Nil

Hello, Before I did a whole reset of my modem and my computer, I had my Mac and iPhone both connected to the modem. At that time, the smart home monitor was finding only the device it was searching from and the modem. For example, using my computer, it was finding only my computer and the modem. After I did a reset for both the modem and the computer, it is not finding anything even though I refreshed it and it acknowledges my network. I have pretty much all the security setting setup on both my modem and the computer. And I'm wondering could anyone of these be the reason? My question is: What could be the reasons of Smart Home Monitor not finding and listing the devices? Can I please get a list of possible reasons, and hopefully solutions ?

I have the same problem though! It says "un-signed" !!! That freaked me out too!! I don't understand why Kaspersky lets an unsigned program to run in the background during the installation. It shouldn't be so difficult to have them signed, right? MacBook tells you that this is happening and that's a good thing. Because, I had installed another anti-virus before and they (who knows who they are) set up a whole network of terminals before it was said and done! This is very dangerous ! I can't allow another 'unsigned program' to be running around in my computer and network. The only reason I allowed this time was that I saw this little comment above and its response. (also, I was not able to complete the setup. But, that's a terrible reason to allow unsigned programs). Well, I trust Kaspersky. But, I strongly suggest to change that thing to "signed". Thank you

Hi Flood, I opened the incident with # INC000012418131 but…. oops! I didn’t write the questions or more details. I gave an overview and directed them here for more detailed description of the situation. Added a scan. I also asked for Igor to be included into the conversation because I don’t know how to cc him. May be when we start emailing, it will be possible. Thank you for these tips. I’ll add the questions to the incident About the KVPN and the KillSwitch: I use the KVPN with the KillSwitch always. And I can hardly ever get into the Internet while KVPN is active. I always assumed it is because of the KillSwitch. I never tested it separately. Here I’m pasting the circular wifi icon. This morning it was square. After I woke the computer up in the afternoon, it became circular. I have no idea what to think now! Is it safe? Is it not? This is the “Circular wifi icon” Somehow though, this afternoon, there are no more 0kb apps running. I’ll keep you guys updated. Thank you so much for everything

Dear Flood, I’m so sorry… My brain is about to melt with the melting computer 😂 I haven’t seen your response before I posted mine (again… 🙄 ) Because, this thing is like chasing chicken or fleas… I want to jot down what I see right away before it gets too complicated to have a clear, truthful document. I totally appreciate your response, time and attention. 😍 Thank you all for sticking with me until this (and other computer too hopefully) are hacker-free. Honestly… I think some people can have better things to do than sticking their noses in other people’s lives. And yes, I’ll add Igor into the incident. Thank you very very much

I want to jot down what happened today (I’ve told the tech support that I’ll do, may be they can utilize it) I started the computer, (with bios needing a refresh in order to enter windows) I checked out the running programs. I blocked about 10 of them with 0 file size. Hit clear. Some were gone and none were active. I downloaded Rufus. I plugged in the external harddrive to retrieve AOMEI and checked out few folders. Carried few songs and such to this computer. I checked out the running programs and voila… there were many applications with 0 bytes. I didn’t even move this program’s installation file. I don’t even remember clicking on it. But, it was among the files in the folder which I looked into. Rufus was showing 0 kb too… I just downloaded it. Didn’t even touch it.I ignored them and took the time to respond to the tech support. As I returned back to the running apps list. I saw only one: I blocked it and hit clear and it was gone. ******* Can you please tell me… Is this 0 kb normal ? If not, can I make Kaspersky clean them automatically ? (I can’t always check dozens of applications one by one) Once they are filled with regular bytes and some normal looking info, does that mean: They are back to normal, so I can unblock them ? they are carrying my information to be transmitted over the internet ? If not, does this mean what I think it is: they are being used as a carrier to ghost my computer ? I’ve done dozens of scans with Kaspersky. It never found a problem. If these are hacker tools, what is my solution? Does my inability to connect to the internet with the KillSwitch is a sign of this problem? I noticed when the kill switch is on when the internet starts, the programs first starting off are of Kaspersky. If KillSwitch is off, I have many “host processes for windows” I can’t remember which one but, when I “block all network activity” I see either the network traffic or the network activity still having some activity. Is this normal? Right now, the kill switch is on and the wifi icon is circular. (it was square before I woke up the computer)… seriously, how much should I freak out from these things?) Thank you Flood, Igor and the tech support people.

Hi Flood, Re “8weky”, Yep, I noticed that it was among the hidden files. 😳 I’m ashamed to have a false alarm here but, it’s easy to get paranaoid when all act up weird. It helps to hear that something is in fact “normal”. Thank you. I’ve done their diagnostics. But, Kaspersky is not finding anything weird. So, I don’t know how much it will help. But, they’re (you guys are) the experts… so, I’ve done what they asked and sent them. They may need to reopen another incident, as it was closed due to inactivity. (well, it’s hard to respond to emails especially when your computer is messed up. I’ll make a suggestion to have a diagnostic help through a medium like this. It is easier to track and also load files)

​ I need to please ask you guys to let me know if I’m doing anything out of ignorance which either turns out to be a ‘false alarm’ or damaging to either to the functionality or hardware of my computer. My observation has been that these bots replicate and simulate the ‘official’ apps like “your phone” or “photos”. Last time, when I blocked them from startup, it finally came to a point where I’ve blocked everything from paint to who knows which important programs. So, I had to re-format the computer. (I don’t know if I can unblock them when they seem to have turned back to their ‘normal-selves’ /lol When I was re-formatting (I used AOMEI flashdisk for) I noticed changing values of missing disk space, extra partitions (like it said “Rufus had to create another partition”, but all those times, only one time it needed this???), Of course, I did many scans for surface etc. It has never been stable and explainable, but random. Right now, the computer doesn’t boot into Windows directly. I have to “reset the bios to the suggested settings” and then I can get into it. Strangely, the bios program I downloaded comes with both part1 and part2… It wasn’t like that about a month ago, when I upgraded it. So, I haven’t been able to flash the bios yet. It shouldn’t have needed this. But, sounds like a reasonable step to take. So I’m like WTF ??? 🙄😲 (pardon my french) ​

INTELLIGENT ?!? BOT ISSUE: Hi Flood, Remember, above I mentioned about 52 “host processes for windows services” starting up before Kaspersky even got initiated in the Network Monitor activities… I checked on the running apps… Guess what, a bunch of those again. I don’t have time to handpick and eliminate but here I post some pictures which I believe shows at least a part of the process well sample hacker botSample hacker bot’s non-existend addressHere is the list of today’s (actually, this hour’s) bots deactivated: List of this hour’s bots deactivatedBelow is the list of the bots after ‘cleanup’. Only one got cleaned and the interesting points are: Now these are filled with legitimate date and size Their addresses are all windows apps. As I’ve posted on the picture above there does NOT exist a folder with the address C/programfiles/windowsApps. Except the two tmp’s from the bottom all have the “__8weky...” which I picked up as another sign indicating they are bots.

WIFI ICON & KILL SWITCH ISSUE Ok, Flood, I just checked it out. When my computer woke up, I had to exit VPN so that I’d get the internet. I clicked on VPN when the internet got connected. VPN turned green and the Wifi icon was still circular. I was monitoring the network at the same time. Initially there came like 52 “host processes for windows services”. Soon the icon turned to the box and the 52 processes dropped to 1. The settings “unidentified network” and such are like you described. So, when it is set, it seems to be working. What I don’t understand is why I very rarely am able to connect to the internet while the kill switch is on and why I always get a lot of windows host processes even before kaspersky programs start working. Because when it works right, I see that first Kaspersky programs start to work and then other stuff start working. Also, can you please tell me why is that when I click on “block all network activity” I still see the “network activity” flowing while the “network traffic” stops. I appreciate that. About what the Kaspersky Tech Support… they requested a bunch of diagnostics, which I’ll have to work on later. I’ll let you guys know how that goes.

Sorry Flood, I didn’t see your response before I uploaded mine… Having problems with not only the internet but also the electiricty 🤔😂😖 With your permission, I will respond to your answer soon. I have to run now. Meanwhile, unaware of your answer I’ve uploaded the image of what I’m talking about. Many thanks

This is what I’m talking about the WIFI icon.

Ok, let me start with what I did after the computer got all haywire…🤔 I formatted my computer, deleted partitions, wiped data clear with Gutmann ? (35 times rewrite) reinstalled windows; each time paying more attention to have it all clean… very clean. And I did this many, many, many times. I’m starting to worry that my SSD is going to get old very soooon. 😆 Right now, I have only windows 10, kaspersky total security, KVPN, Firefox and that’s it… (and a small folder of files and programs which are not touched yet) Of course the drivers and windows updates are there too… I haven’t visited any weird websites or such. I have checked my email, looked at youtube and msi website etc. KVPN icon: When I first had the computer setup, the KVPN button was showing the circular icon even with VPN on. Yesterday and today, it switched to the box icon. I don’t seem to have the “ghost available network” anymore. It had showed up only once in one of my re-formats. Since then, I haven’t seen it. It has been only couple of days since I had this clean reinstall/format of my computer. Today, I decided to have a look at the running programs. I have counted and disallowed 52 programs with 0 bytes and created on 01/01/0001 or some date like that. After I did a “cleanup” only two of them remained. More interestingly, when i checked the contents of those programs, they were now filled with regular dates and bytes...: 1_29_21__6 The 2 remaining from 52 of 0byte programs filling up after being disallowed and “cleanup” Please check out the file path of one of these programs. (I’m sorry this is not in English, somehow Kaspersky downloaded the Turkish language version) Do you see the file path??? I don’t.Translation of the definition : Unknown creation date and edition date. But, it says the reason for moving to the group is the digital signature which is missing. You see the “kzf8q….” that is going to be the code that is going to be used later on. Before I reformatted my computer, that was the other sign of the bots. Again, I thank you many times for helping me out. This thing has taken months of workdays and I’m starting to become quite an non-volunteer expert in hacker stuff… 😅😂😠 I swear they are “ghosting” my computer and they are using the standart, what is it called… like torrent style… 🤔 😂 …. no expertise claimed 😂 Many thanks again

Hello Flood and Igor, Thank you for your responses, it is good to know that I have some help from the experts :) . I’m sorry for not answering earlier. As I was writing an answer things started going haywire and I had to re-format my computer again. First let me start with Flood’s suggestions: As you got my attention to this “cleanup” option, I did that and it cleaned many. But, the 7z s were gone before I even did the cleanup (because they were fake to begin with /lol) I did all of those “cleanup options which you showed. I had just cleared the KTS settings when I have opened up this topic. So, I didn’t go through it again. But, eventually, I had to as I just reformatted my computer. The KVPN and Wifi issue is just like this: When I have the VPN on, sometimes have a “circular” wifi icon and most of the time a square which looks like a monitor with a plug. And it says “unidentified network”. My question is which one of these is the correct one when I have the VPN on? Unfortunately, the computer still has problems and I’ll write down on the next ‘reply’ what I did and what happened.

I have seen hackers in my computer when I had AVG FREE. Then I purchased Kaspersky Total Security with VPN and Password Manager. I also purchased a new computer and re-formatted it about 2-3 times now. Everytime I run Kaspersky Scan, even with boot disk. I still have these issues and they are like fleas in my computer. I can’t use my computer for the last 8 or so months. The main issue is: I have subprograms which I observe when I go to “Application Manager” section… They are 0KB and all created at the same date 01/01/0001 (or 2001 before, if I remember right). They nest inside other legitimage programs and carry names that make sense. I just observed 50 of them. I manually blocked them from starting. When I restarted my computer, I noticed they dropped down to 17. And interestingly, (or sarcastically, as I’m like a rat in this computer chasing these flies) I saw a program (which is not the first time I see it) called IGOR PAVLOV with about 10 zip applications with same characteristics. And I blocked them from starting. As I started to check out other programs one by one (as if I have all the time on earth to do this) … I noticed something very interesting. First I thought it was my perception, that I saw it such in error but, when it repeated I realized something horrendous: As I move my mouse over these programs/applications, the initial description box bubble gave the 0KB etc info and it immediately switched to something more legitimate with some KBs in it. I have been noticing the same thing about the Kill Switch. It looks green on the task bar, meaning it is active but, as I click on it, the animation of “just turning on” occurs… I was thinking it must be as such and trying to suppress my suspition. But a similar thing has been happening with my Available Networks: Before I reformatted my computer, even when the VPN was active the network icon on taskbar (right side) would be square and correlated with my actions/responses there would occur another network, which looked as it is far away. But, I don’t live in a city and it is highly unlikely that somebody keeps turning on and off their network so much in synchrony with my connecting or disconnecting from my network. Finally, I am becoming quite convinced that this “Hacker/Virus/whatever” is acting intelligently and in response to my actions, constantly evolving it’s camuflage as I discover. Am I being paranoid…? I don’t think so! these are OBSERVATIONS for the last 8-9 months. Any help will be much appreciated… I can’t use my computer. I need my computer fully functional so I can get to work… I’m wasting enormous amount of time chasing fleas here! I opened an incident with number INC000011888975 (another thing I believe may have something to do with this issue is , I seem to get more of these hackbugs after I upload video to YouTube… Just a feeling… can’t say for sure) (obviously Cortana is blocked too because I hate nosy windows as much as hackers)