Help - Search - Members
Full Version: VNC control and KL
Kaspersky Lab Forum > English User Forum > Protection for Small and Medium Businesses
butalc
Latest versions of KL antivirus disable remote control (VNC) with system calls mouse_event, kbd_event and SendInput.

How can I enable remote control system calls?
Baz^^
Hi, are you asking about the business products, (e.g. Kav for Wks) or home user products Kaspersky AV/IS 7.0?
b4u
QUOTE(butalc @ 13.11.2007 13:18) *
Latest versions of KL antivirus disable remote control (VNC) with system calls mouse_event, kbd_event and SendInput.

How can I enable remote control system calls?

hi, you should disable Self-Defense (Settings\Service).
Bye
M.
Baz^^
Thats right... but it will leave the program open to being modified/terminated.
butalc
QUOTE(MAPKOBKA^^ @ 13.11.2007 13:20) *
Hi, are you asking about the business products, (e.g. Kav for Wks) or home user products Kaspersky AV/IS 7.0?


Both.
fl4ian
QUOTE(MAPKOBKA^^ @ 13.11.2007 08:36) *
Thats right... but it will leave the program open to being modified/terminated.


but what if a password has been set on Kaspersky? Won't that prevent it from being exited?

In other words, is it possible to disable Self-Defense and set a password for Kaspersky in order to stay protected, and still use remote control programs?
Baz^^
No, afaik, because without SD you will be able to terminate the avp service via task manager, and it will also allow malware to modify key settings that could disable the software.

There should be a nicer way of allowing remote control in V8 of the home user products.


fl4ian
QUOTE(MAPKOBKA^^ @ 13.11.2007 16:34) *
No, afaik, because without SD you will be able to terminate the avp service via task manager, and it will also allow malware to modify key settings that could disable the software.

There should be a nicer way of allowing remote control in V8 of the home user products.


I'm most concerned with the Workstation product as I have plenty of machines on it, and it's a real hassle to support these machines remotely. V8 for workstation is probably 2 years away, isn't it? Does anyone have a workaround beside disabling the SD?
andylake
I have the same issue and also something which may be related. We use a program that uses ISL Light to allow the developers to remotely support it. With SD on it becomes innoperable but OK when SD is off. We also use VPN clients and they also seem slow as well. Does anybody know if the VPN issue could also be related as I am concerned about leaving the SD off.
Thanks
fl4ian
QUOTE(andylake @ 16.11.2007 06:12) *
I have the same issue and also something which may be related. We use a program that uses ISL Light to allow the developers to remotely support it. With SD on it becomes innoperable but OK when SD is off. We also use VPN clients and they also seem slow as well. Does anybody know if the VPN issue could also be related as I am concerned about leaving the SD off.
Thanks


i'm not sure about the VPN. but i agree, all works well remotely without SD enabled. i see this is as a huge flaw. there's another thread around in which a user suggested CAPATCHA (i think i'm spelling that correctly), which i acutally think is a great idea. CAPACTCHA is when you have to enter the digits or text to verify that you're a human as opposed to a script... Kaspersky thought it was a inelegant solution.

I thought, beats the hell out of turning SD off! Just like Patton said: a good plan executed violently today beats a great plan tomorrow.

there was also somethign in that thread that Kaspersky was looking at implementing something as a solution in v8, i think. which has to be at least 1-2 years away.
fl4ian
I never like ISL lite anyway, seemed too bloated. you might try something leaner and see how the VPN responds.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.