Dont forget to read new rules at the top of this forum!
http://forum.kaspersky.com/index.php?showtopic=65716

==================
Component Affected:
Installation
==================
1) I was installing KAV with the setup.exe about the latest version of KAV 7. First the installation told me that my KAV 7 Key doenst work with this build. Than i tried to aktivate the build with the beta key but it told me that this doesnt worked. Then i tried the option "Aktivate Beta". Doestn work to. Had to go to the activation page. With that key it worked. After rebooting the Wizzard poped up again and i had to configurate KAV again, again rebooting. After that KAV worked fine.
A question: Why is in Data-Antivirus Heuristik deactivated by default?
3) http://gsi.kaspersky.fr/lire.php?hl=de&...amp;Microsoft=0
--

Affected Component
HIPS (activity filtering)
programs placed in trusted are still asked about the reading of protected storage.
1)Thunderbird
Click to view attachment
2)Opera
Click to view attachment
obviously this is not a GUI bug, the programs really are in trusted
---------------------------------------------------------------

Bug 2
Affected Component: Traffic monitor/exclusions
adding a second do not scan network traffic exclusion for an application will invalidate the first.
Test case: add svchost with do not scan network traffic - selected ip 192.168.0.1 Try to access windows update and you get a certificate out of sync error.

Trace logs: well with those i hit 2 rabbits with one stone. i tried to make them for the windows update thing, but during logging the opera access to protected storage popup appeared: Click to view attachment
----------------------------------------

Bug 3:
Affected Component: Business logic/support tools
the delete button under support/support tools/upload to FTP doesn't work. i have some traces but no matter what i delete, they remain
Click to view attachment
-------------------------------------

Bug 4:
Affected Component: HIPS/activity filtering
Well HIPS in this build is messed up, kis misses almost everything, except nagging about trusted applications doing this and that. kis fails cpil tests. But what's strange. Upon attempting to recreate failure of cpil suite test 1 (kis failed it) explorer.exe crashed, after the crash kis correctly detected cpil tests 2 and 3. Traces: Click to view attachment
I'll try to get a explorer dump too.

Whole system except of mouse cursor froze up while playing aroung with AKLT from firewallleaktester.com.
The freezing did appear after using the "Journal record hook" method, but before I needed to use all other methods to provoke the freezing.
"Stand allone" using of the "Journal record hook" method didn't do anything, KIS didn't block it either.
The "Lowlevel hook" method isn't blocked either.
KIS / HIPS settings were at default and AKLT was placed in highly restricted group.
Click to view attachment

GSI and tracelogs can be found here:
http://rapidshare.com/files/106698468/gsi_traces.7z.html

I could reproduce this issue.

Affected Component
SSL Network Scanning

This is working for me in this Version, with some exceptions.
1. The "install Cert" only opens up the Windows-Dialog. So you have to export and import it in other Programs (Opera, Firefox, Thunderbird). There should be an Option to save the cert to disk, so
that it could be imported in other Programs.
2. If a Cert is not valid, there is no Option to accept this Cert every time. I always have to accept this cert.

Second i have the same Problems with Firefox and Thunderbird as Lucian posted above. They are in trusted Group but always ask access to Registry. With Accept always grayed out, so it asks again and again .

cert exists: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP8\Data\Cert\(fake)Kaspersky Anti-Virus personal root certificate.cer

installed kav.
when i started itunes it had the little dialog box to scan.
under system secuirty all i have installd is proactive defence so i shouldnt see that diaglog box.

Affected Component: Anti-Spam
I choose to send samples to Kaspersky Lab for SPAM not detected. I use MS Outlook to read my emails. When clicking on the "SPAM" button, Mozilla Thunderbird is launched on my computer to send corresponding samples. I guess this is a problem of configuration of default program in MS Windows, but it would be better to force to send samples with mail client from which they have been marked.
I've uninstalled Thunderbird and now samples are not sent anymore, even if the option is checked.

Affected Component: Virtual Keyboard
When using the Virtual Keyboard in the URL field of Firefox 2.0.0.13, uppercase characters are written in lowercase and lowercase characters are written in uppercase. I noticed the same behavior on my laptop with a previous build of KIS. I guess this issue is related to the driver of the keyboard.

Affected Component: Vulnerabilities scan
This component detects many vulnerabilities (over 1810) on my computer in the following folder: C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache
This folder contains old files (mainly localization and help files) of previous version of iTunes and Quick Time softwares which are not used on my computer yet.
Upgrade of these applications are managed by the "Apple Updater" and they are up-to-date on my computer.

After activated my beta key, the date of activation is april 10, but today is april 11.

I get a warning from KIS about a file protected by a password, but the screen where I should type my password doesn´t popup.

Stopped Hostsman blocking ads. Opera poups for PDM was quite a few

Edit: Seems adding to the trusted zone fixed this up. The popups are actually more posative and correct it the application, just took me by surprize, as Hostsman was still sitting in the untrusted zone by default

The following things happened directly after system start up (my system is German Vista SP1). Please have a look at the attached report, as it's rather large I don't paste it here.

1) The event that the protection is not running is logged about two minutes before all other events. While this message could be actually correct I am not sure whether the result of the message is not mainly uncertainty - also because the there is no event later stating that the protection is running.

2) According to report KIS denied itself access to its own registry keys due to self-defense.

3) Shortly before the update finishes I received a green popup that the databases are corrupted (in the report it's mentioned as invalid key).

4) Then a event follows that protection is not running, without a notice that tasks have been stopped.

5) According to the report after the update all tasks started up again on their own.

I couldn't check whether the protection was really disabled, when I looked at the main window everything seemed to be fine.

I failed to inherit the configurations from 329 to 334 again. likewise I failed from 324 to 329
- Netwerk > show "Metwork Package Analysis" monitor
- Appearance > news notification

When I open Mozilla Firefox 3 Beta 5, it asks you every time to Allow it. I click Allow and then Allow now, the only choice, and it pops up every time I start it.

Anyone experiencing the same?

Stalker72

Installing 334 was at the 32 minute mark and still struggleing on my quad system. I noticed high CPU usage and was trying to track it down. I found wmpnetwk.exe devouring CPU big time so I locked it out via COMODO after reboot and 334 installed in 2 minutes. Here is what I did.

1. In Windows Media Player turn off media sharing

in the library tab right click on it > click "media sharing" unclick the media sharing tab and click ok

2. Turn off the "WMPnetwk.exe" service
Under the "RUN" command in the start menu type "services.msc"
Scroll down to "Windows media player network sharing"
Double click and under startup type set to disabled

3. Uninstall Windows Media Player 11...I mean if after 11 versions it still doesn't work right then its probably not gonna is it!

Hello,
If one decides to isolate an object quarantined its entry in the main window is updated.
But if it is to advise kis to isolate an object in quarantine entry in the main window does not refresh.
I am enclosing a screen.
Click to view attachment

KIS 8 as some serious issues on Windows Vista SP1 x64, a while after installing it:

1) I wasn't able to recive anymore all the messages on Yahoo Messenger (8.1)
2) My ASUS DVD-RW wasn't able anymore to open any disc with Computer/Windows Explorer , I only could open them using WinRAR for example
3) Sometimes when the windows logo bar started to appear, the computer stop responding
4) The Shut Down procedure took to much time and sometimes it also stop responding
5) When uploading data to Kaspersky FTP server it uses all my RAM memory (4GB) and I'm not able to use my computer until the upload finishes
6) The upload button is too far away, I need to open many windows to get to it

lol.... Attach links to download pirated content, very good idea.

I suggest you remove that attachment because 1) It's illegal 2) We don't take kindly to piracy here



Did you not try to use the built in tracer under "troubleshooting" in settings?

alien0512

Don't ever do that again....for the very good reasons already posted by Baz^^.

Component Affected:
Virtual Keyboard (german localisation)

Using the virtual keyboard in URL-Field of Firefox 3 Beta 5 works fine.
But it is not possible to fill a form, for example posting in this forum or the search field of google. FF3 crashes with the first char i type with virtual keyboard.

EDIT: with FF 2.0.0.13 it works fine.

1)let me guess blank text, that's a yahoo messenger bug, not kaspersky, try reinstalling windows script
2)can't confirm with a TEAC, and since disk drives have generic drivers it should be the same
5)a ftp server can't sue all your memory, a program can, which one?
6) not a bug, you won't need that button once kis is out, so why see it in the main window for example

1.Everytime I Launch Firefox 2.0.0.13 belonging to the group "Trusted". KIS Dialog pops up.

Key:
hklm\SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox

Maybe, is Wow64(x86 Apps on x64 OS)) something to do with it?

Click to view attachment


2. Though I installed Thunderbird 2.0.0.12, I can't find Anti-Spam plug-in.
Is "Plug-in" not still implemented? (Or Will it not be implemented?)
I'm a little confused.

Except for that, It seems KIS will work fine on Vista x64.

1. Hips is messed up, ignore it.
2. K red icon in the lower right corner? marking as spam not spam is done transparently via the built in controls from friefox.

Affected components: HIPS
Some apps of Intel Wireless were not placed in trusted, so my wireless adapter wasn't able to connect to the network.

Another bug: I left the notebook running over night doing a fullscan. When I came back this moring, some entries from Startmenu were gone, some icons in the system tray, too. This happened on Vista Ultimate 32bit, SP1. Reboot solved it.

I've also had some problems with NFS ProStreet on Vista SP1 x64, while KIS8 was installed: it periodically reported a Video Hardware Eror while playing. Now KIS8 isn't installed and it works just fine, I've played for 2 hours and no eror at all. My graphic card is Gygabyte ATI Radeon HD 2600 PRO.

create traces which capture the problem.

1) no blank text, no nothing as if that person didn't send me any message at all, only once when I sign out and quickly sign back in the messages appeared as Offline messages
2)when inserting any disc in the drive, the access time it's way to long, the autorun doesn't work, after that it reports how much space is used on the disc and when I try to open it I recive a 'Prepare this blank disc' message. If I try to open with any other program it works fine
5) not the ftp server uses my memory KIS8 does. The next second I click upload and it starts to generate packages for sending my memory usage rises up to 95 even 98%

KAV 334 fail as usual at mark 82% of full scan. Box was not frozen, however CPU consumptions were staying on the 100%
Confirmed or not confirmed it is true.
Sophos, McAfee and Symantec scan all at once

"it does't work" does not help in this case. what file is at that 82%. does it occur if you scan only that file etc.

==============================
Component Affected: Start up

==============================

Presently uploading memory dumps. Nothing unusual at startup from any other day, other than kid's game CD in DVD drive

Dumps

*Noticed that turning KIS off was the only way to obtiain final links off uploading

==============================
Component Affected: Print Screen

==============================

This program on attempt at screen shot(boxed area) is causing issues. It will make the poup(PDM, any alert) disappear and things start to malfunction. The ESC button will not work to exit the screen shot to fix this. After ESC trying to hit enter to complete the screen shot, the is GUI of the screen issues till something lets it finish

Will be uploading traces of a scan and a brief readme of what happened with this and other items during scanning

Traces

*Noticed that turning KIS off was the only way to obtiain final links off uploading

Some files added. @@

My operation steps:
01. Get systeminfo and traces on level 500
02. Try scan "Sim.City.Societies-RELOADED" game files
03. Kis 8.0 use huge memory
04. Kis 8.0 produce 3 huge temp files at C:\WINDOWS\Temp
05. Kis 8.0 produce other 3 huge temp files at C:\WINDOWS\Temp
06. System freeze, I have no choice and just restart my computer.
07. Traces off

2) Attach traces on level 500 (which clearly log the problem) IF Needed

AVP.8.334_04.13_alien0512.7z
http://www.badongo.com/file/8806581

3) Attach GSI parser link (http://gsi.kaspersky.fr) IF Requested

http://gsi.kaspersky.fr/lire.php?hl=en&...amp;Microsoft=0

I hope this can help KIS 2009 become to "really RC".
I my case, RC or RC2 = full scan always fail version.

I used KIS 7.0.0.125 & 7.0.1.321 & 7.0.1.325 to scan my computer, every thing is "OK".
So I am sure KIS 8.0 scan files that used huge memory and make huge temp files is NOT my OS or system's problem.
This is KIS 8.0's BUG.

When I tryed 329 it was wmi2xml.dll as I already reported. However, this file was successfully scanned on demand.
So this time I simply did not pay attention which file it was stopped on, but it was not wmi2xml.dll.

even though scanning secure connections was not selected KAV is asking about this each connection attempt

==================
Component Affected:
HIPS
==================
1) Malicious programs, which are able to modify system time, all of their malicious behavior can't be blocked by HIPS.

it's not a bug. hips can't do that yet. might be added in mp1

alien0512
those big temp files are because kis unpacks big files from another big file to scan them (you scan an iso so the big cabs inside have to be unpacked, then the cabs inside unpacked), you can't unpack them directly, try it with winrar for example, can you just open the file inside without unpacking. and there are probably 3 because of the new engine (scans more files at once)

Bug in Inquiry of rights popup. Two important buttons are greyed out.

Every restart of OS the same popup window, with the same questions.

i think i explained it before, they are greyed out because those 2 options are already covered by the rules
- the program is in trusted (so you can't make it trusted)
-by being in trusted on default, whatever the popup is, it's allowed (hece no more allow always)
so the only option is to allow now

the bug is that it shouldn't appear at all.

may be i misled you, sorry Lucian Bara
what i want to say is modifying system time cause all protection of kaspersky 2009, be it anti-malware, content filter or system fireware, stopped.
malware, therefore, can be add into registry and run at every system startup
the problem had already been fixed at the previous beta version and version 7

that only happens with beta codes, commercial codes shouldn't work the same way.

Thanks Lucian, I have not seen that post.

WMWare WorkStation 6.0:Windows XP SP2 Virtual (512 MB RAM & 15 GB HD ) over a Windows Vista Ultimate SP1 32 bits.

One or 2 months ago I posted here a problem with KIS 8 (an earlier version of course) deleting a concrete virus: Parity.a.bin. KIS 8 detected it but never finished the detection and went into aN infinite loop scaNning the virus file.

Well, the actual version 334 have again the same problem I think.

My KIS 8 settings are that desinfect/delete (not prompt) the malware files automatically.

With that virus file KIS 8 334 again detect it and then go into an infinite loop scanning, never finishes it and in c:\windows\temp are generated several BIG (about 2 GB or so) .tmp files, even if I cancel de scanning KIS 8 closes scanning window but it remains the loop scanning and I must to reboot my system casue the system gets slowly.

I sent this virus problem to a KL Team member one or more months ago and the problems still remains.

I can send again the virus file by PM to a KL Team member.

Greetings.

got it
thank you Lucian Bara

Selection for "always remember" this option is not available, not selectable. Only "allow for section" is selectable. Looks to be happening on with firefox.

i think i explained it a couple of posts ago at 11:46 GMT+3.

The new KIS 8.0.0.334 drivers updated and installed smoothly on W2K SP4+. Looking good so far.
Click to view attachment
Oooops! Wrong thread.

Hello,
I wanted to point out a bug management of Quarantine.
The file I tested is thermite.exe which is detected as Trojan and kis recommends placing in quarantine.
I am one who always leaves the computer on, when I go back for reuse kis often tells me that thermite.exe is in the original position and no longer quarantined.
Going to where the first was actually thermite.exe are in that position.
If I click it again to put it in quarantine in the main window where you can see objects isolated not show me a single isolated object but just watch the screen to see.
Click to view attachment