Kaspersky
Solved

KIS quarantines file due worm, but no one else finds malicious object in the file [Closed]

  • 21 January 2020
  • 10 replies
  • 266 views

Userlevel 1

Hello,

 

I have this radio that I’ve downloaded the latest firmware to. When scanning for viruses one of the files, D878UV_Setup_1.17.exe is reported to contain WORM.WIN32.WBVB
I’ve asked on relevant forums if anyone else finds this malicious object in the downloaded firmware, but it is only me.

 

I’ve also tried to upload the file to Kaspersky VirusDesk (https://virusdesk.kaspersky.com/)

and

VirusTotal (https://www.virustotal.com/gui/home/upload)

 

Both of these reports the file to be clean, so why does my KIS quarantine it?

 

If you are interested in taking a look at the file in question yourself it can be found here:

[Deleted by Moderation]

or direct download from here:

[Deleted by Moderation]

I’m wondering how I should deal with this? Is it a real threat or should I whitelist the file?

Thank you for your advice.

icon

Best answer by harlan4096 22 January 2020, 09:16

I already got an answer: No malicious software was found in the attached file.

 

But still detected, so I asked if a possible false positive, waiting a new response...

 

View original

This topic has been closed for comments / Тема закрыта для комментариев

10 replies

Userlevel 7
Badge +7

@Hoggorm Please submit the object K-Lab Tech Support https://center.kaspersky.com 

Userlevel 7
Badge +7

I’ve already sent the detected exe to Kaspersky Virus Desk, waiting for analyst verdict… probably a false positive...

Userlevel 1

@Hoggorm Please submit the object K-Lab Tech Support https://center.kaspersky.com 

Where do I do this exactly?

 

I’ve already sent the detected exe to Kaspersky Virus Desk, waiting for analyst verdict… probably a false positive...

I’ve also tried to send it to Kaspersky Virus Desk. It came back clean… The result came back within seconds though.

Userlevel 7
Badge +7

@Hoggorm Harlan is waiting for the result and will come back to you.

Userlevel 1

@Hoggorm Harlan is waiting for the result and will come back to you.

Thank you!

Userlevel 7
Badge +8

Hello @Hoggorm,

Regarding “I’ve also tried to send it to Kaspersky Virus Desk. It came back clean… The result came back within seconds though.”

For any future detections, when the Virus Desk tool says the site or object is safe or unknown, select Submit for analysis, add (your) email address, tick the Consent :ballot_box_with_check: box, select Send

You’ll receive an automated email, then, normally within a few days, you’ll receive the analysis & advice the Kaspersky Virus Desk experts:spy_tone3: have determined, for the data you’ve submitted. 

The Kaspersky Virus Desk experts:spy_tone3: will always provide additional information if requested. 

Thank you:pray_tone3:

Userlevel 7
Badge +7

I already got an answer: No malicious software was found in the attached file.

 

But still detected, so I asked if a possible false positive, waiting a new response...

 

Userlevel 1

I already got an answer: No malicious software was found in the attached file.

 

But still detected, so I asked if a possible false positive, waiting a new response...

 

That is good news. Interested in knowing if this is a false positive.

 

Do I understand correct that your KIS also warned you about a worm in this file?

Userlevel 7
Badge +7

This is the final response from K. analyst:

Hello,

Sorry, it was a false detection. It will be fixed.
Thank you for your help.

Best regards,

 

Userlevel 1

Thank you! Your assistanse is highly appreciated!