multiple second opinion scanners (NPE, EEK, Hitman Pro) and taking advice from individuals of knowledge, I decided that this couldn't be a malware incident and maybe a bug. I looked into the full scan report and couldn't find any traces of malware or anything like that, and I only see corrupted, access-denied archives of 3D assets I use for work. (These files are non-executable assets that onl…

I've been having problems getting Kaspersky to move my url from blacklists and changing the category to information technology. I've reviewed it on https://opentip.kaspersky.com/ and submitted it to have it reanalyzed. I've been trying for three months now. I never hear anything back. I am signed in when I submit the request. The url is getwordpresscare.com - and the site is clean, up to date and has both Sucuri and WordFence running on it. If you check www.virustotal.com it is not listed on any other sites. How do I get feedback or get anyone at Kaspersky to review it?

i was doing some simple coding for some homework, and when i execute, i mistakenly add the wrong type of varyable when testing, asked for number, gave caracter. suddenly kasresresky detected a "trojan" on the resulting executable, and proceded to ask me for a full cleanup, i clean, whatever, but now the porgram wont work, and everytime i comple it, it just stops visual studio code from executing it, i added it to exceptions, but it may be better if the problem was solved. if its any of help, here is the c code: #include <stdio.h> int x=0,i=0,j=0; float total=0; typedef struct { char name[4][50]; int numcuenta; …

I reviewed the website https://marketsolutionsonline.com on VirusTotal and this is a legitimate website that sells us merchandise. How do we get the false postive URL removed

Hi, I keep getting this pop up warning from Kaspersky, could someone please help. "warning visit to a website searchresultsworld was prevented" This is the data from Kaspersky - Event: Visit to a website was prevented User: JD User type: Initiator Application name: msedge.exe Application path: C:\Program Files (x86)\Microsoft\Edge\Application Component: Safe Browsing Result description: Blocked Type: Threat of data loss Name: https://searchresultsworld.com/sr/754870121/SAFEFRAME.html?ule=806&(DUC=Y.390&5Vqk=&5X=&BDBX=3&CUqBX=&DB!C=..0*~ZRl&DDPX={"DDUU":"K_","DDU(L":"zuq(b qLXC","DDBJ":"","DDDU":"v4p"}&DU…

Kaspersky just found this hidden in the Firefox cache folder and the funny part is that I don't even use Firefox that much. I didn't visit any sites on this particular Firefox except Facebook. So, what sort of malware is this? A Trojan stealer or a dropper of some sort? I am running a Full Scan for now and I have uninstalled all the browsers incl Firefox, Chrome. Detection name: Trojan.JS.Agent.exz Details below. Spoiler Event: Object deleted User: DEMON-SLAYER-2\Rounak User type: Initiator Application name: avpui.exe Application path: C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.22 …

Hi, we operate a webmail server at webmail.us.opalstack.com. One of our customers reports that KIS is flagging the server as a risk of data theft. I believe this is the result of a recently-compromised mailbox belonging to one of our customers. That mailbox has been secured and the webmail server itself has no issues. Can this server please be unflagged?

After recent update, the full scan triggered many more trojans compare to last full scan. It is one of the example. uploaded to virustotal, only kaspersky and rising are positive. https://www.virustotal.com/gui/file/41c7bf31980b3932af31694e9be105b38361a41001b2ef6b44d658a7ff6c53f2/detection

A malware like Trojan.Win32.Agent.xcajyl can download other malware, this other malware can perform the malicious action, this malware can delete itself and in the next scan of antivirus free this malware that deleted itself will not have any trace and will not be detected by the scan?

A malware like Trojan:Win32/Wacatac.C!ml can download other malware, this other malware can perform the malicious action, this malware can delete itself and in the next scan of antivirus free this malware that deleted itself will not have any trace and will not be detected by the scan?

I have an auto hotkey script from a trusted friend that tracks my mouse and reports the mouse location to my music program. It's not malware but Kaspersky thinks it is. I've whitelisted it multiple times but Kaspersky doesn't care. I can't even "block" it, I can only delete it. Kaspersky is even reaching into my external hardrive backup and telling me I have to delete it. (I don't remember giving Kaspersky access to my external drives but ok) Who told Kaspersky this is malware? I would be very surprised if my friend wrote a virus. I'm 95% sure this is just a simple tool. I need to use this, so how can I force Kaspersky to leave it alone? (Unless you know …

Hi, I just downloaded and subscribed to the standard product as I was getting a lot of virus pop up messages (from fake Norton, McAfee, etc) saying that the laptop (it’s a Chromebook) was infected with viruses. However, after running the ‘full scan’ option a few times and restarting after every scan, it’s not resolving the issue! it’s driving me mad, so any advice on how to fully fix the issue would be gratefully received. Thank you!

In this my case , how are the malware QtWebKit4.dll (Trojan:Win32/Wacatac.C!ml), Caller.exe (detectsTrojan.DownLoader47.36298), and Caller.exe (TrojanPSW.Rhadamanthys) Trojan.Win32.Agent.xcajyl, Application.Fragtor.Generic, ESET-NOD32A Variant Of Generik.DWVRBFE, Win32/TrojanDownloader.Rugmi.BDB, trojan.fragtor/rugmi What is the family and type of this malware? Is it malware that accesses W10 PC files, modifies, deletes, and corrupts various data and files on the PC?

What are the names of types of malware that acess, modify, delete, or corrupt PC hdd and ssd files (Windows files and personal files, games, music, executables, ISO, IMG, RAR, ZIP, 7Z)? Does all malware have the potential to do this? In this case, how are the malware QtWebKit4.dll (Trojan:Win32/Wacatac.C!ml), Caller.exe (DrWeb detects Trojan.DownLoader47.36298), and Caller.exe (VBA32 detects TrojanPSW.Rhadamanthys) classified?

Is it true or a myth that Kaspersky Free's real-time protection performs differently in detection and activation than the Complete Scan signature database? Even though Kaspersky Free doesn't have the malware signature database? Why did the Microsoft Defender scan detect AppData\Roaming\Secure\QtWebKit4.dll (Trojan:Win32/Wacatac.C!ml) in the Complete Scan, while Kaspersky Free and Malwarebytes Free didn't detect anything in the Complete Scan? Is it possible to find out if the DLL file was created and active when detected by Virus Total Analysis? I uninstalled Kaspersky Free, and I lost the logs. https://www.virustotal.com/gui/file/935cd9070679168cfcea6aea40d68294…

Hello, I saw on virustotal that kaspersky has our site ahsquotes.com listed as malicious. However, the website is clean. Can you please clear the site or let me know how I can resolve the issue? Thank you.

I ran a full scan with Microsoft Defender on my PC and it found the file AppData\Roaming\secure\QtWebKit4.dll (Trojan:Win32/Wacatac.C!ml). But before using Defender, I had run a full scan with Malwarebytes Free and Kaspersky Free and found nothing. Why did it detect this now? Is this type of malware the kind that modifies, deletes, or corrupts files on the PC?

I have a problem with the Rhadamanthys PSW trojan. Kaspersky finds it in the path: pmem:\C:\Windows\SysWOW64.I also tried cleaning in Safe Mode and there is no change. I checked the detected "infected" svchost.exe file from the SysWOW64 directory online, and nothing unusual is reported. After cleaning without restarting, Kaspersky reports infection of e.g. Firefox tabs, Twitch... programs that are currently active. Ignoring and adding to exceptions does not work. To open the infected file from the antivirus I need a special program to read from pmem:.

Hello support, i encounter some problems on my KAV for a past year and i never ask for help, but now this issue is getting more and more annoying. I'm using allot of protected programs from auto industry and they are protected (more or less). After i put a file on exclusion zone, in 2-3 seconds i got another notification becasue KAV found another threat in the same file , but that file is on exclusion zone. I try calculating hash code, using protection component as ALL component. All in is vain. Any idea please? Only logic solution is to uninstall KAV. I cannot work like this!

Hello, I recently visited a site called "handel.lol," and when I tried to open the camera, the site attempted to download files and request temporary keys. This behavior really worried me. I use Kaspersky password manager, and now I’m concerned whether my passwords or other sensitive data could be at risk after visiting this site. Was this site a troll or was it actually trying to steal my data? Also, my antivirus (Kaspersky) did not block this activity. Could my data really be at risk since there was no protection or alert from my security software? I’d really appreciate any insights or advice. Thank you in advance for your help.