False detection from Kaspersky AV

With the version of the virus signatures RIOT 0.4 is detected as trojan (Trojan.Win32.Swisyn.aeca).

As this program does not contain malware and was tested with other antivirus engines, I contacted the Kaspersky Team to find out more.
Kirill Kruglov, Virus Analyst at Kaspersky Lab confirmed me that it was a false positive and replied it will be fixed in the next update.

Edit: This was fixed by Kaspersky in the next day.

So users don’t need to panic. RIOT is safe and does not contain any trojans.

Edit: It seems that other two obscure anti-virus engines have taken the Kaspersky false detection and report RIOT as being the same (false) trojan.
The anti-viruses in cause are Antiy-AVL and VBA32
I tried to contact and report this problem to the manufacturers but I received no answer. I would not trust such a manufacturer, that does not have the decency to reply and analyze a false detection. I find very strange the fact that they report the same trojan as Kaspersky. I even doubt they have their own research lab.
Back in the old days the anti-virus engines were much more precise. These new ones rely to much on heuristics for my taste, creating such unfortunate errors.

Posted in News

Leave a Reply

Your email address will not be published. Required fields are marked *