Kaspersky
Question

False positive: HEUR:Trojan.Win32.Pincav.gen (whitelisting a code signing certificate)

  • 4 September 2019
  • 3 replies
  • 838 views

Hi Kaspersky team,
I'm the QA Manager at Exent Technologies LTD (www.exent.com). Our owned & operated games service is www.freeridegames.com (FRG).
FRG is a free games website which allows the consumer to play premium downloadable games for free, in return for his willingness to watch ads while playing these games.
The user is required to download and install our FRG games player which enables the serving of ads onto the premium downloadable games. Serving these ads allows us to offer those downloadable games, that otherwise would require the user to pay for them, totally for free.
The Free Ride Games service is operating since 2008 and is currently serving tens of thousands of happy customers mainly in North America.

We recently discovered that the antivirus Kaspersky Total Security detects our files as a “HEUR: Trojan.Win32.Pincav.gen” after a recent update to our code signing certificate. Our files with the previous certificate are whitelisted by Kaspersky, please add our files with the new certificate to the whitelist.
I’ve attached a link for an archive with detected file, one file with the new certificate and one file with the previous certificate: https://www.dropbox.com/s/s3sxsknn1bpiedu/KTS.zip?dl=0

Users that install our FRG games player and play our games consent to our EULA (http://www.freeridegames.com/about/terms). Section 7 of the EULA contains explicit consent by our users to be watching ads in return for their ability to play the games.

We are awaiting your swift resolution to this issue, as this false-positive alert is causing inconvenience to our users, severe damages to our reputation and significant monetary damages to us.

3 replies

Userlevel 7
Badge +11
We are awaiting your swift resolution to this issue, as this false-positive alert is causing inconvenience to our users, severe damages to our reputation and significant monetary damages to us.
Hello @smax,
Welcome!
  • Please contact Kaspersky Technical Support, the Community, cannot fix this.
Kaspersky Lab Technical Support, choose LOCATION, select General Product Use tab, select:
  • Phone (not available all locations)
  • Online Chat
  • MyKaspersky (web portal) (if you have a MyKaspersky account.
  • Also, it's never wise to publish your email address on a public forum.
Thank you
Thanks for a quick response
Userlevel 7
Badge +11
Thanks for a quick response
Hello @smax.
You're welcome!
Please edit your post, remove the email address please (for your own privacy)

Thanks.

Reply