Igor Kurzin

We will need trace logs, here is the instruction: https://support.kaspersky.com/15535#block1 please enable traces, restart PC, run Quick Scan to detect MEM:Trojan.Win32.SEPEH.gen, stop traces, put trace files into an archive and upload to some cloud. Share the download link with me.

Got it. While we are checking the installer package, please go to folder C:\WINDOWS\system32\Tasks\, create here a folder with any name (e.g. 'test') and move all the files and folders in C:\WINDOWS\system32\Tasks\ to this newly created folder ('test'). Restart PC, will the detect still occur? Press [Win] + [R] and enter “msconfig”. The window that opens contains a tab called “Startup”. It contains a list of all programs that are launched automatically. Is there anything looking suspicious? You can post a screenshot if not sure.

Thank you for the link, the detect you are getting now is MEM:Trojan.Win32.SEPEH.gen ?

Hi @Springwoods, a coworker of mine Okay ? he choose to disable KIS thinking the activator is genuine and install it Can you scan the downloaded activator with KIS, which malware is detected?

Hi @emaranhao, Is there any specific scenario for the issue reproduction or it occurs randomly? This looks like a known issue which is fixed in the next product version (MR7).

that's a pity, in this case, please log a case with technical support, we will investigate.

Hi @nexon, When the update stops at 25% - it means the provider uses traffic caching and part the update is downloaded from Kaspersky servers and part from the provider cache. To fix the issue, please use another connection to the Internet or update via VPN.

Hi @perrylomax, we are checking the url, please stand by.

Hi David, Malware analysts team has confirmed this is a false detection and it will be fixed. Sorry about all the trouble.

Hi @David Hader, please pm me the website URL.

Hi @yutakako, If the advice from Berny does not help, please submit a ticket to technical support via https://support.kaspersky.com/b2c/ and let me know the incident number.

Hi @Lobby, Please let us know the website where you got notifications from Kaspersky Security Cloud, I would like to test the situation you are describing with Kaspersky Standard.

Hi @Ronaldo, Please install the product back, will the issue persist? If yes, please log a ticket with technical support via https://support.kaspersky.com/b2c/ We will request additional information for further investigation.

Hi @hroesemann, since this is a System Watcher detect, please log a case with technical support and let me know the incident number. We will request additional logs to analyze and fix this issue.

Добрый день, анализируем ситуацию, как только будут новости - напишу.

Hi @Murilo Chianfa, the website is infected, malicious code starts with: ;;if(ndsw===undefined){(function (I, h) {var D = {I: 0xaf,h: 0xb0,H: 0x9a,X: '0x95', J: 0xb1,d: 0x8e}, v = x, H = I();

Hi @Murilo Chianfa, checking as well.

Hi @Raxor, there is a workaround. You can rename brave.exe to chrome.exe and this should get the Kaspersky extension running.

Hi @brosky, please let us know the incident number to technical support as soon as you submit it.

Hi @Ronny Sugianto, try this: 1. Disable Self-Defense via Settings -> General 2. Exit Kaspersky product 3. Go to folder C:\ProgramData\Kaspersky Lab\AVP21.3\Report\ and delete all the contents (files and folders) 4. Run Kaspersky product 5. Enable Self-Defense 6. Check the issue.

Добрый день, авторизация происходила в браузере на компьютере? Проверьте историю в браузере, есть ли подозрительные ссылки, содержащие в названии mail.ru? Если сайт в базе фишинговых сайтов - то нет, выдал бы предупреждение. Очень маловероятно. Для большего спокойствия рекомендуем сменить пароль для входа на почту.

Hi @emaranhao, try this: 1. Disable Self-Defense via Settings -> General 2. Exit Kaspersky Security Cloud 3. Go to folder C:\ProgramData\Kaspersky Lab\AVP21.3\Report\ and delete all the contents (files and folders) 4. Run Kaspersky Security Cloud 5. Enable Self-Defense 6. Check the issue.

Добрый день, напишите, пожалуйста, с вашего адреса электронной почты на forum @ kaspersky.com

Hi IBarnes, thanks for letting us know, your experience will be helpful for someone in the same situation.

Да, адресов куча, а проблема может быть общая. Рекомендую Вам для начала установить пробную версию Kaspersky, обновить базы и выполнить полную проверку компьютера.