Steps to know why a file was detected as Malicious by the Kaspersky Antivirus Engine.

Products

• Content Analysis Software - CA
• Advanced Secure Gateway Software - ASG

Issue/Introduction

The purpose of this article is to show what needs to be done in order to find out why a specific file was detected as malicious by the antivirus engine in a CAS or ASG appliance.

Resolution

Gather details from the file in question and provide it to Symantec Network Protection support so that the request can be forwarded to the corresponding Kaspersky team:

 

Malicious code found: X

The Website that was attempted to be accessed: https://x/path.js

The Website's IP Address: x.x.x.x

Anti-virus vendor: Kaspersky Labs

Scan Engine Version: x.x.x.xx

Pattern File Version: XXXXXX (Timestamp: XXXX/XX/XX)

The Action Taken: File has been dropped.