the scan was not detected, and After running the file, KIS detects virus / trojan riskware

[vietchuong2018]

I scanned the file virus named patcher.exe, and did not detect anything.
After that, I thought it was safe, so I copied the patcher to the installation directory and proceeded to patch.
And unexpectedly, a new file was created, after I executed patch.exe. Kaspersky has detected the virus.
Can anyone explain me about this,

Virustotal result: https://www.virustotal.com/gui/file/b9612e5428d48c7a523059d60c982087d258a1b21077474c0dbf6f1ebee91397/community

[Berny]

@vietchuong2018  Welcome.

Kaspersky has detected and blocked the malicious object “on access”.
Your system has not been infected.

 

[Guest #37]

Hi,

https://opentip.kaspersky.com/b9612e5428d48c7a523059d60c982087d258a1b21077474c0dbf6f1ebee91397/

Regards

[vietchuong2018]

nothing change

[Guest #37]

Hi,

And what do you want?

Kaspersky detects this threat as you can see in: https://opentip.kaspersky.com/b9612e5428d48c7a523059d60c982087d258a1b21077474c0dbf6f1ebee91397/

and

@vietchuong2018  Welcome.

Kaspersky has detected and blocked the malicious object “on access”.
Your system has not been infected.

 

Regards

[vietchuong2018]

Hi, thanks for your support

Please explain it to me  Why the scan did not detect trojan, but running it then detected

[Guest #37]

Hi,

Can you upload the files (patcher, patch ...) compressed with winrar and password protected=”infected” (without quotes) to https://www.upload.ee/

And send me in a private message the download link for review the samples.

Remember that Kaspersky has differents layers of protection, etc..

Kaspersky detected the malicious activity when executed and then blocked.

Regards

[Guest #37]

Hi,

Is a patcher (crack) for Acronis True Image 2020. Much antivirus considers this type of tools, Hacktools, etc..

Kaspersky Threat Intelligence Portal, says now, sample clean.

https://opentip.kaspersky.com/B9612E5428D48C7A523059D60C982087D258A1B21077474C0DBF6F1EBEE91397/

Remember than use pirate software is not recommended and/or legal.

Regards