King Posted February 28, 2022 Author Share Posted February 28, 2022 Yesterday i opened a game on my Pc that i play everyday since a half year. A few seconds after i opened it, Kaspersky internet security said that i have a trojaner on the file of the game. The trojaner got deleted by Kaspersky, but im still scared if it was a trojaner from my phone, because 2 days ago i misclicked on an add pop up. Kaspersky didnt showed any warnings on my Network. Link to comment Share on other sites More sharing options...
Schulte Posted February 28, 2022 Share Posted February 28, 2022 Hello @King, Welcome.Can you please upload the 'idkr.exe' here (and possibly trigger a reanalysis)?https://opentip.kaspersky.com/ Link to comment Share on other sites More sharing options...
King Posted February 28, 2022 Author Share Posted February 28, 2022 Hello @King, Welcome. Can you please upload the 'idkr.exe' here (and possibly trigger a reanalysis)? https://opentip.kaspersky.com/ Did it, btw i asked a developer of the game what that was and he said it was just a wrong warning Link to comment Share on other sites More sharing options...
Wesly.Zhang Posted March 29, 2022 Share Posted March 29, 2022 On 2/28/2022 at 11:45 PM, King said: Did it, btw i asked a developer of the game what that was and he said it was just a wrong warning Hello, @King CVE-2018-8174 is a Windows VBScript Engine Code Execution Vulnerability. Due to a code execution vulnerability in the VBScript script execution engine (vbscript.dll), an attacker can embed malicious VBScript into an Office file or website. Once the user accidentally clicks, a remote attacker can obtain the current user permission to execute the malicious code in the script . My question is that Does this game need vbscript.dll? As I think, this type detection of such names has a small chance of false positives. The exploit code is visible online. Some special strings may be used to detect exploit code. So I think you should use this program carefully. Regards. 3 Link to comment Share on other sites More sharing options...
Schulte Posted March 29, 2022 Share Posted March 29, 2022 Hello @Wesly.Zhang, thank you for your help. As @King told me via PM some time ago, the message turned out to be FP. The file is no longer detected as a Trojan. 4 1 Link to comment Share on other sites More sharing options...
Wesly.Zhang Posted March 29, 2022 Share Posted March 29, 2022 38 minutes ago, Schulte said: Hello @Wesly.Zhang, thank you for your help. As @King told me via PM some time ago, the message turned out to be FP. The file is no longer detected as a Trojan. OK. ? 1 Link to comment Share on other sites More sharing options...
Recommended Posts
Please sign in to comment
You will be able to leave a comment after signing in
Sign In Now