Spurious Trojan?

[tim.shaw]

I'm getting :

Event: Process terminated
Application: SpringToolSuite4.exe
User: DESKTOP-xxxxx\nnn
User type: Active user
Component: System Watcher
Result description: Terminated
Type: Trojan
Name: PDM:Trojan.Win32.Generic
Threat level: High
Object type: Process
Object path: C:\Users\nnn\Software\sts-4.16.1.RELEASE

since I installed the above. It then proceeds to remove the file, and a number of others I am working on!

This is the latest version of the IDE, and I doubt if there's a trojan in it, but something thinks so ...

Previous version I was using is fine.

I wondered if the general behaviour of the IDE is triggering a 'malicious process' fault.

[Berny]

@tim.shaw Welcome.

Please submit the object on  https://opentip.kaspersky.com  and ask for reanalyze.

[harlan4096]

That will be impossible via KOTIP, since I see the installer has a bigger size, more than 560MB...

[Berny]

Thank you @harlan4096

@tim.shaw  Please upload the installer in the Cloud and share the link with Kaspersky Technical Support : https://my.kaspersky.com

[tim.shaw]

The (jar) installer I used is at :

"https://download.springsource.com/release/STS4/4.16.1.RELEASE/dist/e4.25/spring-tool-suite-4-4.16.1.RELEASE-e4.25.0-win32.win32.x86_64.self-extracting.jar"

Scanning the file (and extracted files) doesn't cause an issue. It's only after 5-10 minutes of operation that it triggers the above.

Edited November 23, 2022 by Berny
Link disabled !

[tim.shaw]

Submitted support request : ID INC000014746956,