PDM:Trojan.Win32.Generic

[Saiko]

Recently I started receiving notifications like this, Kaspersky complains about the browser exe file, suggests deleting it, deleting it and then making a copy, and so on in a circle. I have read about similar problems, but I would like to know the answer directly
P.s: I am writing from a translator, so I apologize for some awkwardness and possible errors, thanks in advance.

[harlan4096]

Welcome to Kaspersky Community.

 

Please, provide version of K. product installed.

 

Is that the right folder for an Opera GX update? Maybe a false positive 🤔

[Axllord]

Regarding the previous post, the same thing has been happening to me. Kasperky detects suspicious behavior from a "Trojan.Win32.Generic"
The Kasperky version I have is 21.20.8.505

[dima 212 342]

from me: i just uninstall opera gx and get dr web search trojan on my pc and kaspersky send him to quarantine

[harlan4096]

I'm installing OperaGX in a virtual machine with KPremium 21.20, to try to reproduce the issue.

[dima 212 342]

Только что, harlan4096 сказал:

I'm installing OperaGX in a virtual machine with KPremium 21.20, to try to reproduce the issue.

Ok tell if u search something dr web tell me i dont have any trojans

[harlan4096]

So, probably it's a K. false positive, the OperaGX installer has no detection, but that PDM detection You got comes from System Watcher on execution behavior...

[dima 212 342]

Thanks for helping I just been scared (sorry for my english i m russian english Level B1) I dowland malwarebytes dr web curceit 

[harlan4096]

No worries, I'm Spanish 😉

[dima 212 342]

3 минуты назад, harlan4096 сказал:

Goodbye Thanks for helping i put them all in quartine Have a nice day!

 

[harlan4096]

Hum this is very weird 🤔 I've tried several times and the installation stuck here, and does not download anything...

 

 

Ok, I finally managed to get the full offline installer, and just installation ended:

 

[dima 212 342]

13 минут назад, harlan4096 сказал:

Hum this is very weird 🤔 I've tried several times and the installation stuck here, and does not download anything...

 

 

Ok, I finally managed to get the full offline installer, and just installation ended:

 

oh ok this is a false positive

[harlan4096]

But this PDM detections to be fixed needs to be reported to Support, collecting K. traces while reproducing the issue.

 

[Saiko]

2 часа назад, harlan4096 сказал:

But this PDM detections to be fixed needs to be reported to Support, collecting K. traces while reproducing the issue.

 

The fact that I'm not the only one who's faced this is a relief. I was surprised when Kaspersky sent me a warning about the suspicious behavior of Opera GX, which I have been using for 2 years. At that time, all I could think about was that it might be some kind of mistake, and driven by curiosity, I ended up here. 

PS: of course, I was late with the answer, but still, as for the version, it is the most up-to-date, the folder for browser updates is also where it is needed. I received a warning about the browser threat only today when I launched Windows. At the moment, I have placed the "suspicious" file in the exceptions. Thank you very much for testing and confirming that such a problem really exists, I wish you good luck)

[harlan4096]

It seems the issue it is with the last version of OperaGX, released today...

 

I already collected traces, and will report to K. Support tomorrow in the morning.

[Danila T.]

7 hours ago, harlan4096 said:

It seems the issue it is with the last version of OperaGX, released today...

 

I already collected traces, and will report to K. Support tomorrow in the morning.

Hi!

Please send me INC number.

[harlan4096]

It seems the issue is fixed now:

 

 

I could complete the installation this time and no detection anymore from K.

 

[sevensix]

Hello everyone! 
I also ran into this problem yesterday.
In the end, can anyone tell from the analysis of the file what it was? Is it a false positive or a virus? I haven't seen a definite answer yet. Thanks!

[harlan4096]

False positive 🙂

 

[sevensix]

10 минут назад, harlan4096 сказал:

False positive 🙂

 

Thank you so much for answer! 
I was in a panic, I wanted to reinstall windows)

[harlan4096]

No problem, as K. detected and eliminated the possible threat, even rolling back changes..., as You can see in the captures I uploaded yesterday 🙂