Jump to content
Kaspersky Support Forum

  • Who's Online   13 Members, 1 Anonymous, 248 Guests (See full list)

    • nexon
    • Gunnish
    • Longlife
    • harlan4096
    • Deni5c
    • J4D
    • SystemInfo
    • mhnproject
    • Alex Bond
    • murat5038
    • Berny
    • Behzad
    • Kilauea

  • Forum Statistics

    34.8k
    Total Topics
    197.2k
    Total Posts

  • Member Statistics

    71598
    Total Members
    2002
    Most Online
    Deni5c
    Newest Member
    Deni5c
    Joined


  • Forum

    1. 40

      problème VPN depuis la dernière mise à jour novembre 2025

      Merci pour votre réponse. Je vais attendre les prochains jours/semaines pour obtenir la mise à jour qui résoudra probablement le problème. Bon week-end :))
      • 1
      • Like
      scraft in Pour particuliers
    2. 11

      Kaspersky VPN Secure Connection

      Würde vorschlagen ein Ticket beim Support zu eröffnen.
      Longlife in Für Privatanwender
    3. 8

      URGENT SUPPORT REQUEST: ADVANCED STEALER MALWARE INJECTION INTO KASPERSKY PROCESS (Revised for AI Credit)

      I understand that these are currently only my hypotheses, so I am seeking confirmation and assessment from the community. Furthermore, I have taken the step of submitting a request to Kaspersky Technical Support regarding this issue.
      • 2
      • Like
      Lê Huy Hoàng in Virus and Ransomware related questions
    4. 8

      URGENT SUPPORT REQUEST: ADVANCED STEALER MALWARE INJECTION INTO KASPERSKY PROCESS (Revised for AI Credit)

      On what basis do you draw this conclusion? None of the above suggests this.
      • 1
      • Like
      andrew75 in Virus and Ransomware related questions
    5. 8

      URGENT SUPPORT REQUEST: ADVANCED STEALER MALWARE INJECTION INTO KASPERSKY PROCESS (Revised for AI Credit)

      I have been doing that for a while. For most accounts involving personal security, I use two-factor authentication (2FA) and unique, random passwords (which I store in the Enpass application). However, the hacker exploited this by utilizing an App Password for access, which bypasses 2FA. Furthermore, the Enpass application itself is installed on this very device.
      • 1
      • Confused
      Lê Huy Hoàng in Virus and Ransomware related questions
    6. 8

      URGENT SUPPORT REQUEST: ADVANCED STEALER MALWARE INJECTION INTO KASPERSKY PROCESS (Revised for AI Credit)

      If you suspect a brute force login cancel email and switch to an Authenticator app or sms ?
      • 1
      • Like
      Berny in Virus and Ransomware related questions
    7. 1

      客服电话是多少？

      电话 营业时间：周一至周五, 09:00-18:00 (当地时间) 应答时间：6 分钟 语言：普通话 400-611-6633
      Xzz123 in 家用产品支持
    8. 8

      URGENT SUPPORT REQUEST: ADVANCED STEALER MALWARE INJECTION INTO KASPERSKY PROCESS (Revised for AI Credit)

      As you said, that's why I emphasized that this is an AI-powered product. The connection test result from my computer: C:\Users\hoang>netstat -ano | findstr ESTABLISHED TCP 127.0.0.1:49671 127.0.0.1:57083 ESTABLISHED 5664 TCP 127.0.0.1:49671 127.0.0.1:58190 ESTABLISHED 5664 TCP 127.0.0.1:49671 127.0.0.1:60717 ESTABLISHED 5664 TCP 127.0.0.1:49671 127.0.0.1:61434 ESTABLISHED 5664 TCP 127.0.0.1:49671 127.0.0.1:63858 ESTABLISHED 5664 TCP 127.0.0.1:50576 127.0.0.1:50577 ESTABLISHED 5664 TCP 127.0.0.1:50577 127.0.0.1:50576 ESTABLISHED 5664 TCP 127.0.0.1:57083 127.0.0.1:49671 ESTABLISHED 15832 TCP 127.0.0.1:58190 127.0.0.1:49671 ESTABLISHED 15832 TCP 127.0.0.1:60717 127.0.0.1:49671 ESTABLISHED 15832 TCP 127.0.0.1:61434 127.0.0.1:49671 ESTABLISHED 15832 TCP 127.0.0.1:63858 127.0.0.1:49671 ESTABLISHED 15832 TCP 192.168.1.20:51834 4.145.79.80:443 ESTABLISHED 5728 TCP 192.168.1.20:52977 4.1.82.185:443 ESTABLISHED 5664 TCP 192.168.1.20:54839 79.133.168.9:443 ESTABLISHED 5664 TCP 192.168.1.20:55155 79.133.168.9:443 ESTABLISHED 5664 TCP 192.168.1.20:55794 185.201.3.101:443 ESTABLISHED 5664 TCP 192.168.1.20:56194 212.5.110.163:443 ESTABLISHED 10984 TCP 192.168.1.20:56198 185.201.1.202:443 ESTABLISHED 5664 TCP 192.168.1.20:57174 82.202.184.185:443 ESTABLISHED 5664 TCP 192.168.1.20:57486 142.250.197.202:443 ESTABLISHED 15832 TCP 192.168.1.20:58380 199.165.136.100:443 ESTABLISHED 7304 TCP 192.168.1.20:58953 4.145.79.81:443 ESTABLISHED 5728 TCP 192.168.1.20:60420 4.145.79.82:443 ESTABLISHED 16972 TCP 192.168.1.20:60708 20.50.201.203:443 ESTABLISHED 16972 TCP 192.168.1.20:62190 40.74.78.229:443 ESTABLISHED 19460 TCP 192.168.1.20:62195 185.201.3.101:443 ESTABLISHED 5664 TCP 192.168.1.20:64597 65.109.109.243:443 ESTABLISHED 15832 TCP [2402:800:6195:ec43:d05c:566a:9e1c:a1d8]:51763 [2001:4860:4860::8888]:443 ESTABLISHED 15832 TCP [2402:800:6195:ec43:d05c:566a:9e1c:a1d8]:53218 [2404:6800:4005:817::200e]:443 ESTABLISHED 15832 TCP [2402:800:6195:ec43:d05c:566a:9e1c:a1d8]:54584 [2404:6800:4008:c13::bc]:5228 ESTABLISHED 15832 TCP [2402:800:6195:ec43:d05c:566a:9e1c:a1d8]:54700 [2404:6800:4005:817::200e]:443 ESTABLISHED 15832 TCP [2402:800:6195:ec43:d05c:566a:9e1c:a1d8]:54874 [2001:4860:4860::8888]:443 ESTABLISHED 15832 TCP [2402:800:6195:ec43:d05c:566a:9e1c:a1d8]:56561 [2404:6800:4005:805::200e]:443 ESTABLISHED 15832 TCP [2402:800:6195:ec43:d05c:566a:9e1c:a1d8]:57338 [2404:6800:4005:805::200e]:443 ESTABLISHED 15832 TCP [2402:800:6195:ec43:d05c:566a:9e1c:a1d8]:57649 [2803:f800:53::3]:443 ESTABLISHED 15832 TCP [2402:800:6195:ec43:d05c:566a:9e1c:a1d8]:59536 [2001:4860:4860::8888]:443 ESTABLISHED 15832 TCP [2402:800:6195:ec43:d05c:566a:9e1c:a1d8]:61934 [2603:1047:1:188::80]:443 ESTABLISHED 16972 TCP [2402:800:6195:ec43:d05c:566a:9e1c:a1d8]:65204 [2404:6800:4005:81e::200a]:443 ESTABLISHED 15832 The process 5664 belongs to Kaspersky. The reason I suspect my computer has been compromised is that while my computer was online and I was not actively using it, I received emails regarding Microsoft login OTP and password change OTP. I am certain that I did not log in to my account on multiple devices, which led me to suspect that my computer was compromised (despite running Kaspersky).
      Lê Huy Hoàng in Virus and Ransomware related questions
×
×
  • Create New...