virus

[son]

my Kas premium cannot scan a file.exe in which has 5 different viruses. i think Kaspersky need to improve in scan file field. 

[harlan4096]

Welcome to Kaspersky Community.

 

What do You mean with file.exe in which has 5 different viruses?

 

Do you get any warning or error from Kaspersky? what version are You using?

[son]

I have a file in .exe format, my computer will be infected with a virus if I start the program, but Kaspersky premium cannot scan for viruses. I have to use total virus on the web to scan it.

i am using the lastest version, kaspersky premium and i dont see any warning or error from kas

Edited September 9 by son

[harlan4096]

Can You upload that file to a cloud service, and send me the link to download it, via a personal message of the forum?

[son]

you mean gg drive, do you?

[harlan4096]

Got it, thanks!

[Flood and Flood's wife]

19 hours ago, son said:

I have a file in .exe format, my computer will be infected with a virus if I start the program, but Kaspersky premium cannot scan for viruses. I have to use total virus on the web to scan it.

i am using the latest version, Kaspersky premium and i don't see any warning or error from kas

Hello @son
Welcome back!

Also - additional to Moderator @harlan4096, the information "but Kaspersky premium cannot scan for viruses", is not clear - why can't Kaspersky Premium scan for viruses, when: 

1. In Windows Explorer (you) right-click the file & select KSN  -> image one
2. In Windows Explorer, (you) right-click the file & select Scan for viruses -> image 2, 2? 

• KSN result: 

3 - Kaspersky Report:

Thank you🙏
Flood🐳+🐋

[harlan4096]

In both files, I got this final verdict from K. analysts:

 

Quote

 

Hello,

No malicious software was found in the attached file.

Best regards, Ilya, Malware Analyst, Kaspersky

 

 

So, VT detections are just false positives, as very often behavior there...

[son]

On 9/10/2024 at 1:59 PM, Flood and Flood's wife said:

Xin chào@con trai
Chào mừng trở lại!

Ngoài ra - bổ sung cho Moderator@harlan4096, thông tin " nhưng Kaspersky Premium không thể quét vi-rút " không rõ ràng - tại sao Kaspersky Premium không thể quét vi-rút khi: 

1. Trong Windows Explorer (bạn) nhấp chuột phải vào tệp & chọn KSN  -> hình ảnh một
2. Trong Windows Explorer , (bạn) nhấp chuột phải vào tệp & chọn Quét vi-rút -> hình ảnh 2, 2? 

• Kết quả KSN : 

3 - Báo cáo của Kaspersky:

Cảm ơn 🙏
Lũ lụt 🐳 + 🐋

i did, but kas couldnt find any danger in this file.exe. i mean this file is not made by pretigious author but kaspersky premium can not find any danger. 

Edited September 12 by son

[harlan4096]

K. Analysts did not find anything malicious in the files You sent me.

 

They look packed portable tools, without a digital signature (and other causes), that's why probably some av firms flag them as malicious.

[son]

On 9/12/2024 at 12:37 PM, harlan4096 said:

K. Analysts did not find anything malicious in the files You sent me.

 

They look packed portable tools, without a digital signature (and other causes), that's why probably some av firms flag them as malicious.

i think you should open it in a computer and track the action of virus. The person who created that virus blocked me after I told everyone the file had viruses, so I thought the virus was in there for sure. The analysts may have gotten it wrong somewhere.

[harlan4096]

I just tested both samples in a VM running W11 Pro + KPremium 21.18a:

 

 

 

With 1st sample, it just did not run, got an error and auto terminated 🤷‍♂️

 

 

Second sample, looks some kind of tool, by itself does nothing in the system... so after a while, I just closed it.

 

 

I ran some second opinion tools, without any traces of those both supposed virus, the detection in HMPro, it's a false positive of a tool I have in my VM.

[son]

18 hours ago, harlan4096 said:

I just tested both samples in a VM running W11 Pro + KPremium 21.18a:

 

 

 

With 1st sample, it just did not run, got an error and auto terminated 🤷‍♂️

 

 

Second sample, looks some kind of tool, by itself does nothing in the system... so after a while, I just closed it.

 

 

I ran some second opinion tools, without any traces of those both supposed virus, the detection in HMPro, it's a false positive of a tool I have in my VM.

hmmm, this person who create these file was blocked me and deleted his video about guiding people to install file, base on his behavior, i think that file has viruses ( not sure). can you decode this file? i mean read the code inside the file

[harlan4096]

No, I can't.

[son]

3 hours ago, harlan4096 said:

No, I can't.

ok, wait me 3 years, i will apply to Kaspersky