Search the Community

This instruction is relevant only in case of troubleshooting incorrect loading or rendering of a web page. In order to troubleshoot issues KES network traffic related issues traffic dump is required. It is easier to analyze and does not require third-party software installation. If reproduction of the issue requires the web browser to open web pages(such as web control non-working as expected, web page not loading, and so on), the tests should be performed in Incognito mode(also known as private browsing). Chrome browser: Ctrl+Shift+N or you can start browser from terminal: & "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -incognito . Starting application from terminal will make launch key visible in traces and make diagnostic easier. Firefox browser: Ctrl+Shift+P or you can start browser from terminal: & "C:\Program Files\Mozilla Firefox\firefox.exe" -private-window . Starting application from terminal will make launch key visible in traces and make diagnostic easier. Microsoft Edge: Ctrl+Shift+P Opera browser: Ctrl+Shift+N KES11/12 Instructions Disable KES11/12 Self-defense Navigate to the following registry key: x86: HKLM\SOFTWARE\KasperskyLab\protected\KES<Build version>\environment\ x64: HKLM\SOFTWARE\Wow6432Node\KasperskyLab\protected\KES<Build version>\environment\ Create a string type value named DumpNetworkTraffic : DumpNetworkTraffic = (REG_SZ)"1" Restart the product or reboot the host Traffic dump files will be saved to %ProgramData%\Kaspersky Lab\KES<Build version>\Data\traffic Once the issue is reproduced compress the whole traffic directory Do not forget to disable traffic dump collection. To do so delete DumpNetworkTraffic value.Then restart the product or reboot the host.

Thanks for reply. Just now, my Windows prompted me to update. After the update, the quick scan returned to normal. Thank you very much. Could you explain what caused this?

I have had this issue yesterday, but now it connects again. Still, it is really slow and unstable. Not sure how it fixed, just did it by itself. I think it just has to do with the infrastructure updates not being fully tested and complete. They must have rushed this update so quick, hence all the issues. Hopefully something official comes up.

I just want ask you if it is okay use not officially released product. So on my local website kaspersky.cz is still version 21.3... And i have link for download czech version 21.8 and also for 21.9 newest version i thinkg. These versions are not released officially on kaspersky.cz (will be later). It is okay use it? And what about share this link with others? Or it is forbidden? Please only special statement from KL employee for example @Danila T. or @Igor Kurzin Thank you

After I installed the antivirus it just FULLY DISABLE my keyboard and any keyboard even USB. I can't use the keyboard other than the virtual one... I need to re-enable this URGENT, I need my keyboard working on my notebook, I need this working Don't show me links, because all the links I found are either with an old version of the antivirus, or are on any other subject once again, after installing the antivirus, my keyboard on my notebook WAS TOTALLY DISABLE, IT IS DEAD, AS IF IT WAS TURNED OFF, NOT EVEN CAPSLOOK WORKS, and before you ask, it worked PERFECTLY BEFORE INSTALLING THIS ANTIVIRUS I PAID AND NOW I AM NO KEYBOARD.

Hello guys, Currently i am running Microsoft Windows 10 Pro 22H2 Build SO: 19045 with latest Microsoft Windows 10 updates. I was using Kaspersky Cloud Free as my antivirus. Yesterday i received an update for my anti-virus for the newest Version 21.9.6.465. I cannot open On-Screen Keyboard even if i press the shortcut keys CTRL+ALT+SHIFT+P. I also uninstall the antivirus completely and remove all leftovers. I also Uninstall only one of my web browsers Mozilla Firefox I downloaded the latest version available on the global website from Kaspersky and from My Kaspersky (Downloads). The version is the right one for European countries. If you remember well i already faced this problem in the past. But on that time Seem's there isn't any version available for European countries, so the resolution was removing completely Kaspersky free from my system and install the Kaspersky Security Cloud Free. I think I will make the same when you find a solution, please tell me OK! I did a Microsoft Windows Clean install on March 30, 2023. I am running out of ideas to fix the problem! I use Home Banking a Lot i need my On-Screen Keyboard to put the Password instead of Physical Keyboard. I think it's safer! But if nothing of this works in either Browser I will be forced to downgrade. But i also think that sooner or later my anti-virus will want to make the upgrade happen again. So, what can i do to avoid that? Thank you very much for the time that you will spend to try to find a solution. Best Regards. Hugop.

Hi. First time using kaspersky premium and I am still learning the ins and outs. How do I disable the feature of where kaspersky keep asking me for permission to allow apps to access registry? While I appreciate the security tightness, it get very tedious to click allow every time I boot my pc or launch an app that I know and trusted. Cheers! :D Picture below.

I left my computer alone for two weeks, When I returned my Kaspersky icons had disappeared from my desktop. Kaspersky still appears to be running but I cannot launch it from the apps list and get the same annoying dialogue as the original poster. Kaspersky also cannot open the secure browser to my Bank or other financial sites. I have tried downloading Microsoft.net framework and reinstalling it but this achieves nothing either. Is this some monkey business from Microsoft?

It's pretty useless to scan password-protected archives via VirusTotal.🙂 For a quick solution, you can try to configure an exception, as shown in the screenshot (don't forget to save the changes). Perhaps you may need to add something else to the exceptions.

Did you find a solution? I have the same problem. Clients receive a critical alert because KES is not working, and when trying to launch the application through KES, this error appears. When the client computer is restarted, the problem is resolved. However, I would like to resolve the issue causing KES to fail and stop. As shown in the attached image, out of almost 200 computers, four are experiencing the same problem. This occurs daily on different computers. If I restart these four computers now, tomorrow there will be other computers with the same problem.

Having upgraded to Premium from Total Security, the virtual keyboard in Safe Money no longer functions correctly. Clicking on the keys does not always register, so passworded files and websites are very difficult to access unless I resort to using the real keyboard, which defeats the point of having a virtual keyboard for security

Quick startup keeps disabling some of my preferred startup items, I turn them back on thru the Kaspersky UI, It tells me to reboot. System then allows them all to run, but then Kaspersky Standard disables them again. How do I permanently turn OFF this **** and unwanted "Quick Startup" Lenovo kaptop, UEFI System AMD Ryzen cpu, 32gb ram, 2 x 512gb ssd, win 11 ver 2000.856

Hello everyone, After I updated Kaspersky Free to the latest version my keyboard stopped working. I tried many solutions but nothing worked. Please help.

I found Kaspersky, as well as two other previous softwares, cannot discern between a standard form field and one that needs extra care. Always sticking the prompts in a standard address field or whatever. I did find a control for this in the primary Kaspersky interface by typing "key" in the search field at the top, and selecting secure data input. You can keep the function enabled, but called upon with a keyboard shortcut only, and then disabling the prompt. You can choose types of fields you want the virtual keyboard to pop up in, but I have no faith. I have Bitwarden for my passwords and credentials, so no typing anyway.

Problem Using EDR, you may encounter an issue where you're unable to view incident card regarding a detection in KSC Web Console. It looks like this: Here we will discuss known causes of such behavior (several products are involved, so causes may be different). Possible causes and solutions MDR In MDR, incidents are to be viewed using the dedicated MDR Console, and KSC version 13 and newer with configured MDR plug-in. KSC 12.* Web Console will not receive the data; this is expected behavior. KES+KEA If you first install KES without EA component, and then a standalone KEA package, KES EDRO integration will be disabled and killchain will not work. Here is a quick way to determine if KEA was installed as a component of KES. Open regedit, then navigate to: [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\KasperskyLab\protected\KES\Installer\features] "AntiAPTFeature" = "1" If the value is 0, proceed to the workaround to enable the component as described below. To fix this, we ran Change application components task on the host, enabling Endpoint Agent in KES. If KES/KEA integration is configured correctly, we can find the following in KES traces: 12:08:37.426 0x2a18 INF edr_etw Start processing detect = http://www.virusanalyst.com/eicar.zip//eicar/eicar.com, recordId = 6, taskId = 1128, result = 0 12:08:37.426 0x2a18 INF edr_etw Start processing actions = http://www.virusanalyst.com/eicar.zip//eicar/eicar.com, action = 4, recordId = 6, taskId = 1128, edrAction = 3489660999, result = 0 12:08:37.442 0x2a18 INF edr_etw Killchain is enabled! 12:08:37.442 0x2a18 INF edr_etw SystemWatcher is running! 12:08:37.442 0x2a18 INF edr_etw product::component::edr::`anonymous-namespace'::IsSystemWatcherDetect begin 12:08:37.442 0x2a18 INF edr_etw product::component::edr::`anonymous-namespace'::IsSystemWatcherDetect end 12:08:37.442 0x2a18 INF edr_etw product::component::edr::`anonymous-namespace'::InvestigateProcessIds begin 12:08:37.442 0x2a18 INF edr_etw product::component::edr::`anonymous-namespace'::InvestigateProcessIds end 12:08:37.442 0x2a18 INF edr_etw Finish processing detect = http://www.virusanalyst.com/eicar.zip//eicar/eicar.com threat status = 1, recordId = 6, taskId = 1128,result = 0 12:08:37.458 0x1f18 INF edr_etw Finish processing AV detect result = 0 Searching for ThreatID in KEA traces: 12:08:37.426 0x2a18 INF amfcd ThreatsProcessingEventsLogic::OnTreatActionImpl: ctx:0x23d68510 [TI 0x1b8dd490: id = 0x6, : tdid = {7F620459-6C51-9E46-9A5D-689A9B0D0098}, name = http://www.virusanalyst.com/eicar.zip//eicar/eicar.com, add info: <none>, 0x0] 0x4 0x0 KES+KEA (upgrade from KESB to EDR Optimum) EDR Optimum requires KSC 12.1 or newer to work. This includes the Network Agent, which is a part of KSC, and is generally installed on the host alongside KES. Using an outdated version of Network Agent (10.5, 11, etc.) will lead to the mentioned error when opening incident cards. If Network Agents were not upgraded along KSC, it's better upgrading them for EDR Optimum. KES 11.7+ Check that EDR Optimum feature is enabled in registry (GSI > Registry > HKLM_Software_Wow6432Node_KasperskyLab.reg.txt ). [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\KasperskyLab\protected\KES\Installer\features] EdrOptimumFeature = 1 If value is 0, run Change application components task on the host, enabling EDR Optimum in KES. Also in traces (*.SRV.log) you can search for sentence bundles::InstalledFeaturesProvider::InstalledFeaturesProvider and check that EDROptimumFeature is there, for instance in example below such component is missing KES.21.9.6.465_05.18_14.00_3952.SRV.log 11:00:36.897 0x26a0 INF bundles::InstalledFeaturesProvider::InstalledFeaturesProvider{ 3 (AVScannerAndCoreFeature) 28 (AdaptiveAnomaliesControlFeature) 0 (AdminKitConnectorFeature) 24 (AdvancedThreatProtectionFeature) 27 (AmsiFeature) 7 (ApplicationControlFeature) 17 (BehaviorDetectionFeature) 30 (CloudControlFeature) 4 (CriticalScanTask) 6 (DeviceControlFeature) 23 (EssentialThreatProtectionFeature) 11 (ExploitPreventionFeature) 8 (FileThreatProtectionFeature) 19 (FirewallFeature) 5 (FullScanTask) 2 (HostIntrusionPreventionFeature) 16 (MailThreatProtectionFeature) 14 (NetworkThreatProtectionFeature) 12 (RemediationEngineFeature) 25 (SecurityControlsFeature) 18 (UpdaterTask) 21 (WebControlFeature) 20 (WebThreatProtectionFeature) 22 (WholeProductFeature) } KSWS+KEA The same rule applies: KEA component needs to be installed in KSWS. KSWS does not have a "Change application components" task in KSC, so this has to be taken into account during KSWS deployment. Here is a quick way to determine if KEA was installed as a component of KSWS. Open regedit, then navigate to: [HKEY_LOCAL_MACHINE\Software\Wow6432Node\KasperskyLab\\WSEE\11.0\Install] "Features"="AntiCryptorNAS=0;AntiCryptor=0;AntiExploit=0;AppCtrl=0;AVProtection=0;DevCtrl=0;Fim=0;Firewall=0;ICAPProt=0;IDS=0;Ksn=0;LogInspector=0;Oas=0;Ods=0;RamDisk=0;RPCProt=0;ScriptChecker=0;Soyuz=0;WebGW=0" (Soyuz needs to be set to 1) If Soyuz is set to 0, apply workaround to enable it. KSWS allows to change its components locally or via cli. Here is the example of how to set Soyuz=1 when KEA was installed not as a component of KSWS: 1. Locate ks4ws_x64.msi or ks4ws.msi (depends on OS architecture) 2. Create custom installation package based on ks4ws_x64.msi or ks4ws.msi from p.1 with parameters as per screenshot (add UNLOCK_PASSWORD= if KSWS is protected by password in policy) 3. Deploy package on problematic servers with KSWS and KEA, then check registry that Soyuz=1 4. Check host's properties at KSC side - EDRO should be in Running state in KEA If KSWS/KEA integration is configured correctly, we can find the following in KSWS traces: 19:57:04.577 7a8 1310 info [edr] Published ThreadDetected: VerdictName : HEUR:Win32.Generic.Suspicious.Access RecordId : 0 DatabaseTime : 18446744073709551615 ThreatId : {ffb58079-6d8d-4a62-8ab0-021ff4ed61c5} IsSilent : false Technology : 3489661023 ProcessingMode : 3489660948 ObjectType : 3489660934 ObjectName : C:\Windows\System32\wbem\WmiPrvSE.exe Md5 : e1bce838cd2695999ab34215bf94b501 Sha256 : 1d7b11c9deddad4f77e5b7f01dddda04f3747e512e0aa23d39e4226854d26ca2 UniquepProcessId: 0xf7c807730e051a0d NativePid : 3360 CommandLine : AmsiScanType : AmsiScanBlob : FileCreationTime: 1601-01-06T23:09:56.075520800Z Searching for ThreatID in KEA traces: 19:57:05.583 704 9b0 debug [bl] ThreatsHandler: detect v2 verdictName: HEUR:Win32.Generic.Suspicious.Access detectTechnology: 0xd000005f processingMode: 0xd0000014 objectType: 0xd0000006 objectName: C:\Windows\System32\wbem\WmiPrvSE.exe nativePid: 3360 uniquePid: 17854528913448180237 nativePidTelemetry: 3360 uniquePidTelemetry: 17854528913448180237 downloaderUniqueFileId: <none> downloadUrl: <none> isSilentDetect: false threatId: ffb58079-6d8d-4a62-8ab0-021ff4ed61c5 19:57:05.583 704 650 info [evtstt] NetworkConnectionHandler statistics: queueSize=0, received=59675, processed=59675, dropped=0, queueBytes=191 19:57:05.583 704 650 info [evtstt] NetworkConnectionHandler statistics: queueSize=0, received=59676, processed=59676, dropped=0, queueBytes=132 19:57:05.583 704 650 info [evtstt] NetworkConnectionHandler statistics: queueSize=0, received=59677, processed=59677, dropped=0, queueBytes=371 19:57:05.583 704 9b0 debug [bl] Threats Handler: event processed, id = 2 19:57:05.584 704 1fc debug [killchain] Message discarded: name = ThreatDetect The verdict is Message discarded, this means the detection won't trigger killchain generation. No such entries can be found in traces, which might mean that EPP integration is not configured correctly (EDR component is disabled in KSWS). Check killchain presence on the host If all pre-requisites are met, it's worth checking if killchain files are actually created on the host. To check that, run cmd.exe as Administrator and check the c:\ProgramData\Kaspersky Lab\Endpoint Agent\4.0\Data\killchain\detects folder contents. Archives with <threat_id>.zip names should be present in the folder: C:\WINDOWS\system32>dir "c:\ProgramData\Kaspersky Lab\Endpoint Agent\4.0\Data\killchain\detects" Volume in drive C has no label. Volume Serial Number is 8010-ADC0 Directory of c:\ProgramData\Kaspersky Lab\Endpoint Agent\4.0\Data\killchain\detects 08/16/2021 12:20 PM <DIR> . 08/16/2021 12:20 PM <DIR> .. 08/16/2021 09:34 AM 636 0349c190-4ac3-4da4-9b64-07835298660f.zip //this is an archive with killchain info 08/16/2021 12:18 PM 696 1d306aa7-f37f-4ab2-969e-d337d398a995.zip 08/16/2021 09:34 AM 637 23a5dc93-5776-43c8-b949-79c102aa1184.zip 08/16/2021 12:19 PM 691 27bc9ea3-200b-49d2-b8b0-df7954cd428a.zip 08/16/2021 12:19 PM 683 40673c70-9e8e-420f-b5ce-65b406862b94.zip 08/16/2021 12:19 PM 688 590b6e30-4509-4b25-bdb0-062f89b7e062.zip 08/16/2021 12:20 PM 693 67993612-dc82-45a2-9e5b-74756adc46eb.zip 08/16/2021 12:20 PM 685 6a892bd1-f452-42d0-80b0-cb953cd7fc26.zip 08/16/2021 12:19 PM 686 a63fbafa-fcef-46f7-935f-42be4392a172.zip 08/16/2021 12:19 PM 699 d9d4f5eb-42b2-4460-8f8a-eb63bbef8791.zip 08/16/2021 12:19 PM 686 f6042624-9840-4a6e-9b30-9270cce22236.zip 11 File(s) 7,480 bytes 2 Dir(s) 240,763,092,992 bytes free

Hi All I have the same issue and I am using KIS (Kaspersky Internet Security) ?? Sorry for party crashing your topic. I am on a single computer using win11 updated a ASUS Keyboard (CERBERUS (K2)) USB - The "block" is random and from time to time?? - I just exit Kaspersky and turn him back on... But it is really frustrating - when I am typing and suddenly --- No reaction!! I don't have BADUSB attack and any of all those settings you showed here..? Hope for a solution Stay Frosty Netz

How can I disable the Kaspersky keyboard prompt in password fields using browsers on Windows 10 PCs? Nick

Hello, Thank You for Your reply. The article You’ve shared refers only to hardware and software requirements for macOS versions up to 15, while this report concerns a confirmed reproducible issue on macOS 26.0.1 (Tahoe, build 25A362). After detailed analysis, I’ve identified the exact cause — the new XPC handling in macOS 26 interferes with the com.kaspersky.kpm.bl.resolver endpoint. This results in Kaspersky Password Manager freezing immediately after launch. Removing or resetting that endpoint restores full functionality and stability. I would kindly ask You to forward this finding to the macOS development team so that it can be validated and patched in an upcoming release. Including this fix or a related note in the official documentation could also help other users who may experience the same issue.

Hi, I have Kaspersky VPN set to split tunnelling and to only work on Firefox. That's great, it works fine. However if I try and launch warcraft the game fails to connect. Why is this? It seems to imply as if split tunnelling is applying outside of just firefox. As soon as I close the VPN wow loads fine. Wow does not care about VPNs, other VPNs work fine on it so im a bit confused.

Hi, I noticed that "Applications Launch Control" in task mode "Statistics only" does block (deny) applications from starting. I believed that "Statistics Only" wouldn't block anything but in this case the opposite seems to be true. Whenever I see that an application is being blocked I add it to the "Rules list..." under "Rules managing" after which the application runs without any problems. The events all say that there are no rules found for applications that are being blocked. Does this have something to do with the option "Replace local rules with policy rules" under "Rules managing"? Can someone please point out why task mode "Statistics only" does block applications in "Applications Launch Control? KSC: 13.2 Kaspersky Security for Windows Server: 11.0.0.480 Best regards

I've been using Total Security for at least 10 years and never had an issue until recently. I have a 2.5 year old PC HP laptop running Windows 10 and a 2 year old Android phone running whatever the latest update is. I extended my Kaspersky licence to my phone. I use the Chrome browser on both devices. Over the past 2 to 3 months (it's sept. 4, 2022), both devices have suddenly shut off while I was in the middle of something. Re: my phone, it's happened in the middle of me writing a text and in the middle of a phone call. On my laptop, it has happened while I was working in an excel document and while I was shopping online and about to hit the checkout button. Those are just the examples I can remember. I have been able to restart my phone afterwards but my laptop doesn't want to power on afterwards. I sometimes can't use it for hours. Once it was about 2 days before it would start again. At the moment, I'm not able to power it up and I don't know how to resolve that. Perhaps this is just coincidence but lately, I've been getting the occasional pop-up that tells me I've exceeded my 300 MBs of VON protection and offers a button for extended protection. I followed it once to find out it's trying to sell me an add-on. I've told it to get lost every other time. Has anyone else experienced any of the above? Does Kaspersky know about it? When I'm able to get back into my laptop, is there anything I can do so that it won't happen again? Thanks

I would like to thank Kaspersky team for the lightning quick reaction! The problem is solved, apparently it was a minor glitch and many other users were impacted. Thank you Berny! This topic can be locked now.

After installing Kaspersky, all USB input devices (keyboard & mouse) stopped working immediately after booting into Windows. Windows itself boots fine, but since no input devices work, I cannot log in. The issue started after attempting to install Kaspersky. During installation, it gave a message stating that Avira was still installed, even though it had been removed two years ago. I manually checked the registry and deleted two Avira-related entries, but one entry could not be removed. I continued with the Kaspersky installation anyway, and then both of my monitors went gray, and several DLL errors appeared. After restarting the PC, USB devices stopped working completely in Windows, even though they still work in BIOS and in the Windows Recovery menu. Steps Already Attempted (None Worked): 1. BIOS & Hardware Checks: - Keyboard and mouse work in BIOS, so this is not a hardware issue. - Legacy USB Support is already enabled in BIOS, so USB ports are not blocked at the motherboard level. - Tried multiple USB ports (front, back, USB 2.0, USB 3.0), but none work in Windows. - No PS/2 ports available, so that option is ruled out. 2. Windows Recovery & Safe Mode Attempts: - Booted into Advanced Startup (Recovery Mode), and USB devices work there. - Booted into Safe Mode (F4), but USB devices do not work. - Booted into Safe Mode with Networking (F5), but USB devices do not work. - Booted into Safe Mode with Command Prompt (F6), but USB devices do not work. - Attempted “Startup Repair” in Recovery Mode, but it did nothing. - Tried “Reset This PC” with “Keep My Files,” but it failed with the error “Could not reset this PC, no changes were made.” 3. Kaspersky Removal Attempts (Failed Due to No Input): - Tried opening Command Prompt in Safe Mode to uninstall Kaspersky, but no input devices work, so I couldn’t type commands. - Manually checked Kaspersky’s installation folders using Command Prompt in Recovery Mode: - C:\Program Files\Kaspersky Lab does not exist. - C:\ProgramData\Kaspersky Lab does not exist. - Manually checked Windows registry for Kaspersky-related services (klflt, klkbdflt, klmouflt, avp, etc.), but none were found. 4. USB Driver Repair Attempts (Did Not Work): - Tried enabling USB drivers manually via Registry in Command Prompt: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBHUB3" /v Start /t REG_DWORD /d 3 /f reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usbhub" /v Start /t REG_DWORD /d 3 /f reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usbxhci" /v Start /t REG_DWORD /d 3 /f reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usbehci" /v Start /t REG_DWORD /d 3 /f reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR" /v Start /t REG_DWORD /d 3 /f None of these commands fixed the issue. - Tried forcing USB driver reinstallation using DISM & pnputil in Command Prompt, but it did nothing. - Checked disk partitions (diskpart) to confirm Windows installation drive was correct, but there was confusion with the drive letters (C: and X: were mismatched). Current Situation: - Windows still boots fine, but I cannot log in because keyboard and mouse do not work. - Recovery Mode recognizes USB, but Safe Mode and normal Windows do not. - Kaspersky is not listed in Program Files, ProgramData, or the registry, but the issue clearly started right after installing Kaspersky. - Resetting Windows fails, so I cannot even attempt a repair install from inside Windows. --- What I Need from Support: - How to fully remove Kaspersky (including any hidden services) without being able to log in. - How to manually enable USB drivers from Recovery Mode. - How to fix the "Reset This PC" failure in case a repair install is required.

Hello, Additionally, you can change the language of the installed version to English within the application by pressing SHIFT + F12 on the keyboard, and if you want to return to the original installed language by pressing SHIFT + F5 on the keyboard. You have to do it every time Otherwise, you have to do what your colleague mentioned. Regards

Hello. How to stop Kaspersky from creating shortcuts on my Desktop, this happens after software or database updates. Antivirus is not something you explicitly launch everyday like Microsoft Word, Microsoft Excel, Google Chrome, etc. Antivirus should run in background so I don't need to keep Antivirus (Kaspersky) shortcut on my desktop, because I will not launch it manually everyday. Why does it keep creating shortcut on my Desktop? I don't like it's behavior it acts like its a Boss on my PC and I'm just a guest or employee. WTF? BTW deleting Kasperksy shortcuts from my desktop requires me to enter the Admin password. STOP doing this on my PC. It is MY PC not yours.