JaffaCakes118

The exe/tool you used in the video is detected by Kaspersky as a PUA/PUP, which means you added the file as an exclusion to even run it which you didn't even show in the video. https://opentip.kaspersky.com/3A8DF906E3CA36FC2CE1C67EF949244D/results?tab=lookup

Yes, it's been a problem for ages, you can't resubmit a file above 51MB.

Any update on this?

Yeah but my point is we shouldn't have to use workarounds, the problem needs to be fixed.

And I forgot to mention, I originally reported this back in October last year when I contacted support, but they just replied with a workaround instead of actually fixing the problem:

So there has been an issue with Kaspersky Opentip for awhile, the issue is to do with the "Submit to reanalyze" button. The max upload size on Kaspersky Opentip is 256MB, if you submit a file that's above 51MB to Kaspersky Opentip and click the "Submit to reanalyze" button you'll get an email sent to you saying the following: Your message wasn't delivered to anyone because it's too large. The limit is 51 MB. Inside the attachment that was added to the email is the following (note I have replaced my email with *****@*****.tld): Received: from hqmailmbx9.avp.ru (10.64.32.80) by hqmailmbx9.avp.ru (10.64.32.80) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.2507.27; Sun, 2 Jul 2023 11:24:33 +0300 Received: from be-l1 (10.65.63.81) by mail.avp.ru (10.68.8.4) with Microsoft SMTP Server id 15.1.2507.27 via Frontend Transport; Sun, 2 Jul 2023 11:24:33 +0300 MIME-Version: 1.0 From: <*****@*****.tld> To: <*****@*****.tld> Date: Sun, 2 Jul 2023 11:24:33 +0300 Subject: Kaspersky Anti-virus Lab replies to your request [VD3] [FILE:X] [LN:en] Content-Type: multipart/mixed; boundary="--boundary_17_919cd0a3-bd03-4468-9813-ae837687d000" Message-ID: <*****@*****.tld> Return-Path: *****@*****.tld X-MS-Exchange-Organization-OriginalArrivalTime: 02 Jul 2023 08:24:33.7663 (UTC) X-MS-Exchange-Organization-Network-Message-Id: 0566dc82-020d-44bd-ccd1-08db7ad5c3fa X-MS-Exchange-Organization-OriginalClientIPAddress: 10.65.63.81 X-MS-Exchange-Organization-OriginalServerIPAddress: 10.68.8.4 X-MS-Exchange-Organization-AuthSource: hqmailmbx9.avp.ru X-MS-Exchange-Organization-AuthAs: Internal X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-Cross-Premises-Headers-Processed: hqmailmbx9.avp.ru X-MS-Exchange-Organization-OrderedPrecisionLatencyInProgress: LSRV=hqmailmbx9.avp.ru:TOTAL-FE=0.007|SMR=0.007(SMRPI=0.005(SMRPI-FrontendProxyAgent=0.005));2023-07-02T08:24:33.773Z X-MS-Exchange-Forest-ArrivalHubServer: hqmailmbx9.avp.ru X-MS-Exchange-Organization-FromEntityHeader: Internet X-KSE-ServerInfo: hqmailmbx9.avp.ru, 9 X-KSE-AntiSpam-Interceptor-Info: addressee white listed X-MS-Exchange-Organization-OriginalSize: 97206880 X-MS-Exchange-Organization-HygienePolicy: Standard X-MS-Exchange-Organization-MessageLatency: SRV=hqmailmbx9.avp.ru:TOTAL-FE=0.008|SMR=0.007(SMRPI=0.005(SMRPI-FrontendProxyAgent=0.005))|SMS=0.001 X-KSE-Antivirus-Interceptor-Info: addressee white listed X-KSE-AttachmentFiltering-Interceptor-Info: no applicable attachment filtering rules found X-KSE-BulkMessagesFiltering-Scan-Result: sender external This has been a major issue for awhile and I know everyone else is also facing this problem, this problems means users aren't able to resubmit files for analysis above 51MB through Kaspersky Opentip. To reproduce this exact same issue just submit a file above 51MB to Kaspersky Opentip and click the resubmit for analysis button, you will then get an email sent to you (the one you provided when you clicked resubmit for analysis) saying that your message wasn't deliverted to anyone because it's too large. The limit is 51MB. Hopefully someone will see this post and forward it to get this problem solved.

Yes Kaspersky Free includes the Web Antivirus/Safe Browsing module which includes phishing protection as well as blocking malware sites.

You'll be able to use it on the new version when it is available for your region.

It should be whenever the new version (Kaspersky Standard) is available for you, I think the last ETA for global release of the new products are at the end of this month but I'm not too sure, you should upgrade to the new version as soon as possible.

You can do this by going to https://my.kaspersky.com/MyLicenses#/portal/pages/licenses and clicking on the key in question, then it'll show you how many devices are using it.

Do you have this setting enabled? This could be the cause of why you're full scan keeps stopping. Or it could also be this setting:

Looks like you have some sort of adware on your computer, if you've done a full scan with Kaspersky and it hasn't detected anything then it's most likely a browser extension, temporarily disable all your browser extensions to see if that fixes the problem.

After doing some research about the ransomware there's no current decryption tool to decrypt your files. The only thing you can do is run a full scan with Kaspersky to make sure that the ransomware is removed or reinstall windows if you want to ensure it's completely gone then restore from a backup if you have one.

You might be installing a version that isn't available for you, make sure whichever version you're downloading of the free version is the one you see here - https://www.kaspersky.com/free-antivirus

Kaspersky has not said anything about their free products being discontinued, as far as we're aware the free plans are here to stay.

To request for a website to be detected you can submit it to the Kaspersky Threat Intelligence Portal (Kaspersky Opentip), enter the URL and click the submit to reanalyze button.

So I can disable this script injection without affecting security?

I have Kaspersky Internet Security, and every website I go on it has kaspersky-labs.com (ff.kis.v2.scr.kaspersky-labs.com), I’m guessing it’s to do with the web antivirus but I’m not sure. My extension (Ublock Origin) blocks kaspersky-labs.com but the web anti virus still seems to block malicious websites. So what is ff.kis.v2.scr.kaspersky-labs.com? And what will happen if I keep it blocked?