Under Windows 10 Pro, Kaspersky System Watcher deleted "Rebuilder.exe" file, which is critical to building a recovery environment for use with the ArcServe / StorageCraft ShadowProtect application.

Anyone have any suggestions on how to build the "StorageCraft Recovery Environment" for Windows, while using Windows 10 Pro?  Thanks.

 

Event: Object deleted
Application: StorageCraft Recovery Environment Builder
User: LENOVOWP540\graybeered
User type: Active user
Component: System Watcher
Result description: Deleted
Type: Trojan
Name: PDM:Trojan.Win32.Generic
Threat level: High
Object type: Process

See  ArcServe StorageCraft Recovery Environment for general background.

Welcome to Kaspersky Community.

 

Please provide exact version of K. product installed.

 

You may try to add an exclusion in Settings -> Security Settings -> Exclusions and actions on object detection -> Manage Exclusions -> Add:

 

 

Select the file in File or Folder, and in Object, copy/paste the exact detection: PDM:Trojan.Win32.Generic, then Add.

 

Anyway, this is an on execution behavior detection (Proactive Detection Module) from System Watcher module, and maybe it should be tweaked, if still not working that exclusion, then You should report to official K. Support, They probably will ask You to reproduce the issue collecting product traces.

Interesting. I just got a "UDS:Trojan.MSIL.Crypt.ifca" detection by Total Security. Same setup, same problem.