UVtools icon indicating copy to clipboard operation
UVtools copied to clipboard

[Bug]5.2.1 is marked as malware by Kaspersky Antivirus

Open Barrnet opened this issue 1 month ago • 5 comments

After the install of the latest version available (5.2.1), kaspersky marked all the files in the directory of UVTools as malware. 5.2.0 was fine.

Here some logs from the antivirus:

Evento: Processo terminato
Applicazione: UVtools
Utente: DESKTOP-RYZEN\PC
Tipo di utente: Iniziatore
Componente: Controllo sistema
Descrizione risultato: Terminato
Tipo: Trojan
Nome: PDM:Trojan.Win32.Generic
Livello di pericolosità: Alto
Tipo di oggetto: Processo
Percorso oggetto: C:\Windows\Installer\Config.Msi
Nome oggetto: 1528852f.rbf
MD5: BAC6E8A87C4F069A84F3DA01096C0D46

Printer and Slicer

  • Printer:
  • Slicer:

Description of the bug

The 5.2.1 version is marked as malware by Kaspersky Antivirus

How to reproduce

Update from 5.2.0 in a PC where Kaspersky Antivirus is installed.

Files

ks_report.txt

Barrnet avatar Dec 08 '25 11:12 Barrnet

This is your first time submitting an issue with UVtools 🥳Please review your issue and ensure that the submit template was followed, the information is complete, and not related to any other open issue. It will be reviewed shortly. Debugging is very important and make the program better. Thanks for contributing and making the software better! 🙌

github-actions[bot] avatar Dec 08 '25 11:12 github-actions[bot]

The only real difference is a bump in dependencies:

(Upgrade) AvaloniaUI from 11.3.4 to 11.3.6
(Upgrade) .NET from 9.0.8 to 9.0.9

That alone should not be the reason. My guess is that the AV updated the database and somehow flag UVtools as malware. Try to remove and install 5.2.0 from fresh, does it trigger AV?

sn4k3 avatar Dec 08 '25 14:12 sn4k3

I would also use their tools to report the error... that's the #1 thing you need to do to fix it.

wjsteele avatar Dec 08 '25 14:12 wjsteele

The only real difference is a bump in dependencies:

(Upgrade) AvaloniaUI from 11.3.4 to 11.3.6
(Upgrade) .NET from 9.0.8 to 9.0.9

That alone should not be the reason. My guess is that the AV updated the database and somehow flag UVtools as malware. Try to remove and install 5.2.0 from fresh, does it trigger AV?

Yes, I already reinstalled the 5.2.0 and don't trigger any warning from the av.

Barrnet avatar Dec 08 '25 14:12 Barrnet

Ok that is strange, can you install by pause AV, then start AV and start UVtools? I use the Kaspersky Plus and have no issue

Image

sn4k3 avatar Dec 08 '25 15:12 sn4k3