Wellbia anticheat detected as PDM:Trojan.Win32.Generic

[Sib3riX]

I cant run this game no matter what. Kaspersky is detecting Wellbia anticheat as malware/trojan. When i run game notification pop up and ask me to restart my pc.

 

[Flood and Flood's wife]

Hello @Sib3riX, 

Welcome back!

1. Please read & follow @Danila T.’s tutorial Read before you create a new topic!
2. Scan the executable using Kaspersky Threat Intelligence Portal, and include the result when you post back please? 
3. In KIS Reports, find the detected events, save the Report & attach📎 to your reply please? 

Thank you🙏

Flood🐳 +🐋 

[Sib3riX]

Windows 10 build 19042.868

Kaspersky version: 21.2.16.590 (c)

Game anticheat detected as malware only when you run game. If you close game and scan same file kis never detect trojan. Only when anticheat is running.

 

Im writing this on my mobile phone when i get home later i will do 2nd and 3rd step.

[Flood and Flood's wife]

Hello @Sib3riX, 

Thank you for the information👌

It will be most helpful to have the remainder when you’re able to provide please? 

1. What is the actual name of the game? 
2. KIS MR3 21.3.10.391 is out; uninstall 21.2.16.590 ©, save License information only, clean install MR3, recheck the “Wellbia anticheat, pubg” issue? 

Let us know the outcome please? 

Thank you🙏

Flood🐳 +🐋 

[Berny]

@Sib3riX When you proceed with step 2 please proceed with  “Submit to reanalyze”
 

 

 

 

[Sib3riX]

I just uploaded file to KTI portal and file is clean

https://opentip.kaspersky.com/483FF904E7E706C08036ADD7E92836E4D87E9F7EA79B2AFE581324B6E10975E4/

 

I will submit to reanalyze and check with kaspersky directly.

Game name: PlayerUnknown's Battlegrounds

 

Thank you!

[Berny]

@Sib3riX Also please see Kaspersky Whitelist report

[Sib3riX]

@Sib3riX Also please see Kaspersky Whitelist report

Thanks!

[Wesly.Zhang]

Hello,

Some information need provide to KL support.

c:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame_uc.exe

and

c:\users\hango\appdata\local\wellbia\ucsvc.exe

If you could zip and send above two files with  extracting passwords “infected” without quote  to china-support@kaspersky.com, or using KL support platform. This will be very helpful in solving this problem.

Link

Regards.

[Wesly.Zhang]

Hello,

Please update the database to the latest state and check whether the problem is resolved.

Regards.