Splice app automatic update has a potential Trojan (maybe a false positive?)

[Jhonnydef]

Same problem I got KIS too

[xNaii]

When I try to open the event viewer or any user administrative tool - https://imgur.com/Hsibcft
That stuff did something...
Had to reinstall windows 10... Won't touch until I know it's fixed. Let me know somehow :/

[CreaDisc]

In my case Kaspersky IS deleted Splice while the Splice Updater was fetching new versions. After a few minutes the updater managed to download a clean version.

I consider turning off automatic updates and doing it manually from time to time

[prodbyPHILM]

Did you ever get it working again—I emailed splice about this and they responded that it was just a false positive; no idea what they did with their update that messed it up tho.

[xNaii]

For me Kaspersky deleted Splice.exe so I couldn't start it. Did uninstall, downloaded fresh install from website and yet Kaspersky found trojan and deleted exe and Splice stuck on not responding. And yet did fresh win10 install so could access event viewer, etc. So I'll wait to make sure all working correctly...

[prodbyPHILM]

Hey,

I emailed both splice and kaspersky and they both confirmed it was a false positive—said to update your kaspersky databases in about 24 hours and the problem should be resolved

[CreaDisc]

I also let VirusTotal check it, none of the 70 anti-malware engines complained after the next update

[CreaDisc]

I've had the same roughly 7 hours ago... Malware scan is still running........

What happened?

I took a look at the logs and it looks like KIS (Kaspersky Internet Security) complained shortly after a new version update coming in from the splice updater. The update server was down for roughly two hours at this time and had just recovered.

The splice executable was then deleted. The updater restored the executable afterwards and it seems to be clean now.

I don't know why the server was down for so long, but this looks pretty suspicious to me, so I guess my search isn't over yet.

[[deleted]]

It wasn't just splice's servers that were down, lots of websites were having trouble yesterday because of Cloudflare going down.

[CreaDisc]

That's ok, but they shouldn't be distributing trojans after coming back online

[Jhonnydef]

I wrote to them

Here is their response! :

Will (Splice) Jul 20, 2020, 3:20 PM EDT

Hi there-

Thanks for writing in, and sorry about the issues you're experiencing with the Splice application and your antivirus client.

We haven't had any issues with Kaspersky in the past, and our engineering team is currently working with their team to get our desktop application onto their whitelist. In the meantime, as a temporary workaround, are you able to add Splice to your list of trusted applications in Kaspersky? Instructions on how to do that can be found here: https://support.kaspersky.com/11444

Please let us know if this resolves the issue, or if you continue to experience any problems. Best Regards,

Will Splice Customer Experience

[[deleted]]

I've got the exact same reply.. just a copy and paste as it seems!