HEUR: Trojan.Win32.Generic Virus Alert

[Bertie]

Hi, Guys,

Have been using DVDFab.exe for several years, Kaspersky virus protection has just identified the above Virus / active malicious code and only offers the solution of deletion of prevention from running.

I am a lifetime member and wondered if the code was legitimate for password transfer when downloading new version software, or something else?

the software is so sure that the dvdfab.exe file has the above code that I am not given any choice relating to restricting the programme or running in protected mode - so do I just delete?

What options do I have?

Any assistance would be greatly appreciated.

P.S. about a week ago Kaspersky found the same issue with DFDFab 7 that was still installed on my system and I chose the disinfect on re-boot / deletion of the offending software.



Thanks.

[Guest]

http://forum.dvdfab.com/showthread.php?t=8194

[Blazkowicz]

Kaspersky needs to fix that false positive.

[TECHNOMAN]

How To Resolve Kaspersky & DVDFab Prolem

How To Resolve Kaspersky & DVDFab Prolem

--------------------------------------------------------------------------------

The Problem Lies In The Script Of Kaspersky 2011

You Need To Download Kaspersky 2010

Google It & Search For Kaspersky Antivirus Or Internet Security 2010

Un-install DvdFab
Un-install Kaspersky 2011
Clean Out Any Folders For Kaspersky Or DVDFab From Your Hard Drive Usually Drive c:\
Run System Cleaner Like CCleaner

Re Boot Pc

Re-install DVDFAB Apply Your RegistrationDetails

Install Kaspersky 2010
Use Same Key To Activate
Run Update For Kaspersky 2010
Restart Pc
Thats It
Working DVDFab & Kaspersky
When & If Kaspersky Fix The Script Then Return To Version 2011
Works 100%

[Tech_Geek74]

I've been emailing Kaspersky support team back and forth with video screen shots of the false detection in action. Which was requested by them including the exe file “DVDFab.exe” I’ll keep everyone posted, should be fixed very soon….
Update:
I did get an update then a popup from KIS 2011 telling me to restore my quarantine items because they’re not infected. Once I tried to restore them, same issues. KST is well aware but there getting closer on fixing false positive.

Update from Kaspersky Support Team (Pasted email below)

Hello,

Sorry, it was a false detection. It will be fixed in the next update.
Thank you for your help.

Please quote all when answering.
-----------------
Regards, Kirill Kruglov
Virus Analyst, Kaspersky Lab.

>From:
>Sent: 28.09.2010 9:09:00
>To: "New Virus" <newvirus@kaspersky.com>
>Subject: RE: RE: [VirLabSRF][False alarm on a
>file][M:1][LN:EN][L:0][KLAN-84921578][KLAN-84922272]
>
> Video AVI attached with detection...
>
> Thanks again
>
> FYI: Another thing I had a popup from KIS 2011 regarding my Quarantine
> items are not infected please restore items but when I restored them
> same issue all over again... Hmmmmm?
>
> Getting closer...
>
> -----Original Message-----
> From: newvirus@kaspersky.com [mailto:newvirus@kaspersky.com]
> Sent: Monday, September 27, 2010 11:25 PM
> To:
> Subject: RE: RE: [VirLabSRF][False alarm on a
> file][M:1][LN:EN][L:0][KLAN-84921578] [KLAN-84922272]
>
> Hello,
>
> Please send us screenshot of detection.
>
> Please quote all when answering.
> -----------------
> Regards, Kirill Kruglov
> Virus Analyst, Kaspersky Lab.
>
> >From:
> >Sent: 28.09.2010 2:58:00
> >To: "New Virus" <newvirus@kaspersky.com>
> >Subject: RE: [VirLabSRF][False alarm on a
> >file][M:1][LN:EN][L:0][KLAN-84921578]
> >
> > Detected file attached in rar file "DVDFab.exe
> >
> > -----Original Message-----
> > From: newvirus@kaspersky.com [mailto:newvirus@kaspersky.com]
> > Sent: Monday, September 27, 2010 6:38 PM
> > To:
> > Subject: RE: [VirLabSRF][False alarm on a file][M:1][LN:EN][L:0]
> > [KLAN-84921578]
> >
> > Hello,
> >
> > Please send us detected file.
> >
> > Please quote all when answering.
> > -----------------
> > Regards, Kirill Kruglov
> > Virus Analyst, Kaspersky Lab.
> >
> > >From:
> > >Sent: 28.09.2010 2:32:00
> > >To: "New Virus" <newvirus@kaspersky.com>
> > >Subject: [VirLabSRF][False alarm on a file][M:1][LN:EN][L:0]
> > >
> > >
> > > LANG: en
> > > email:
> > >
> > > description:
> > > Quarantined (2)?
> > > 9/27/2010 5:46:25 PM?Quarantined?virus
> > HEUR:Trojan.Win32.Generic?C:\Program Files (x86)\DVDFab 8\DVDFab.exe?High?
> > > 9/27/2010 5:46:25 PM?Quarantined?virus
> > HEUR:Trojan.Win32.Generic?C:\Program Files (x86)\DVDFab
> > 8\DVDFab.exe//PE_Patch?High
> > >
> > 10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
> > Tel./Fax: + 7 (495) 797 8700
> > http://www.kaspersky.com http://www.viruslist.com
> >
> 10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
> Tel./Fax: + 7 (495) 797 8700
> http://www.kaspersky.com http://www.viruslist.com
>
10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

[signals]

TechGeek
Thanks for the KIS updates. I am monitoring their forum for this and the KIS2011 resource hogging problem.

[EdS]

Problem Fixed

Kaspersky fixed this problem in the last update dated today at 6:40 AM.

[Tech_Geek74]

Glad to hear we're back...