Kaspersky KSN detecting a file in a popular game on Steam (AoM Retold)

[espresso]

Hello,

since last night there are multiple user reports on Steam forum that Kaspersky is blocking their game - Age of Mythology Retold, due to a trojan found in file PlayFabCore.Win32.143.dll.
KSN started treating it as a trojan last night. Could it be a false positive?

The file can be added to exclusions, though not many users know how to do this as it cannot be done through the popup, but manually in the settings. 

 

I'm confused because the right click check for the file shows the file is safe: 

 

 

Here's the link to VirusTotal check: 
https://www.virustotal.com/gui/file/fa2c9d91fb63289c1c06028f83aad0252797bbdc8ca9c0b782d70fbb64614763

Also, link for the scan in Kaspersky Threat Intelligence portal: 
Kaspersky Threat Intelligence Portal — Report — FA2C9D91FB63289C1C06028F83AAD0252797BBDC8CA9C0B7...

Edited September 16 by espresso

[harlan4096]

Welcome to Kaspersky Community.

 

That looks like a possible false positive on execution 🤔

 

This kind of detection (false positives) has to be reported via K. Support, they will ask you to enable K. product traces and reproduce the issue, once collected the traces, You will send to them to help to fix the issue.

[espresso]

Thanks for the reply.

I don't think I'll go through the support, it's too time consuming. I thought someone could forward this as it's impacting all users with that game...
Anyways, the pictures from my first post were corrupted. These are the screenshots:

 

[harlan4096]

I don't have that file, can You send me it, via personal message of the forum, please?

[espresso]

Sent 👍

[harlan4096]

Ok, already reported!

 

https://opentip.kaspersky.com/FA2C9D91FB63289C1C06028F83AAD0252797BBDC8CA9C0B782D70FBB64614763/results?tab=upload

[espresso]

Ok, now it's detected as malware on the threat portal. At the time I posted it was green. 

But VirusTotal now shows Kaspersky not detecting it. Strange. 

[harlan4096]

Quote

Hello,

Sorry, it was a false detection. It will be fixed.
Thank you for your help.

Best regards, Malware Analyst, Kaspersky

[espresso]

I can confirm that it's working now, the file is not detected anymore. Thank you. 

[harlan4096]

Yes, I also confirm that detection has been removed.