Hi,

 

yesterday Flight Simulator 2020 (i got Steam Version) got updated. After starting the game KIS (2020 and 2021, newest database) found PDM:Exploit.Win32.Generic in “flightsimulator.exe”. The activity monitor flagged it as “suspicious behavior” and deleted the exe. Theres also a list of reg-entries (HKLM\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\...) in the monitor. So maybe the way Flight Simulator corresponds with its servers made KIS think its a trojan.

 

I could start/play the game before the update without any issues.

Hey TaKeN, 

Thanks for the logs, we are on it. 

Regards,

Igor

Update to this issue? I wanna keep a clean record in my Kaspersky logs and not just try/backup again :)

Hi @CronoK, VirusLab analysts informed this was a false detection and it will be fixed. 

Regards,

Igor

Update to this issue? I wanna keep a clean record in my Kaspersky logs and not just try/backup again :)

Yes i send all logs to Kaspersky and they find a problem ofc that was False Positive.

They repair this problem in new version of database.

 

Best Regards

 

Mod: FIXED.

So after update db i can check it`s working properly :)?

 

@TaKeN Please update DB and Reboot

Hello,

I just update database to release (2020.09.15 4:15am time) and game working properly.

No more false positive - anyone can check and confirm too a new database resolve problem?

Remember what Berny say - after update database reboot computer is required.

 

Best Regards

TaKeN

Hello there is again the same problem as 1/2 year ago Kaspersky evaluates FlightSimulator.exe as a virus and wants to delete it constantly.

Yes the same for me! Got an MSFS2020 update and now KIS wants to delete the file.

Micorsoft flight Simulator 1.15.7.0

KIS 21.3.10.391 with actual database

same here - Come on guys, my renewal is up soon - your call!

I have the same problem today. After the new update from the Microsoft flight simulator 2020 for the version 1.15.7.0 Kaspersky detects the FlightSimulator.exe as a virus.

 

Databases in Kaspersky are updated: 13.04.2021 but the problem is still there.

 

 

I have exactly the same issue here with Microsoft Flight Simulator, after updated to V1.15.7.0, my Kaspersky Internet Security detects the Flightsimulator.EXE as PDM:Exploit.Win32.Generic.nblk

The update came directly via Microsoft Store on Windows 10 Pro 20H2.

So, seeing what happened back in September 2020, this is pretty sure , again, a false positive, please solve it quickly, I was developing scenery for MSFS and now I’m stuck here…...

I currently have KISv21.2.16.590(c) with 2021/04/13 database.

Same problem. I don't know how to fix it.

Same on my Side, it want to delete FlightSimulator.exe

 

Hi all, 

We need additional information to resolve this issue:

1. Update base of our product and check problem again. if the problem persists:
2. Enable trace files. how to get
3. Reproduce problem (need run game again and reproduce detection).
4. Disable trace files.
5. Please submit a ticket to technical support via https://my.kaspersky.com/en/support and send me the incident number via PM. 

 

The same issue here in France ...

Hi,

Same problem for me…

After Microsoft Store update, launch of FS2020 is stopped by Kaspersky with warning : flightsimulator.exe as  the PDM:Exploit.Win32.Generic.nblk

I’ve tried to add in exclusions, put FS2020 in trusted applications, no way, always impossible to launch the game !

Kaspersky, please solve that :)

@forcebio@FranckM 

Please see my answer:

 

Link

 

Hi Danila,

Same issue here. I tried to follow your procedure, but it fails at the first step because the folder “SysWHist” is not accessible (no grant, even in Admin mode), so creating a zip file from it is not possible.

I also tried to exclude the main file “FlightSimulator.exe” from any protection, without success.

 

@forcebio@FranckM 

Please see my answer:

 

Link

 

Same as gside, impossible to zip...

Hi @gside 

 

Then create trace files:

 

1. Enable trace files. how to get
2. Reproduce problem (need run game again and reproduce detection).
3. Disable trace files.
4. Please submit a ticket to technical support via https://my.kaspersky.com/en/support and send me the incident number via PM. 

Hi all, 

We need additional information to resolve this issue: 

1. System Watcher log - here is the instruction how to get it. 
    
2. Traces - how to get. (Disable Automatic updates before enabling traces).

Please submit a ticket to technical support via https://my.kaspersky.com/en/support and send me the incident number via PM. 

Hello @Danila T. ,

 

I’m not able to access the  SysWHist folder, it is protected : do you have an embedded support tool for that ?

 

For traces, do you expect me to reinstall this 100+ Gb software to reproduce the issue ? Do you have a more customer friendly approach ?

 

Best regards,

 

Franck.

 

 

 

 

Hello @FranckM 

 

1. No need SysWHist folder.
2. Without trace files we can not fix this false alarm. 😔

Re @Danila T. ,

Was trying to do what you ask…

Activate the trace files, launch the game, and… works !

Solved ?

Hello @gside & @forcebio, @FranckM, 

Link

 

Otherwise, run the system in Safe mode, copy System Watcher folder, zip, upload. 

---

@FranckM, IF your Kaspersky install is 100GB+, there’s something wrong. 

 

 Thank you🙏

Flood🐳 +🐋