TDSSKiller.exe Detected as Riskware?

[TimeuTroupe]

I ran a scan today and Malwarebytes tells me that Kaspersky's TDSSKiller.exe is apparently riskware? Despite not having an issue with it before? Norton doesn't detect anything and says its safe, and I know I got it from Kaspersky. I ran the file through virustotal and it tells me there's an issue with it:

Is this a false positive?

Malwarebytes Scan Report 2024-09-09 095715.txt

[miekiemoes]

Hi,

Please see here:

Also, TDSSKiller isn't distributed anymore by Kaspersky either (discontinued).

[TimeuTroupe]

17 minutes ago, miekiemoes said:

Hi,

Please see here:

Also, TDSSKiller isn't distributed anymore by Kaspersky either (discontinued).

I wasn't aware of this. I had Malwarebytes quarantine the file already, though I wasn't prompted to do a restart. Is it already removed when it's quarantined or is there anything else I have to do?

[miekiemoes]

Not every removal requires a reboot. :) So you should be ok in this case. 

[TimeuTroupe]

5 minutes ago, miekiemoes said:

Not every removal requires a reboot. :) So you should be ok in this case. 

Alright then, thank you :)

[abkan]

Saw this in another post

 

https://www.bleepingcomputer.com/news/security/ransomhub-ransomware-abuses-kaspersky-tdsskiller-to-disable-edr-software/

 

[miekiemoes]

Yes, this is from our actual own blog: https://www.threatdown.com/blog/new-ransomhub-attack-uses-tdskiller-and-lazagne-disables-edr/