total

So Kaspersky refused to "reset" the counter for my 3 PC KAV license , even though on 2 of them the license is still valid, only when I reinstalled on 3-rd one I triggered the "oversused" So, I decided to dump KAV in favor of another solution. Bye and thank you for your help.

Hello, I have a 3 PC KAV licences (2 laptops and on PC) I like to "experiment" with PC (uninstall/install, try various AVs) . At a certain point I couldn't reinstall KAV and I got "license overused (still working fine on 2 laptops) I contacted Kaspersky , the want "proof of ownership" from several years ago... I do not have it , but kaspersky can clearly see installation on same IPs. If the license cannot be restored I have no other choice than to dump KAV and use some other solutions . Thanks!

I do not save any money , still Kaspersky Anti-virus is valid for 650 days. I really do not want a program to "optimize" my PC, to search for "duplicate" to install a "firewall" which essentially is as good as Windows firewall, etc. Just need a pure antivirus like Kaspersky -antivirus and nothing else.

I updated to 21.13 , but this is no longer "Kaspersky Antivirus" , is "Kaspersky Standard" with all kind of bells and whistles; I really do not like it (Is telling me "we did not disturb you for 20 min" really????) So I reverted to antivirus

This is what I have now; yes the "tool" is there

Just discovered in "More Tools" the "Browser Configuration Tool" Is offering to configure "internet Explorer" !!!!!!! Am I missing something or what????

I know it is no impact on OS operation, but expectation is , from a dedicated removal tool , to remove all items generated upon install of that program

After uninstalling KAV using 'kavremover" I had to manually delete at least 40 registry keys and a lot of files in ? drive, see below: So, what is the purpose of a specialized tool as long as there are so many remains behind?????

No , simply in HDD properties, you disadle it from there: But you were right, I had to reboot the PC after that in order NOT to have indexing. After that , the detection looks like this: Event: Malicious object detected User: JDOE-DESKTOP\JDoe User type: Active user Application name: WinRAR.exe Application path: C:\Program Files\WinRAR Component: File Anti-Virus Result description: Detected Name: UDS:DangerousObject.Multi.Generic Precision: Exactly Threat level: High Object type: File Object name: 3283e60979e2767695506468f28d11aa16817e52182ce35d3aa99c0e02d3e8d3.exe Object path: D:\Last_screen\Downloads\3283e60979e2767695506468f28d11aa16817e52182ce35d3aa99c0e02d3e8d3 MD5: F5C6596ED435C7CBB67627752D8B7D01 Reason: Cloud Protection Thanks, all clear now!

So, I disabled "indexing" on C:drive and all subfolders. Now I get: Event: Malicious object detected User: JDOE-DESKTOP\JDoe User type: Active user Application name: SearchProtocolHost.exe Application path: C:\Windows\System32 Component: File Anti-Virus Result description: Detected Name: UDS:DangerousObject.Multi.Generic Precision: Exactly Threat level: High Object type: File Object name: 3283e60979e2767695506468f28d11aa16817e52182ce35d3aa99c0e02d3e8d3.exe Object path: D:\Last_screen\Downloads\3283e60979e2767695506468f28d11aa16817e52182ce35d3aa99c0e02d3e8d3 MD5: F5C6596ED435C7CBB67627752D8B7D01 Reason: Cloud Protection So, in fact, no change compared with previous detection; I do not get the "Application path: C:\Windows\System32" Thanks!

Thank you for your answer! Do you care to explain how did you figure out "It seems Windows Search Service (SearchProtocolHost.exe, located in C:\Windows\System32) tried to index that new extracted file" ???? If I disable "indexing" in my PC , the detection would be different? Thanks!

Hello, I downloaded a zip file from MalwareBazaar and I unzip it without any execution; I have this detection: Event: Malicious object detected User: JDOE-DESKTOP\JDoe User type: Active user Application name: SearchProtocolHost.exe Application path: C:\Windows\System32 Component: File Anti-Virus Result description: Detected Type: Trojan Name: VHO:Trojan-Spy.Win32.Stealer.gen Precision: Heuristic Analysis Threat level: High Object type: File Object name: 3283e60979e2767695506468f28d11aa16817e52182ce35d3aa99c0e02d3e8d3.exe Object path: D:\Last_screen\Downloads MD5: F5C6596ED435C7CBB67627752D8B7D01 Reason: Cloud Protection What is "Application path"???? I repeat, nothing has been executed, the object was just unzipped on "D:\Last_screen\Downloads" ( which is correctly identified on "object Path")

Thank you! Is there any tutorial or info I can read about all these?

Hello, Is there any "user guide" or something to read about detection classification??? See below: VHO:Trojan.MSIL.Convagent.gen UDS:Trojan.Win32.Packed.gen HEUR:Trojan-Banker.Win32.Mekoban.gen While HEUR I may have an idea what it is, what about VHO, UDS ???? Any more like these??? Thanks!

Hello Berny, You are not far from the truth... If KAV is set to "Perform the recommended actions automatically" , Kaspersky will display a yellow warning sign on its icon and will copy the file to quarantine, delete or disinfect and finally will display the red warning pop up , informing you about what happened. Between the yellow triangle and red pop-up you may have 5-8 sec If KAV is et in interactive mode, the red pop-up is instantaneous , asking for your decision; once you specify what to do, Kaspersky will perform the action "behind the scene" , so the user will not notice any delay.