The Analyst looking at the code right away saw what it was: NSA custom malware, expensive zero day exploits, etc, and stopped what he was doing, and went to Kaspersky the owner. When he transferred to his home PC, Kasperky picked it up right away as malicious, and, as it was designed to do, and as any other security software does, Kaspersky sent copies of the malware home to be analyzed. The negative reports: an NSA employee stole some of the malware that No Such Agency uses, and took it home. When the software was re-enabled, it detected both the Equation Group code, as well as unrelated backdoor infections created by a keygen program for Office, which may have facilitated third-party access to the computer.

Kaspersky claimed that the antivirus software had been temporarily disabled by the PC's user in order to install a pirated copy of Microsoft Office.

Eugene Kaspersky stated that he ordered that the sample be destroyed. The user had enabled the Kaspersky Security Network (KSN) features of the software, so the files were automatically uploaded to Kaspersky as a malware sample to KSN for analysis, under the assumption that it was a new malware variant.

On 25 October 2017, Kaspersky confirmed that the incident described by The Wall Street Journal had occurred in 2014, and was the result of the software having detected a ZIP file containing samples and source code from the Equation Group. All kaspersky did was send an file that belonged to illegal software on a NSA workers computer which it deemed suspicous to their lab for analysing, and because of that the US goverment thought they were spying.

Kaspersky antivirus reddit