Kaspersky and lghub_updater.exe

[David13]

Hi,

 

Turned on my gaming pc about 1 hour ago and boots up normally. Software loads and they check for updates. LG G Hub updates itself and then Kasperky goes a little nuts.

Is this just a case of Kaspersky being over zealous. It there anything else I can do to check apart from running full scans in both Kaspersky and Windows Security?

 

 

Many thanks

[r34gan]

Interesting. Same just happened to me 

 

[AntiVirusMan]

This same exact thing just happened to me. My PC suddenly restarted itself and as soon as I reached the desktop Kaspersky started deleting lghub files over and over again.

Would love to know if this was a false positive or if lghub has been compromised. 

[kawuum]

Same here. 

[Berny]

@David13   @AntiVirusMan  @r34gan 

Welcome.

Please submit your issue to  Kaspersky Virus Lab as follows :

• → https://support.kaspersky.com/b2c#contacts
• → Contact us →    Product help    → Select E-mail → Contact Support
• Form → Request Type ? → Select "Malware"
• Form → Request Topic ? → Select "False positive"
• → Contact Support

[David13]

Welcome.

Please submit your issue to  Kaspersky Virus Lab as follows :

• → https://support.kaspersky.com/b2c#contacts
• → Contact us →    Product help    → Select E-mail → Contact Support
• Form → Request Type ? → Select "Malware"

Hi Berny - those options are just not avalaible. I have to option to speak to an AI, chat or call an expert following your link there is no opion to email.

[Spicewolf]

Had the same issue after Logitech issued the new update 2021.11.8744 for Logitech G Hub

[Berny]

@David13 

Please see the screenshots below :

• → https://support.kaspersky.com/b2c#contacts
• → Contact us →    Product help    → Select E-mail → Contact Support

 

• Form → Request Type ? → Select "Malware"
• Form → Request Topic ? → Select "False positive"

 

• → Contact Support

[kawuum]

@David13   @AntiVirusMan  @r34gan 

Welcome.

Please submit your issue to  Kaspersky Virus Lab as follows :

• → https://support.kaspersky.com/b2c#contacts
• → Contact us →    Product help    → Select E-mail → Contact Support
• Form → Request Type ? → Select "Malware"
• Form → Request Topic ? → Select "False positive"
• → Contact Support

I guess the point is that we do not know of this is a false positive, right? So it might make sense to first check if others have the problem as well…

[Berny]

@kawuum Only Kaspersky Virus Lab can confirm or deny a False Positive.

[David13]

@Berny 

Hi, when clicking the link you have posted this is what I get.

 

 

[Berny]

@David13  “Choose for a communication channel”  is offering 4 options :

1. E-Mail
2. Chat
3. Phone
4. Remote assistance 

The choice is on your side.

 

[PavelPr]

I’ve seen the same thing here.

[ZelusAldune]

Yup, just turned on my gaming PC and it lost its mother freaking mind. Couldn’t figure out how to ignore it or mark it as a false positive so just ended up disabling kaspersky.

[Moonstalker]

Same here! Kaspersky just locked my whole PC and I get the same quarantine entries. I needed a hard reset and boot the system again. Curios, that's the first time I get this behavior. All other updates in the past worked fine. 

I stopped Kaspersky and did a new installation of LGHUB. Then I made an exception entry for the updater and the LGHUB program. Currently, everything works fine.

[PavelPr]

Same here! Kaspersky just locked my whole PC and I get the same quarantine entries. I needed a hard reset and boot the system again. Curios, that's the first time I get this behavior. All other updates in the past worked fine. 

I stopped Kaspersky and did a new installation of LGHUB. Then I made an exception entry for the updater and the LGHUB program. Currently, everything works fine.

The exact same thing, and I, too, needed to hard reset. For me, uninstalling and reinstalling LGHUB worked just file.

The detection is classified as “PDM:Trojan.Win32.Generic”. The “PDM” prefix stands for “Proactive Defense Module”. See definition here:

https://encyclopedia.kaspersky.com/knowledge/heuristic-and-proactive-detections/

This tells us two things:

1. This is not a signature-based detection (as in not something that’s positively classified as malware on the AntiVirus database);
2. For some reason, the Kaspersky software didn’t like something that the LGHUB updater program was doing.

[Danila T.]

Hi all,

 

We are analyzing this situation.

[Danila T.]

Please update base of our product and check status of the problem.

[jvoris]

This issue rendered my machine unusable. The only solution I could find was to uninstall Security Cloud. In light of this I am unlikely to come back.

[Danila T.]

Hello @jvoris !

Do you update the databases of our product?

[jvoris]

Hi Danila! Yes, the database was shown as fully up to date and the issue with the Logictech mouse software persisted.

[Danila T.]

Hi Danila! Yes, the database was shown as fully up to date and the issue with the Logictech mouse software persisted.

Then contact with our support team: https://support.kaspersky.com/b2c#contacts