Anti-virus or Kaspersky Threat Intelligence Portal. Which one should I trust more?

[Mister B]

Hello, everyone.

 

Recently, my Kaspersky Total Security (KTS) issued an alart telling me that it detected a malware on my PC, but I used the Kaspersky Threat Intelligence Portal and submitted this file for an analysis and it detected nothing, so I am in doubt which one I should trust more. I would like to hear opinion of others.

 

I am waiting for answers and thank in advance for any opinion

[Flood and Flood's wife]

Hello @Mister B, 

Welcome back!

The Kaspersky Threat Intelligence Portal does does not check the content of the website, it shows the reputation of the link, whereas the Kaspersky application/program checks the content of a website for threats before producing a verdict.

Thank you🙏

Flood🐳+🐋

[Schulte]

In addition to @Flood and Flood's wifes reply:

can you please copy us the corresponding line from the detection report?
It strongly depends on what file type the detected file is and what is the verdict.

[Mister B]

Hello, Schulte. How exactly do I copy a line from a detection report?

 

If you want to know what kind of threat was detected, my KTS detected:

 

UDS:DangerousObject.Multi.Generic

 

and

 

PDM:Trojan.Win32.Bazon.a

 

(Yes, it is two files. Both of them are part of a game)

[Schulte]

Hello @,

thank you for the verdicts.

The first one (UDS) is a detection by the cloud (KSN). This can detect malware that has not yet been added to the databases.

The second (PDM) is a detection by behavior control, the program behaves like a trojan.

In this case, I would trust your KTS rather than the 'Kaspersky Threat Intelligence Portal'. In the portal the files are not executed.

You can never rule out a false positive, but I would take the case seriously and ask the manufacturer or its community.