All Activity

потому что это значение по-умолчанию. %KsvlaMode%=No(0) это установка приложения в стандартном режиме, а %KsvlaMode%=Yes(1) это установка в режиме легкого агента. Режим выбирается в параметрах инсталляционного пакета - https://support.kaspersky.ru/kes-for-windows/12.8/177937?page=help https://support.kaspersky.ru/ksv-light-agent/6.0/145545

Добрый день! Удалось решить? Если нет, присоединяюсь к вопросу.

So as it turns out its just an issue with our Applocker rules. I did not realize Kaspersky places DLLs in the PROGRAMDATA folder. Once I allowed those all is good. This thread can be closed.

After installing the package from Kaspersky Next (Kaspersky Endpoint Security for Windows (12.9.0.384)) the install finishes and everything seems to be good, except AVPUI.EXE doesn't start and no UI is visible. There is no icon in the taskbar, no "scan with kaspersky" right click menu. The only argument I pass through during install is "-s" for silent. Is there something else I need to be doing? If I run the AVPUI.EXE manually as admin it starts, but thats not a solution because its gone on the next reboot.

Correct. my fault.

@Renan Corassa we have this information in the articles: https://support.kaspersky.com/KSC/15.1/en-US/92235.htm https://support.kaspersky.com/KSC/15.1/en-US/92403.htm "If you are using SQL Server 2019 as a DBMS and you do not have cumulative patch CU12 or later, you have to perform the following after installing Kaspersky Security Center: ... "

revisamos proxy o firewall no existe restricciones el error persiste

So you agree that Kaspersky needs to update the documentation?

Создайте тему на форуме Клуба лаборатории Касперского, выполнив порядок оформления запроса о помощи.

При включении ноутбука вылезает оповещение об обнаружении вредоносного приложения, при начале лечения, через пару минут выскакивает синий экран и перезагрузка.

Upload to any file sharing server. Google drive for example. And provide link to me in private message.

在Windows 11 24H2的环境上安装卡巴斯基免费版后，刚开始Windows Hello都是正常的，但是安装了一会后，如果电脑关机后再开机，Windows Hello就会抽风，提示正在准备，然后又会提示抱歉，出现问题，但是如果点击登录选项，在点一遍Windows Hello解锁方式，又正常了，如果把卡巴斯基免费版卸载了，Windows Hello功能又一切正常

@Arvinfx hello https://forum.kaspersky.com/topic/ksc-does-not-start-after-vm-cloning-keyset-does-not-exist-36165/#findComment-206890 @Renan Corassa hello. Please do not use this workaround with 'TSQL_SCALAR_UDF_INLINING = OFF'. The latest cumulative updates for MS SQL must be installed to ensure correct functionality.

Thank you Yuri. Yes, the directory resolves correctly but I do see interesting entries in the trace file, like 10:25:40.853 0x7f821984e700 INF vrt: custom: Custom Scan for </var/www/vhosts/my_web_space/my_dir> is started 10:25:40.853 0x7f821984e700 INF vrt: custom: Path </var/www/vhosts/my_web_space/my_dir> has FS magic <0xef53> and <0x3d6079ca> blocks [...] 10:25:40.853 0x7f821984e700 INF vrt: linux mp: Skip mount point </var/www/vhosts/system/my_web_space> due to type <Volume> [...] 10:25:40.953 0x7f821984e700 ERR vrt: custom: Exception caught at line 1004 => std::bad_cast 10:25:40.953 0x7f821984e700 INF scan notify: Progress calculation is finished 10:25:40.953 0x7f821984e700 INF vrt: automode: scan notify: Progress calculation is finished 10:25:40.953 0x7f821984e700 ERR vrt: custom: Can't get files count with error 0x80000047 10:25:40.953 0x7f821984e700 ERR vrt: avs: Scan was ended with error 0x80000047 10:25:40.953 0x7f821984e700 INF vrt: avs: sl: All pended async tasks (0) has been done 10:25:40.953 0x7f821984e700 INF vrt: avs: ksnq: Shutdown is requested for 0x7f82100021b0 Those "Skip mount point" entries show up for all sub dirs in my_dir, so in the end, nothing seems to be left to scan. Where can I sent the whole trace file to?

Controlla se la versione è la 21.22.7.466 (b)

Есть другой способ вылечить - выбрать "Игнорировать" в найденных небезопасных настройках.

Hello， 确认当前尝试激活的版本是最新版本！21.23开头的版本吗？

Вообщем было такое, вылечил удалив плагин ГИС НР, который ставится при запуске АРМ ( настройке рабочего места для работы в ЕИС Госзакупки.)

Hello. It's not required. KVRT is a portable tool with integrated antivirus databases. You should run a scan immediately. ./kvrt.run --allowuser -- -accepteula -silent -customonly -custom ~/my_dir/ But it won't work on your system due "Temp root </tmp> mounted with noexec, aborting. Use --target argument." So you should run ./kvrt.run --allowuser --target /full_path_to/temp_dir -- -accepteula -silent -customonly -custom /full_path_to/my_dir/ And delete "/full_path_to/temp_dir" folder yourself after every KVRT run. Also recommended use full path. So use "-custom /full_path_to/my_dir/". Files exist in "/full_path_to/my_dir/"? My be "~/my_dir" resolved to other directory? If files exist please provide traces. ./kvrt.run --allowuser --target /full_path_to/temp_dir -- -accepteula -silent -customonly -custom /full_path_to/my_dir/ -trace And provide "Traces" folder in "Product folder </full_path_to/KVRT2024_Data>".

Of course, there's a link in my comment above.) But the file needs to be analyzed in TIP, as there's no "send to reanalyze" button.

Что значит пустой ответ? Какой инструкции? Речь о "KSCL"? На статусы и логи служб "KSCL".

↓ MD5 Trojan.Win64.Agentb.leiv ↓🤔

Приветствую всех. Развернут Security Center по инструкции, на том же сервере установлена Web Console. Ошибок при установке не было, файлы ответов согласно инструкции. При обращении к серверу :8080 получаю пустой ответ, и в браузере, и на самом сервере curl localhost:8080. Думаю что если переустановлю, получу тот же результат. Может есть на что обратить внимание в уже установленном сервере?

You can submit this file to the virlab for analysis. The file hasn't been analyzed in TIP yet, so follow these steps: upload the file via the link, wait about three minutes for the final verdict, if it will be "malware" - click the button "Send to reanalyze", enter your email and comment, wait for response to email.

Отлично.