Malvare

VHO:Trojan-Spy.Win32.Convagent.gen

Hi
Kaspersky are flaging the
C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll;FencesMenu64.dll 
as a VHO:Trojan-Spy.Win32.Convagent.gen 
And by Virustotal

33,266 views 19 replies
Reply #1 Top

That will be a 'false positive', though I cannot recall my Kaspersky ever flagging it...and this system has been active/live for 10 years with both Fences AND Kaspersky for all that time.

Stardock's products are clean, however on several occasions false positives are reported, though typically from the 'less capable' AV programs.

Reply #2 Top

I did nt  got any flagging before i upgrade to version 6 beta 2 (5.9.9.3)

Reply #3 Top

We recently renewed our security certificate. As result, the certificate can sometimes take time to rebuild its trust level with security manufacturers. We’re looking into it further on how we can speed this up.

+1 Loading…
Reply #4 Top

Hi, the same thing happened to me too.

Update proposed by the app with the usual screen that warned of the presence of an update and asked what to do.

Already during the installation the warning went off.

Application: Fences6_setup.exe - Type: Trojan - Name: PDM:Trojan.Win32.Generic

Immediately after involving other different files, always from Fences6, such as FencesMenu64.dll

(Win 11 Pro and Kaspersky Premium 21.20.8.505)

In the end it did not even allow me the classic uninstallation.

I manually downloaded a new installation file from the official source, but once again...

I could only perform the manual uninstallation and now I am without Fences.

I have been using Fences for many years, but I cannot risk it, so for the moment I will do without it and then we will see if I can reinstall it.

Reply #5 Top

Quoting Witched2, reply 4

I have been using Fences for many years, but I cannot risk it, so for the moment I will do without it and then we will see if I can reinstall it.

Please note comment 3 above yours.

There is no danger.  It is a false positive which means that during installation set Kaspersky to accept the file and you can continue to use Fences as normal. ;)

Reply #6 Top

I have Kaspersky Total Security 21.3.10.391 on 3 systems, 2 on Win 10 and this one on Win 7 .   I'll check the other 2 as if it's an update that's creating the notice I am yet to update those.

Silly me... 7 is still running Fences 3.1.6.1   The others will be more up to date....

Reply #7 Top

We’re going to get in touch with them this week to see what we can do. It’s a false positive based on our new code signing certificate which hasn’t yet gained their trust as our previous one had.

Reply #8 Top


Hi
Kaspersky are flagging the C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll;FencesMenu64.dll  as a VHO:Trojan-Spy.Win32.Convagent.gen 
And by Virustotal


 

 

Similar experience.

Assuming it's a False Positive? That would be hopeful and/or naïve.    Do not instal Beta 2 until Stardock have corrected it. If it is a signing matter, it's incredible that this wasn't sorted prior to release.

 

Reply #9 Top

Quoting RJCleaver, reply 8

Similar experience.

Assuming it's a False Positive? That would be hopeful and/or naïve. Do not instal Beta 2 until Stardock have corrected it. If it is a signing matter, it's incredible that this wasn't sorted prior to release.

If downloaded from Stardock's servers, it's a false positive warning. The reason has been explained by responsible people. Your denial of the explanation is illogical. Kaspersky's warning is spurious.

Reply #10 Top

Quoting DrJBHL, reply 9

Assuming it's a False Positive?

No.  People have seen their AV report and have checked here to be told correctly that it is a false positive.

Some AV companies [not usually Kaspersky] are painfully slow in rolling out updated signatures.

It's a common issue.

Reply #11 Top

You're not alone- I'm getting that error too, and it's honestly unbelievable.
First, you're told you're stupid because Fences 5 is useless once your subscription expires and you haven't bought a permanent license.

Then, when you do buy a permanent license, it's for Fences 6, but you still can't use the program because
"the reason has been explained by "Responsible people." it's a false positive being detected by Kaspersky.

If they could figure it out for Fences 5, they should be able to figure it out for Fences 6 as well.
There's probably a reason it's being detected. Honestly, this version shouldn't have been released as a
final product- it still feels like a beta.

I'm giving Stardock 10 days to resolve this, otherwise I'm done participating.

 

 

Reply #12 Top

Quoting mortenskerra, reply 11

If they could figure it out for Fences 5, they should be able to figure it out for Fences 6 as well.
There's probably a reason it's being detected. Honestly, this version shouldn't have been released as a
final product- it still feels like a beta.

Sorry for the misunderstanding. Fences 6 is still in Beta. See Reply #7 above, as Stardock is planning to contact Kaspersky about the new certificate.

Reply #13 Top

Quoting mortenskerra, reply 11

There's probably a reason it's being detected.

Yes, it was explained above in comment #3.

Reply #14 Top

We have submitted the required information to Kaspersky to remove the flag - it's related to our new security cert that they have incorrectly flagged and should be resolved shortly.

Reply #17 Top

Quoting henryvoll, reply 15

Can anyone confirm Kaspersky not flagging it anymore?

You can check it easily. Dl a demo version of Kaspersky, then dl Fences 6.

Reply #18 Top

Kaspersky should no longer be flagging Fences 6 beta 2.

+2 Loading…
Reply #19 Top

Seems to be working fine, but my product key doesn't work when I try to activate the software. I just purchased it a few week back. "Email address is not valid for the product key" (Lifetime License for Fences 6 - 1 user) -  Invoice ID: STARDOCK250426-4399-43199.

Also tried via login method it says "Fences 6 is not associated with this account."

Personal information removed by moderator.

Update: Solved, thank you for the prompt response. No detections from Kaspersky either. Good job guys.