Autodesk Maya vaccine.py infection

[justcallmenel]

Will kaspersky be able to block the recent malwares for autodesk files? Autodesk already has its own tool but it needs to load maya first and manually delete the python files before it can be fixed.  It will be nice if Kaspersky can block those python files .

This malware creates uses 2 files  the usersetup.py and vaccine.py

[Flood and Flood's wife]

Will kaspersky be able to block the recent malwares for autodesk files? Autodesk already has its own tool but it needs to load maya first and manually delete the python files before it can be fixed.  It will be nice if Kaspersky can block those python files . This malware creates uses 2 files  the usersetup.py and vaccine.py

Hello @justcallmenel, 

Welcome!

1.  Name & operating system version? 
2. Which KIS version & patch(x) is installed, on the Windows taskbar, or hidden icons, rightclick the Kaspersky icon, select About ? 
3. Do you have examples of Autodesk Maya vaccine.py infection in your system - post full screen images please? 
4. In KIS Reports, are there any events that match “usersetup.py, vaccine.py, Maya & or Python”  → save the Report, attach to your reply please? 
5. Have you followed all of the Maya guidance? 

Please let us know? 

Thank you🙏

Flood🐳+🐋

[justcallmenel]

Hi here’s my answer

 

1.  Our devices are running Windows 10
2. Latest kaspersky installed   version 21.2.16.590(b)

3.  These are the files that injects to Maya

   

   
   This is the result after you use the maya security tool
    

   

    

4. As for hte kaspersky  report, there are no entry on this

5. The files can be clean using the autodesk security tool but you have to do it manually.  like open the file first before it can be detected and clean
    

    

[Flood and Flood's wife]

Hello @justcallmenel, 

Thank you for the information👌

1. Have you followed all of the Maya guidance, about those specific files?
2. When those files are manually scanned by KIS, what is the result? 
3. Scan each file using Kaspersky Threat Intelligence Portal → post a full screen image of each scan result? 
4. Scan each file using Virus total → post a full screen image of each scan result?
5. Zip the files, name the Zip archive Infected, password protect the Zip archive, raise a case with Kaspersky Technical Support, follow the template below; explain the issue in detail, include the Maya guidance → in detail; in the problem description, make sure you put the password of the Zip archive;  Support may ask for Traces, Logs & other Data

 

• After submitting the case, you’ll receive an automated email with an INC+12digits reference number, then, normally, within 5 business days, a Kaspersky Technical Support human will be in touch, also by email, you may continue to engage with the Kaspersky Technical Team via email or by updating the INC in your MyKaspersky account.

▶ Please share the outcome with the Community when it’s available? 

Thank you🙏

Flood🐳+🐋