Page 1 of 1
version 8.0.0.2 detected as malware by kaspersky
Posted: 17 Feb 2016, 14:59
by Batchman
After update to 8.0.0.2, when I try to process multiple files, program gets blocked for malicious activity by kaspersky AV ...
Had to install 8.0.0.1 back again, no problem there.
win 10 pro
kaspersky IS 2016
17.02.2016 12.46.22 Detected object (process memory) was deleted. d:\program files\video thumbnails maker\videothumbnailsmaker.exe Process memory: d:\program files\video thumbnails maker\videothumbnailsmaker.exe Object name: PDM:Trojan.Win32.Generic Object type: Other malware Time: 2/17/2016 12:46 PM
Re: version 8.0.0.2 detected as malware by kaspersky
Posted: 17 Feb 2016, 21:07
by admin
Please have a look at this article by Kaspesky Lab, you can find PDM:Trojan.Win32.Generic there:
https://securelist.com/threats/heuristi ... etections/
Here is a quote:
The proactive defense module is a module that monitors the sequence of actions conducted by an application in the system, and if suspicious activity is detected, the application is blocked to prevent it from conducting further activity. If an object is detected by the PDM, the name of the object begins with the “PDM:” prefix.
Both modules analyze the activity (or sequence of activities) of an object. If the activity is typical of a malicious program, then the object will be detected by either the heuristic analyzer or the PDM
You can try to reduce the agressiveness of proactive defense module.
Or you can try to send false positive report to Kaspeky lab if you have no such reports for any other exe files on your PC:
Online False Positive Submission (requires free account)
https://my.kaspersky.com/?logonSessionD ... 2fviruslab