Possible false positive with Kaspersky Premium - HEUR:Trojan.Multi.GenBadur.gena (September 21, 2026)

Hello FiveM Support Team,

I would like to report a possible false positive involving FiveM and Kaspersky Premium.

On September 21, 2026, at approximately 16:21 (French local time), Kaspersky detected the following threat while I was connected to a FiveM roleplay server:

Threat: HEUR:Trojan.Multi.GenBadur.gena

Affected processes:

  • FiveM.exe
  • FiveM_b3751_GTAProcess.exe

Kaspersky database publication date: September 21, 2026, at 13:38 (French local time).

The detection occurred while I was on the character creation screen of a server I had joined for the first time.

I have been using FiveM regularly for a long time without experiencing any similar antivirus alerts.

Kaspersky performed an advanced disinfection and restarted my computer. Both affected processes were marked as disinfected.

A full system scan is currently running.

I also found previous reports on the Cfx.re forum involving Kaspersky detecting the Badur Trojan family in FiveM executables.

Could you please confirm whether this is a known false positive?

Have other FiveM users reported similar detections following the latest Kaspersky database update?

Thank you for your assistance.

Best regards.