Jump to content

SAJFLADD

Members
  • Posts

    43
  • Joined

  • Last visited

Posts posted by SAJFLADD

  1. 9 hours ago, Berny said:

    Additionally , please see Support article → Disable Windows Defender  and check WD in MSCONFIG  at "Startup" and in the "Services".

    Thanks all.

    Berny, Defender is now disabled in Startup, but what of the 'Windows Defender Firewall' in 'Services' - i've rebooted the PC after implementing the above procedures and it's still running, so should that be disabled/stopped also - and if so, how?

    Thanks

  2. I'm using KIS, with a paid subscription, on a Nokia 2.4 mobile, using Android 11. A few days ago, when I opened KIS, the usual green screen appeared but instead of opening the app, the green screen persisted. I uninstalled the app and reinstalled KIS, which solved the problem. However, now,  a few days later, the same thing's happened again - so what's going on - how do I get the app to open fully?

  3. Thanks Berny. As I suspected, a bad idea. Someone should tell that to Microsoft though, as there are probably plenty of people who read that Microsoft statement without checking with Kaspersky, simply trusting what Microsoft say. All it needs is a continuation of the statement with '...but check with your vendor if their product is compatible with Defender'.

    Cheers

  4. Hi,

    I’m using Windows 10 Home, vs 20H2, and KTS, vs 21.3.10.391 ( e ). 

    As seen in the attached screenshot, Microsoft state that ‘you can keep using your current provider and get Microsoft Defender Antivirus to check periodically for threats’. However, is it still a bad idea to have two antivirus products operating on the same system, or is it OK to run the periodic scans, considering the two above stated products I’m using?

    Thanks

     

  5. In KTS2021a, I had password protection turned on to access settings. I used to select require password each time, rather than keep it for the current session. Even if keep for the current session was selected, rebooting the machine would wipe that selection, so the password would again have to be entered 

    However, KTS2021b got installed last week, and as seen in the screenshot, I have password protection turned on, but can access settings without having to enter the password, even after a reboot. So what’s going on? How can I get it to require the password to be entered each time I want to access settings?

    Thanks 

    S

  6. UPDATE: After a talk with the local support, they sent the case to specialists in Moscow. 

    According to Kaspersky Lab’s specialists, if the program is in the Trusted group, System Watcher does not consider file operations (read, write, create, delete) to be dangerous (since programs that are in that group are trusted programs and may do that legitimately).

    On the Trusted group, SW monitors only critical events like process starts, thread starts, write on remote process, etc.

    Also, when Application Control is turned off, SW follows KSN rules, so the program was not considered as Trusted. Hence, its files operations were intercepted and blocked.

     

    With that being said, I believe that is the reason SW didn't block the file.

     

    Hi

    You understand this stuff a lot more than I do, but isn't the answer to just not put things in to the trusted group manually and leave it up to the kaspersky application to decide?

    S

     

    The problem here was a possible vulnerability on the product, not the infection itself.  No one would never put an untrusted file in the Trusted group (I hope so).

    What if a malicious program has a valid digital signature and because of that, it is placed in the Trusted group? Does it mean SW wouldn’t check its activities? 

    The main question was: Does System Watcher really monitors apps in the Trusted group? According to my test, I thought it didn't, But as it turns out, it does. We’re just discussing and learning about the product.

    This discussion may help people tune their configuration (as it did for me). 

     

     

    Will the kaspersky app put an item in the trusted group just because it has a valid digital signature, or does it consider the apps behaviour as well - such as examined by the the so-called heuristic analyses? Hopefully, if the program behaved in a suspicious way, regardless of valid signature, it would not get put in the trusted group.

     

    Heuristic analyses will always check the file. The decision on which trust group the app should be placed starts after the product has considered the file to be safe. The behavior analysis continues to be executed regardless of the trust group was assigned to the item. But, if the assigned group was the “Trusted” group, non-critical tasks, like some file operations, are not considered to be malicious.

    In the settings, is it marked by default “Trust digitally signed applications”. If this is marked, the product may put a digitally signed item on Trusted. But according to Kaspersky experts, this decision takes into account other things.

    Even though the probability of this occurs is extremely low, I’d recommend unchecking this option.

     

    Fortunately, I always do uncheck that box. Cheers. 👍

  7. UPDATE: After a talk with the local support, they sent the case to specialists in Moscow. 

    According to Kaspersky Lab’s specialists, if the program is in the Trusted group, System Watcher does not consider file operations (read, write, create, delete) to be dangerous (since programs that are in that group are trusted programs and may do that legitimately).

    On the Trusted group, SW monitors only critical events like process starts, thread starts, write on remote process, etc.

    Also, when Application Control is turned off, SW follows KSN rules, so the program was not considered as Trusted. Hence, its files operations were intercepted and blocked.

     

    With that being said, I believe that is the reason SW didn't block the file.

     

    Hi

    You understand this stuff a lot more than I do, but isn't the answer to just not put things in to the trusted group manually and leave it up to the kaspersky application to decide?

    S

     

    The problem here was a possible vulnerability on the product, not the infection itself.  No one would never put an untrusted file in the Trusted group (I hope so).

    What if a malicious program has a valid digital signature and because of that, it is placed in the Trusted group? Does it mean SW wouldn’t check its activities? 

    The main question was: Does System Watcher really monitors apps in the Trusted group? According to my test, I thought it didn't, But as it turns out, it does. We’re just discussing and learning about the product.

    This discussion may help people tune their configuration (as it did for me). 

     

     

    Will the kaspersky app put an item in the trusted group just because it has a valid digital signature, or does it consider the apps behaviour as well - such as examined by the the so-called heuristic analyses? Hopefully, if the program behaved in a suspicious way, regardless of valid signature, it would not get put in the trusted group.

  8. UPDATE: After a talk with the local support, they sent the case to specialists in Moscow. 

    According to Kaspersky Lab’s specialists, if the program is in the Trusted group, System Watcher does not consider file operations (read, write, create, delete) to be dangerous (since programs that are in that group are trusted programs and may do that legitimately).

    On the Trusted group, SW monitors only critical events like process starts, thread starts, write on remote process, etc.

    Also, when Application Control is turned off, SW follows KSN rules, so the program was not considered as Trusted. Hence, its files operations were intercepted and blocked.

     

    With that being said, I believe that is the reason SW didn't block the file.

     

    Hi

    You understand this stuff a lot more than I do, but isn't the answer to just not put things in to the trusted group manually and leave it up to the kaspersky application to decide?

    S

  9. Hi,

    Remember that these steps were because I couldn’t run KPM in Windows 10 Home Standard account (whereas it would run in the Admin account). The following were the instructions:

     

    Please try the steps below:

    A. Access your Online vault via my.kaspersky.com and see if all your entries/records are there.

    B.Uninstall Kaspersky Password Manager via Control Panel without saving any settings.

    Step #1
    Uninstall any previous Kaspersky software.

    Important:During the uninstallation process the program will ask if you would like to save the license data. Please leave that option un-ticked.

    1.Place the pointer of your mouse on top of the “Start” button and right click on it.
    2.From the menu that will appear select “Apps and Features”
    3.A new window will come up and a list will be populated.
    4.Locate the program(s) you want to remove *the list is alphabetical,in your case Kaspersky Password Manager and then select Uninstall.
    5.Follow the directions on the screen.

    A reboot might be required. If so, do that.

    C.Exit from KPM, rename folder C:\Users\\AppData\Local\Kaspersky Lab\Kaspersky Password Manager\. And C:\Users\Default\AppData\Local\Kaspersky Lab\Kaspersky Password Manager\

    with Kaspersky Password Manager_renamed

    Start KPM.


    If you receive any kind of error perform the deletion in safe mode:
    Please reboot your computer into safe mode, a detailed 'How to' guide can be found here: http://support.kaspersky.com/general/various/493

    If you need to see hidden files In Windows 10 : https://support.microsoft.com/en-us/help/4028316/windows-view-hidden-files-and-folders-in-windows-10

    D.Re-install Kaspersky Password Manager and try to login back to My Kaspersky account.

     

    I carried out these steps and now KPM works a treat in the Std account.

    Hope this helps.

    Cheers.

    S

     

    MOD: Edit

  10. ...it still won’t open in Windows 10 Standard Account. 

    ... is there something … need to be doing to get it to open in the std account?

     

    Hi @SAJFLADD
    Try this:

    1. Backup KPM. 
    2. Uninstall KPM
    3. Delete the following folders:
      C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\
      C:\ProgramData\Kaspersky Lab\Kaspersky Password Manager\
      C:\Users\<username>\AppData\Local\Kaspersky Lab\Kaspersky Password Manager *
      *(put your username instead of <username>)
    4. Install KPM anew. 

    Regards,

    Igor

    Hi

    Thanks, but Kasp techs sorted the problem a few days ago.

    S

  11. It’s not my expectation, it’s what KTS 20 actually did - at least my KTS 20 did, and I don’t recall having to set it up to do it, it just did it itself. 

    I was pleased when I first intallted KTS 20 and found it did this, because I had asked on this forum previously, when using a previous version of KTS (I think it was KTS 18 or 19), why the link went to a general welcome page instead of the specific product forum. So when KTS 20 did exactly that, it seemed somebody also thought that was good a good and changed it to do that, but now it’s gone backwards to the general.

  12. Hello @SAJFLADD,

    Welcome again!

    • The letters represent patches, the versions are represented by numbers
    • To answer “why” is not so easy, maybe one of the Kaspersky pointy heads will be able to provide the actual rationale, there’s sure to be one, certainly known to them🤔
    • Regarding the Community link from the GUI → image 1, resolves to Welcome to Kaspersky Community → image 2

     

     

     

    Thank you🙏

    Flood🐳

    Hi,

    Re 2. that’s what I’m saying, in KTS19, the link took you to a similar welcome page, in KTS20, it went straight to the specific forum (which is what you would expect, a link to the forum for your specific prodcut), but now in KTS 21, it’s reverted back to a general welcome page from where you have to select your product. 

    Obviously a minor thing, but I just wondered why the change from the specific to the general.

    Cheers.

  13. Hi

    A couple of questions.

    1.

    There’s a bunch of numbers after a kaspersky product version number, such as KTS 21.1.15.500(a), with the letter denoting an updgrade version (or whatever an upgrade is called), which alphabetically changes with each each upgrade (e.g. a, b, c...).

    So with all those numbers, why don’t they just change the number instead of bothering to have a letter and then changing that letter, e.g. KTS21…..500 changes to KTS21….501?

     

    2.

    In KTS 21, the ‘community’ link, on the ‘support’ page, accessed from the support icon on the KTS GUI, leads to the Kaspersky products page, from where the KTS forum has to be selected. In KTS 20, the community link used to go straight to the KTS forum, which is what would be expected, given it’s community support for KTS that’s required.

    So why the change? This used to happen when accessing the forum via that link on previous products (KTS19 and below), but was then changed (for the better) with KTS 20, but has now gone back to the previous way. So is there a way of going straight through to the KTS forum from that ‘community’ link?

     

    Thanks

×
×
  • Create New...