False positive Trend Micro Security removes khomp.png file and stops the update2.exe process

[OlegR_3CX]

Trend Micro Security software detects a khomp.png file and then removes it. After this happens the whole process of the update2.exe shuts down, as this file is part of the update process. As a result the system is not able to complete 18.0.9.23.

A ticket #1438478 has been opened with the Anti-Virus vendor and an update will be provided. We have also checked this file for virus detection publicly and it's clean.

Our communication will remain transparent throughout this investigation.

 

[OlegR_3CX]

We have not received any updates from the Trend Micro security team, and we will update the forum post as soon as we have a reply.

 

[amirnaor]

Well, I also encountered the same problem in the systems I manage for my customers
I opened a ticket with TrendMicro support portal
After they checked the issue, in their reply on 1/15/2025, they asked me to update the endpoint station and perform the upgrade
Indeed, after updating the antivirus at the station, I did not encounter a problem
TrendMicro did not specify what the problem was or why files were identified as malicious

 

[Charles_3CX]

Thanks for the reply and update. This thread was opened for your case, which you reported to us via the ticket opened to 3CX technical support.

Since this issue was with the AV and not with 3cx, we can continue to set this thread as a false positive.