Jump to content

GerKaspy

Members
  • Posts

    9
  • Joined

  • Last visited

    Never

Everything posted by GerKaspy

  1. Hi, I got exactly the same in my file server today Endpoint Kes 11.2 Event "Malicious object detected" happened on computer XXXXX in the domain XXX_XXO on 16 September 2021 16:02:04 (GMT+00:00) Result: Detected: HEUR:Trojan.Multi.Crypmod.gen User: XXXXXXXXXX Object: System Reason: Behavior analysis Database release date: 16/09/2021 10:40:00 Remote session: 0x6f0c6af92 Remote host: - (XXXXXXXX3) The interesting the user account which at that time was working remotely do not have access to the folder which the detection has happened ******************************************************************************** Event type: Object not processed Application: System Application\Name: System Application\Path: System User: NT AUTHORITY\SYSTEM (System user) Component: File Threat Protection Result\Description: Untreated Object: Y:\UserFiles\XXXXXXX\D7BC910F.tmp Object\Type: File Object\Path: Y:\UserFiles\XXXXXXX\D7BC910F.tmp Object\Name: D7BC910F.tmp Reason: Size Any ideas??
  2. Umm funny, we got Checkpoint and ever had an issue between Kaspersky and Checkpoint. The only thing we have the Kaspersky Firewall component disabled Speaking in my case for the business version
  3. Hi in mine case the FDE Test utility keep failing with the error ------------ SUMMARY ------------- Found compatibility issues. ------------- ISSUES -------------- * [MAJOR] Found active KLFDE driver, version: 6 At the end after a few test kaspersky advise to upagrde to 11.6 and support provide an extra patch
  4. Hi, as informational Kaspersky support has provide a patch to fix the issue after upgrading the client to 11.6 The touchpad wont work in the agent authentication screen but the drive will be encrypted
  5. I replied my self, yes it is possible Create a new role and deny the Execute permission under Basic functionality
  6. Hi I cannot encrypt the 2 new models I have ordered from Dell Kaspersky Console 12.3 Endpoint 11.5 Latitude 7320 and Latitude 5420 After I fully decrypt the pre encryption from bitlocker I have run the check tool and I am getting FDE Precheck 11.6.0.1 (Feb 4 2021 09:24:31) Start time: 2021-04-14 09:08:07 +0100 OS: Windows 10 x64 (10.0.18363 SP 0) UEFI64 User: XXXXXXXXXXXXXX Manufacturer: Dell Inc. Model: Latitude 5420 Firmware: Dell Inc. ------------- SUMMARY ------------- Found compatibility issues. ------------- ISSUES -------------- * [MAJOR] Found active KLFDE driver, version: 6 * [MINOR] Third party credential provider found: File name: C:\windows\SYSTEM32\LMIinit.dll Company name: LogMeIn, Inc. Product name: LogMeIn Product version: 4.1.14344 File description: LogMeIn Remote Control Helper After the policy is applied in the reboot (then continues to Windows 10 enterprise 1909) Console error I have disabled in the BIOS Secure Boot and make sure is UEFI mode. The Drive is M.2 PCIe SSD-1 type 256GB PC sn530 NVMe WDC
  7. Hi I have the same issue in the Latitude 7320 and 5420 FDE Precheck 11.6.0.1 (Feb 4 2021 09:24:31) Start time: 2021-04-14 09:08:07 +0100 OS: Windows 10 x64 (10.0.18363 SP 0) UEFI64 User: XXXXXXXXXXXXXX Manufacturer: Dell Inc. Model: Latitude 5420 Firmware: Dell Inc. ------------- SUMMARY ------------- Found compatibility issues. ------------- ISSUES -------------- * [MAJOR] Found active KLFDE driver, version: 6 * [MINOR] Third party credential provider found: File name: C:\windows\SYSTEM32\LMIinit.dll Company name: LogMeIn, Inc. Product name: LogMeIn Product version: 4.1.14344 File description: LogMeIn Remote Control Helper Can you help?
  8. Is any options in the Security Permissions Rights to stop a Console User operator to make stop the protection from the console?
×
×
  • Create New...