UPDATE: Kaspersky fixed their false positive! Anti-Virus Status - We are clean (PROOF)!

[🆂tartup🆃im]

**UPDATE:** Kaspersky have indicated it is a false positive and are working to resolve this issue. Here is an update from them via email: http://i.imgur.com/X3Iq40V.png

Hey all!

It has come to my attention that CPUCores is flagged by Kaspersky as having a trojan. This is a FALSE POSITIVE (see proof below).

I just wanted to formally say that I've JUST submitted to have it analyze and, sure enough, dozens of anti-virus say that it is CLEAN!

My post response:

No need to grab the pitchforks! It is just a common error with misidentifying something as a virus, aka a False Positive.

This happens from time to time pretty much anywhere. Sometimes it is done maliciously as what is called a "False Positive Attack" even.

But no worries. You can see the following as proof:

1) Steam automatically scans things on it's own before you can even download things.

2) Windows Defender shows it is clean: https://i.imgur.com/H0OWZZ3.png

3) This is the REAL proof: https://i.imgur.com/noSfV3x.png

^--- The above image screenshot shows DOZENS of anti-virus companies stating that it is CLEAN. The two results that show positive are actually the SAME anti-virus engine/signatures (Kaspersky).

The URL for the above screenshot is here: https://www.virustotal.com/en/file/ed12ca26f83222fb942eb56b3a65fc4e48307da951a1f30a0acfa879a920023e/analysis/1499479365/

I've already submitted this as a False Positive to Kaspersky. They've given me a ticket to log my false positive notice here: [VD3][FILE:2][LN:en] [KLAN-6498171586])

Screenshot of my submission: https://i.imgur.com/dTc795l.png

UPDATE (Thanks to a CPUCores user for pointing this out to me):

CPUCores has not been updated since roughly June 10th (a month ago). You can see proof of it here: https://steamdb.info/app/384300/history/?changeid=3062831

This means the files have been the SAME on Steam for 1 month, when nothing had false positives as well. If there was an issue with a file, ALL anti-virus would have flagged it immediately. Instead, nearly ALL anti-virus say it is completely safe except this false positive.

How can you help?

Please also visit this URL: https://virusdesk.kaspersky.com/

And submit to them the scan of cpucores.exe and indicate you believe it is a false positive. This will have them look very close into the program and analyze it's actual usage VS just a false positive flag. This is how they correct false positives.

Also, Zone Alarm appears to use Kaspersky's engine, though I couldn't find a "Submit False Positive" for them. So if you guys can use your Google-fu and figure out the link, please submit a false positive and post the link here as well.

ALSO Please tweet to Kaspersky to fix this: https://twitter.com/kaspersky

Here is an example tweet I just did: https://twitter.com/StartupTim/status/883691476907040769

You can use my tweet as an example of what to say (also you can use the picture I've linked which is here: https://i.imgur.com/a1tyAEM.png ) and you could also use this picture: https://i.imgur.com/AL3Fz1x.png

UPDATE: More proof CPUCores is safe:

More proof CPUCores is safe!

30 Anti-virus scan engines say it is OK: https://www.metadefender.com/#!/results/file/ZTE3MDcwOEgxN0hNWGJBNFdIMVZIelhiQU4t/regular/analysis

UPDATE #2: Another multi-virus engine scanner confirms CPUCores is safe

https://virusscan.jotti.org/en-US/filescanjob/la7k7hu0xl

This confirms Kaspersky has a false positive (note all the SAFE scans vs Kaspersky false positive).

UPDATE #3: I had AVG anti-virus scan the entire CPUCores site, including the downloadable installation file (cpucores.exe).

http://www.avgthreatlabs.com/en-au/website-safety-reports/domain/cpucores.com

AVG flags it and the entire website as 100% OK. The Kaspersky thing is a false positive.

UPDATE #4: Kaspersky AV False Positive Exclusions:

For your anti-virus client: Kaspersky created a way for you to work around false positives. Please see their documentation for dealing with false positives here: https://support.kaspersky.com/us/2695#block2

Add a false positive file or folder to the Exclusion list

On your host computer, open the Kaspersky console by clicking the K icon in your system tray (usually in the lower-right corner of your screen).
Click the Settings tab.
Click Anti-Virus protection.
Under Scan exclusions and trusted applications, select Settings...
On the Scan Exclusions tab, select Add.
Click select file or folder > Browse... and navigate to the file or folder you want to add as an exclusion.
Click OK.

Please also submit this false positive form: https://support.kaspersky.com/us/1870

UPDATE#5: Kaspersky AV is now fixed!

Kaspersky has redacted their false positive, now shows clean, yay!

Proof here: http://i.imgur.com/N4PTYCS.png

NOTE: A few anti-virus scan companies will base their results on a "mesh" of what common AV program results show. As Kaspersky finally shows the correct results, it may take a handful of days for those mesh results based AV to be updated to show the correct results.

So in closing, CPUCores was always safe, and always will be safe. What occurred was simply a false-positive, meaning the anti-virus company made a mistake (which has now been fixed).

Cheers!!

[yokmp]

A Minute ago Kaspersky detected cpucores.exe as Trojan.MSIL.Crypt.ealq

[🆂tartup🆃im]

UPDATE #4: Kaspersky AV False Positive Exclusions:

For your anti-virus client: Kaspersky created a way for you to work around false positives. Please see their documentation for dealing with false positives here: https://support.kaspersky.com/us/2695#block2

Add a false positive file or folder to the Exclusion list

On your host computer, open the Kaspersky console by clicking the K icon in your system tray (usually in the lower-right corner of your screen).
Click the Settings tab.
Click Anti-Virus protection.
Under Scan exclusions and trusted applications, select Settings...
On the Scan Exclusions tab, select Add.
Click select file or folder > Browse... and navigate to the file or folder you want to add as an exclusion.
Click OK.

[🆂tartup🆃im]

HEY ALL!!!

I just tweeted Kaspersky in an effort to give them to resolve this: https://twitter.com/StartupTim/status/883691476907040769

Please help out by also tweeting Kaspersky and you can use my tweet as an example of what to say (also you can use the picture I've linked which is here: https://i.imgur.com/a1tyAEM.png ) and you could also use this picture: https://i.imgur.com/AL3Fz1x.png

Thanks!!

[forgus]

Immediately after installing this program from steam Kaspersky goes and says this is a malicious program?!

I purchased this about 10 minutes ago and within 15 seconds of downloading Kaspersky says that this is a malicious program.
It says "Detected object (file) not processed" and "Object name: Trojan.MSIL.Crypt.ealq"
This is extremely frustrating, as I paid 15 dollars for this software only to find out it is (probably) a Trojan virus.
I have included a screenshot of the virus report here : http://imgur.com/a/URuav

[🆂tartup🆃im]

Meging with main post about false positive.

[🆂tartup🆃im]

Froggy a écrit :

Immediately after installing this program from steam Kaspersky goes and says this is a malicious program?!

I purchased this about 10 minutes ago and within 15 seconds of downloading Kaspersky says that this is a malicious program.
It says "Detected object (file) not processed" and "Object name: Trojan.MSIL.Crypt.ealq"
This is extremely frustrating, as I paid 15 dollars for this software only to find out it is (probably) a Trojan virus.
I have included a screenshot of the virus report here : http://imgur.com/a/URuav

Hey there no worries everything is good this is just a false positive from their antivirus scanner take a look at the post and see the screenshots and Link information showing it also there is a way of how to fix it linked in the post as well.

Cheers

[forgus]

StartupTim a écrit :

Froggy a écrit :

Immediately after installing this program from steam Kaspersky goes and says this is a malicious program?!

I purchased this about 10 minutes ago and within 15 seconds of downloading Kaspersky says that this is a malicious program.
It says "Detected object (file) not processed" and "Object name: Trojan.MSIL.Crypt.ealq"
This is extremely frustrating, as I paid 15 dollars for this software only to find out it is (probably) a Trojan virus.
I have included a screenshot of the virus report here : http://imgur.com/a/URuav

Hey there no worries everything is good this is just a false positive from their antivirus scanner take a look at the post and see the screenshots and Link information showing it also there is a way of how to fix it linked in the post as well.

Cheers

Thanks so much Tim! I have created an exception in Kaspersky and all is well!

[🆂tartup🆃im]

You're welcome Froggy! Kaspersky has a long history of false positives. They even false positived some Ubisoft games in the past!!

I've submitted their online dorm for false positibes, tweeted them, emailed them, spoken with their live chat, sent them the cpucores.exe, created a support ticket, and now have my ticket escalated.

So hopefully they will fix their AV soon!!!

Also, everybody who also submits a false positive report in their Kaspersky program also helps speed this up apparently too :)

[ganj42]

what i find funny is originally it showed up as trojan.win32.bazon.a, which kaspersky removed but then this morning when i tried to re install software to see if that helped i got trojan.msil.crypt.ealq surely if it was a false positive it wouldn't of changed i just want a refund

[🆂tartup🆃im]

ganj42 a écrit :

what i find funny is originally it showed up as trojan.win32.bazon.a, which kaspersky removed but then this morning when i tried to re install software to see if that helped i got trojan.msil.crypt.ealq surely if it was a false positive it wouldn't of changed i just want a refund

Check out the original post for this thread. It links all of the detail and proof that it is a false positive.

Kaspersky has a history of false positives. A quick googling shows they've also done things like Ubisoft games as a false positive!

No worries here :)

[ganj42]

Your program has a virus

i commented on the fact your software had one trojan that changed to another trojan when i reinstalled today and saying how it doesnt sound like a false positive now to find the pinned post deleted how strange oh and i still want my refund

[🆂tartup🆃im]

ganj42 a écrit :

Your program has a virus

i commented on the fact your software had one trojan that changed to another trojan when i reinstalled today and saying how it doesnt sound like a false positive now to find the pinned post deleted how strange oh and i still want my refund

Nothing was deleted, your post was merged with the main thread and then specifically responded to.

Kaspersky has a FALSE POSITIVE. No virus exists.

See the first post in this thread for all the proof, including ways you can verify yourself as well as what you can do to fix this.

Thanks!!

[🆂tartup🆃im]

UPDATE#5: Kaspersky AV is now fixed!

Kaspersky has redacted their false positive, now shows clean, yay!

Proof here: http://i.imgur.com/N4PTYCS.png

NOTE: A few anti-virus scan companies will base their results on a "mesh" of what common AV program results show. As Kaspersky finally shows the correct results, it may take a handful of days for those mesh results based AV to be updated to show the correct results.

So in closing, CPUCores was always safe, and always will be safe. What occurred was simply a false-positive, meaning the anti-virus company made a mistake (which has now been fixed).

Cheers!!

[🆂tartup🆃im]

LOCKING TOPIC IN 24 HOURS

Kaspersky fixed their false positive so locking thread after peeps have a chance to read, celebrate, etc :)

[kabebox]

Kaspersky is still detected CPU cores as malware now.
How can I solve this problem ?