Trojan.Multi.GenAutorunLnkFile.a keeps being detected and deleted but is returning [Closed]

[Shion]

For the past day or so Kaspersky has continuously detected ‘Tojan.Multi.GenAutorunLnkFile.a’  within appdata\roaming\microsoft\windows\recent\automaticdestinations.

 

Is this a false positive or a genuine issue because it’s an almost constant cycle of the programme detecting and deleting this file when the PC is in use.

I have scanned my whole PC with various products (inc Kasp) and they can find nothing. The application is indicated by Kasp to be Runtime Broker, but the error has also been triggered by Windows Explorer.

 

Any help is appreciated, cheers.

[Flood and Flood's wife]

Hello @Shion, 

Welcome!

🅰 In Windows Explorer make sure Hidden items is checked

🅱 In

C:\users\\AppData\Roaming\Microsoft\Windows\Recent Items

or

C:\users\\AppData\Roaming\Microsoft\Windows\Recent 

does the detected file actually exist?

If “yes”, zip the file, name the zip folder malware, protect the zip folder with a password, raise a request with Kaspersky Technical Support, include the zip folder, the password, a GSI & Windows Logs, images & a detailed history, ask them if the detection is correct? 

• If the detected file does not exist, do the following steps:

1. Create a System restore point.
2. For all supported browsers, export Bookmarks.
3. Run KIS Privacy Wizard, select all Strongly recommended actions, all Recommended actions & all Additional actions (if any are shown by the Wizard), at the completion of the Wizard, do not select Reboot. 
4. Export KIS Settings
5. Restore KIS Settings to Default
6. Shutdown computer using Shutdown, not Restart, power computer on, login, start KIS only.
7. Run manual KIS Database update - allow it to complete.
8. Recheck Trojan.Multi.GenAutorunLnkFile detection ?

Let us know the outcome please?

Thank you🙏

Flood🐳