Hello Kaspersky Community and Lab Team, I am reporting a persistent false positive issue involving a popular RPG game translation and optimization tool called Mtool. Tool Website: https://mtool.app/ Detection Type: Typically flagged as Trojan.Win64.DLLhijack.gen. Involved File: version.dll (located in various game root directories). Description of the Issue: When using Mtool to translate RPG Maker games, the tool places a version.dll file into the game's folder to enable localized text rendering and UI overlays. Kaspersky frequently flags this file as a Trojan or a DLL Hijacking attempt and deletes it. The tool is widely used by the gaming community for playing legally purchased titles in different languages. The tool uses the standard DLL Search Order Hijacking technique to hook into the game process. While this behavior mimics malware, it is a functional requirement for the translation engine to work without modifying the original game's encrypted assets. Please note that Mtool generates or modifies the version.dll specifically for each game engine instance. As a result, the hash value across different game directories, making individual file exclusions ineffective. Could the Lab team please analyze the core logic of the Mtool injection component and consider creating a generic signature or a heuristic whitelist for its behavior? This would prevent thousands of users from having to manually disable their protection when playing translated games. I have attached a few sample version.dll files from different games for comparison (Link: https://limewire.com/d/C3PI5#KldYl4rcxt Password: infected). Best regards.

Здравствуйте, в логе написано почему это происходит, изучите внимательно лог.

https://support.kaspersky.ru/kes-for-windows/12.11/diagnostics/15547

Здравствуйте, переходите на KES, KSWS EOL уже.

После подключения к сети организации через Wi-Fi, не удается подключиться к домашней сети. Подозреваю, что дело в какой-то политике в KSC, но нигде не могу найти нужного правила.

I used Kaspersky and noticed that the free version has an expiration date. I'm very afraid of the free version expiring.

I live in Egypt and I like Kaspersky because it's very strong in terms of protection. I'm wondering if it's available for download in Egypt. My second question is, does it update automatically in the background, or do I have to update it manually from your official website?

Hi I have this issue as well it auto update and then now i cannot launch my vm as ever time it crashes my vm is using Ubuntu