Jump to content
darcorn

KIS 2018 - blocks and deletes downloaded files from cheathappens.com, Heur:Trojan detection.

Recommended Posts

Hi guys! 

I have a strange problem with  KIS 2018. It blocks downloading and running of certain files from a website. I have tried adding the website to the trusted zone and that allowed me to download the file but when I tried to run it KIS automatically stopped and removed it with HEUR:Trojan.generic warning. I've also tried putting the file to a trusted folder and running it from there, switching KIS from auto to manual and as a last resort pausing KIS (but then Windows Defender did the same thing and deleted the file.

The website is http://www.cheathappens.com and only some of the files from there are outright blocked from executing.

What can I do to stop KIS from blocking the execution of files from this website?

Any help is greatly appreciated!

 

 

 

 

Share this post


Link to post

Hello,

Could you take some screenshot pictures related to your issue and the exclusion rule in trusted website?

Regards.

Share this post


Link to post

Hi Wesly!

After some experimentation I've come up with a solution to the problem. I'll post it so that other Cheathappens users can do the same if they encounter this problem.

1. KIS was showing the 'dangerous website' alert so I've added it to WebAV exclusions/trusted zone

2. It appears some executable files downloaded from the website create temporary files too. After a few tries I've pinpointed that KIS blocks both those temporary files and  the executables themselves. Luckily, after each of the runs the program created the exact same temporary file that was being blocked e.g. same name/size etc. After discovering this I just added the temporary file to exclusions and put the executable to a folder that I've excluded from scans earlier. That's it. The programs are allowed to run normally

I haven't checked Windows Defender though but I think that the exact same procedure is needed too

I apologize if my solution sounds a bit complex

Thank you for all the replies!

 

 

 

 

Share this post


Link to post

×
×
  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.