HEUR:Trojan-Banker.Win32.Danabot.gen

[Dr_Unique]

Is this a real threat?

Kaspersky detects “HEUR:Trojan-Banker.Win32.Danabot.gen” in banking app “TD_Advanced_Dashboard_Setup.exe”

 

 

[Berny]

@Dr_Unique Welcome. Please contact Kaspersky Technical Support:

https://my.kaspersky.com/techsupport#/requests/new 

href="https://opentip.kaspersky.com" rel="noreferrer noopener" target="_blank">https://opentip.kaspersky.com → [Submit to reanalyze]

Only Kaspersky Lab can confirm or deny a FP.

[Flood and Flood's wife]

Hello @Dr_Unique,

Only Kaspersky’s Virus Lab can advise if the “threat” is real. 

1. Scan the exe using Kaspersky Threat Intelligence Portal, screen print the result so you can include it when you submit a request to support & also do the additional step - Submit to reanalyze
2. Zip the exe, name the zip archive infected; add a password to the zipped archive. 
3. Save the KAV report, showing the HEUR:Trojan-Banker.Win32.Danabot.gen events. 
4. Log a case with Kaspersky Technical Support, fill in Malware, False positive template; support may request logs, traces & other data, they will guide you; add the zipped, password protected exe & the password to the case: 

    

5. After submitting the case, you’ll receive an automated email with an INC+12digits reference number, then, normally, within 5 business days, a Kaspersky Technical Support human will be in touch, also by email, you may continue to engage with the Kaspersky Technical Team via email or by updating the INC in their MyKaspersky account.

➡ Please share the outcome with the Community when it’s available? 

Thank you🙏

Flood🐳+🐋