Kaspersky detecting suspicious activity from WPS Office

[johnbob]

Kaspersky is detecting suspicious activity from wpsoffice_11.2.0.9150.exe and it removes wps office. I haven’t had issues on previous versions of wps office. I am going to assume this is a false positive.

Is kaspersky aware of this?

[Flood and Flood's wife]

Hello @johnbob,

Welcome!

I’ve successfully installed & run wpsoffice_11.2.0.9150.exe, with no detections by Kaspersky software

Noting, the Kaspersky software automatically assigns all WPS components to Low Restricted category   If you’re unable to install & run wpsoffice_11.2.0.9150.exe, and if KAV is licensed, please raise a request via Kaspersky Technical Support; the support team will need a GSI & Windows Logs and they may request Traces, run as the issue is replicated; if Traces are required they will step you thru the necessary steps.  After submitting the case, you’ll receive an automated email with an INC+12digits reference number, then, nomally, within 5 business days, a Kaspersky Technical Support human will communicate with you, also by email, you may continue to engage with the Kaspersky Technical Team via email or by updating the INC in your MyKaspersky account. Please let us know the outcome when it’s available?  Thank you🙏 Flood🐳

[johnbob]

Thanks for testing, hmm that’s strange. I think it may be the updater in wps office causing the issue. If possible, see if you can leave it installed and see if Kaspersky detects suspicious activity.

 

[Flood and Flood's wife]

Hello @johnbob,

You’re very welcome!

Thank you for replying. 

I will certainly leave WPS installed for 7 days, and report any issues here in your Topic, in the meantime, please followup with Kaspersky Technical Support.

&

Please open KAV Reports, select All Events, select 24hrs or 7days, whichever timefame captures the detections that have occured on your system, export the Report, save as a .txt file, 📎attach📎 the Report to your Topic please? 

Thank you🙏

Flood🐳

[johnbob]

Sorry, I unfortunately removed Kaspersky right after this happened because I need to use wps at the moment. If I have time I will go ahead and install it and report my findings.

 

[Flood and Flood's wife]

Hello @johnbob,

That’s fine, thank you for letting me know👌

When you have the Report please post it, and please escalate the issue to Kaspersky Technical Support.

Thank you🙏

Flood🐳