Search the Community

# ------------------------------- # Malwarebytes AdwCleaner 8.0.3.0 # ------------------------------- # Build: 03-03-2020 # Database: 2020-03-13.1 (Cloud) # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Clean # ------------------------------- # Start: 03-20-2020 # Duration: 00:00:03 # OS: Windows 10 Home # Cleaned: 28 # Failed: 0 ***** [ Services ] ***** Deleted Main Service Deleted pgt_svc ***** [ Folders ] ***** Deleted C:\Program Files (x86)\DiskFixer Deleted C:\Program Files (x86)\MachinerData Deleted C:\Program Files (x86)\ProxyGate Deleted C:\Program Files (x86)\mipony Deleted C:\ProgramData\Garbage Cleaner Deleted C:\Users\Usuario\AppData\Local\Temp\mipony Deleted C:\Users\Usuario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\mipony Deleted C:\Users\Usuario\AppData\Roaming\mipony Deleted C:\Windows\TrustedLogos ***** [ Files ] ***** Deleted C:\Users\Usuario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\MiPony.lnk ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks cleaned. ***** [ Registry ] ***** Deleted HKCU\Software\Classes\CLSID\{F7B8E2CA-97DF-4974-BDF1-3D93EDC93A5E} Deleted HKCU\Software\GCleaner Deleted HKCU\Software\oberonapps Deleted HKLM\SOFTWARE\MICROSOFT\Speedycar Deleted HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MiPony.exe Deleted HKLM\Software\Classes\mipony Deleted HKLM\Software\Classes\mpybrowser Deleted HKLM\Software\MICROSOFT\TechnologyDesktopnew Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|DiskFixer Deleted HKLM\Software\Wow6432Node\TrustedLogos Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\App Paths\MiPony.exe Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Run|DiskFixer Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\DiskFixer_is1 Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\MiPony Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{1EC095EE-8CA3-43D6-B9F5-0C55B82ED3D7}}_is1 Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{411D68BC-2E50-4D32-9C80-BBCB09E943B5}_is1 ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries cleaned. ***** [ Chromium URLs ] ***** No malicious Chromium URLs cleaned. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries cleaned. ***** [ Firefox URLs ] ***** No malicious Firefox URLs cleaned. ***** [ Hosts File Entries ] ***** No malicious hosts file entries cleaned. ***** [ Preinstalled Software ] ***** No Preinstalled Software cleaned. ************************* [+] Delete Tracing Keys [+] Reset Winsock ************************* AdwCleaner[S00].txt - [3655 octets] - [20/03/2020 23:53:02] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

# ------------------------------- # Malwarebytes AdwCleaner 8.0.3.0 # ------------------------------- # Build: 03-03-2020 # Database: 2020-03-13.1 (Cloud) # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Clean # ------------------------------- # Start: 03-20-2020 # Duration: 00:00:03 # OS: Windows 10 Home # Cleaned: 28 # Failed: 0 ***** [ Services ] ***** Deleted Main Service Deleted pgt_svc ***** [ Folders ] ***** Deleted C:\Program Files (x86)\DiskFixer Deleted C:\Program Files (x86)\MachinerData Deleted C:\Program Files (x86)\ProxyGate Deleted C:\Program Files (x86)\mipony Deleted C:\ProgramData\Garbage Cleaner Deleted C:\Users\Usuario\AppData\Local\Temp\mipony Deleted C:\Users\Usuario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\mipony Deleted C:\Users\Usuario\AppData\Roaming\mipony Deleted C:\Windows\TrustedLogos ***** [ Files ] ***** Deleted C:\Users\Usuario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\MiPony.lnk ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks cleaned. ***** [ Registry ] ***** Deleted HKCU\Software\Classes\CLSID\{F7B8E2CA-97DF-4974-BDF1-3D93EDC93A5E} Deleted HKCU\Software\GCleaner Deleted HKCU\Software\oberonapps Deleted HKLM\SOFTWARE\MICROSOFT\Speedycar Deleted HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MiPony.exe Deleted HKLM\Software\Classes\mipony Deleted HKLM\Software\Classes\mpybrowser Deleted HKLM\Software\MICROSOFT\TechnologyDesktopnew Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|DiskFixer Deleted HKLM\Software\Wow6432Node\TrustedLogos Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\App Paths\MiPony.exe Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Run|DiskFixer Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\DiskFixer_is1 Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\MiPony Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{1EC095EE-8CA3-43D6-B9F5-0C55B82ED3D7}}_is1 Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{411D68BC-2E50-4D32-9C80-BBCB09E943B5}_is1 ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries cleaned. ***** [ Chromium URLs ] ***** No malicious Chromium URLs cleaned. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries cleaned. ***** [ Firefox URLs ] ***** No malicious Firefox URLs cleaned. ***** [ Hosts File Entries ] ***** No malicious hosts file entries cleaned. ***** [ Preinstalled Software ] ***** No Preinstalled Software cleaned. ************************* [+] Delete Tracing Keys [+] Reset Winsock ************************* AdwCleaner[S00].txt - [3655 octets] - [20/03/2020 23:53:02] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

The eagle has landed, the J version is now installed 😄 A quick view seems to confirm that KSM is now working indeed under Edge-Chromium, I will do some further checks later. The J version has introduced a bug on some sites, but that can be "solved” temporarily by a Shift + F5, as you're aware of. Regards, JW

Estimados, tengo el siguiente nuevo inconveniente: Quiero habilitar Application Control en la directiva para bloquear el inicio de aplicaciones, pero me encuentro con el problema que cuando lo hago me bloquea el uso del Chrome en los usuarios, creo que es por lo que ya está creado de Golden Image, el tema es que no se donde colocar la nueva regla para bloquear o si tengo que eliminar la anterior. No he encontrado info al respecto en internet, solo para agregar la regla que es lo que ya hice. Alguna ayuda por favor? Muchas gracias!! Dear, I have the following new problem: I want to enable Application Control in the directive to block the launch of applications, but I encounter the problem that when I do it, it blocks the use of Chrome in users, I think that is why it is already created from Golden Image, the issue is I don't know where to place the new rule to block or if I have to delete the old one. Image I have not found info about it on the internet, just to add the rule which is what I already did. Any help please? Thank you very much!!

@FLOOD This affects MS Office 365 after I’ve logged in to my work account and attempted to launch MS Outlook in the Edge Chromium browser. BTW, this feature was working fine yesterday. The problem presented itself when I attempted to start working this morning.

Hello @FLOOD In fact, Firefox is my main browser and I occasionally open Edge Dev. for checking my company’s email(not supported by Firefox). This morning, when I opened Edge Dev., I found Kaspersky Protection extension was installed in my Edge Dev. . However, I suddenly found that I could not access my Gmail and therefore I post my question on this site. Many thanks for your quick response and I hope the problem will be solved quickly in the future.

Hello @vega109, Thank you for your quick response☺ & the additional information👏 By my count there’s 5 people who’ve reported the issue here in the Community, if each person is on patch(j), (imo) it’s important to contact Kaspersky Technical Support, ask them to assist? They’ll need all the info you’ve provided here, the GSI & Windows Logs and please tell them the issue is resolved if EdgeChromium is run as InPrivate, ask them why that would be? After submitting the case, you’ll receive an automated email with an INC+12digits reference number, then, normally, within 5 business days, a Kaspersky Technical Support human🕵 will communicate with you, also by email, you may continue to engage with the Kaspersky Technical Team via email or by updating the INC in your MyKaspersky account. Please keep us posted with any updates they provide please? Thank you🙏 Flood🐳

Hello @FLOOD Many thanks for your quick response. My Gmail is still not accessible even I deleted the Kaspersky Protection extension. The image below is my edge://settings/privacy configuration (balance). Prior to patch(j) the GMAIL/me.kis.v2.scr.kaspersky-labs.com issue didn’t happen.

Hello, @FLOOD Many thanks for your quick response. I use KIS20 updated to patch (j) , and this picture below is what I saw at my computer on Windows 10 using Edge Chromium. However, my Gmail on Firefox is OK. This method “KIS Settings > Additional > Network > Traffic Processing > Inject script into web traffic to interact with web pages is unchecked, reboot” does not resolve the issue.

Hi! Try to scan driver separetely without using Full scan option: you can select the concrete drives to scan and check in what cases the issue occurs (try to select only internal drive, then try to sellect external drivers). In what cases the issue occurs? Then try to select all drives (or manually or using Quick scan scope option) and also check does the issue occur in this case? Please tell about the results. Thanks!

Ok - assuming, as implied, that speedtest results aren’t real. Steam application downloads are: I’ve downloaded ARMA3 4 times. Procedure - configure av software, launch steam, download application, record results, delete steam downloading and arma3 folder, repeast Attached photo shows steam downloads under the following conditions: NO AV software installed Kaspersky Secure Cloud Free - protection enabled Kaspersky Secure Cloud Free -protection disabled Other AV software protection enabled Results: No av software installed, 99.5MB/s current 100.5MB/s peak (800Mbits/second) Kaspersky SC protection enabled, 44.1 MB/s cur 46.3MB/s peak (370 Mbit/second) Kaspersky SC protection disabled 59.3 MB/s cur, 59.9 MB/s peak (479.2 Mbit/second) Other AV Protection Enabled 57.0 MB/s current, 59.1 MB/s peak( 472.8 Mbit/second) My questions: Why does having Kaspersky SC installed result in a 40-60% loss in throughput, EVEN when Protection is disabled. I think it’s reasonable to assume that AV software has overhead, HOWEVER it’s also reasonable to assume that disabling protection would offset the performance tax. Why is there still a high degree of overhead when disabled? Does Kaspersky publish maximum throughput numbers? Why Not? Being transparent about maximum throughput as tested in Kaspersky’s labs would alleviate Kaspersky’s support requests. I read the link tl;dr Download over 100MB Open support case with screen caps.

I thought I was something to do with the database update in all fairness as it only detected it after the update. I don’t think I even finished my quick scan. What is strange though is it isn’t detecting the .exe again when I re-download it through steam. edit: I also put a ticket in through the support in my Kaspersky. Hopefully they should give me an answer. Also I did a full scan last night and nothing was detected. also about the windows, I just keep forgetting to do it. I’ve been meaning to get it done.

So I went about my daily routine of database updates, quick scan, launching steam, etc. then after the DB update and halfway through the quick scan I got a detection for an infected file. the file was UnrailedGame.exe which is a game I own through steam and have done no external modifications to the the files. It recently has recently updated however. The devs and a few other people have been claiming AV flags but none with the classification I received from Kaspersky. it was UDS:Trojan.Multi.GenericML.xnet my questions are: is this most likely a false positive? And what does the classification mean? (Ie, the Multi part etc.) Thanks in advance!

Hello, I like to play a lot of games on Facebook. One of them is called Pearl’s Peril. When I launch it, the “download” bar appears, it starts downloading the game, but stops every time (see first screenshot). When I disable Kaspersky, the game plays without any problem. I already added 2 urls to the trusted zone (see second screenshot), but this doesn’t change anything. Strange thing is some games (like Angry Birds Friends) do play when Kaspersky is enabled. Does anyone know how to resolve this? Kaspersky Total Security 2020 macOS Catalina 10.15.4 Chrome 80.0.3987.163 Thank you. Regards, Frank

Thank you for the quick reply! Sorry, I do have Kaspersky Total Security 2020. I added the images to the same doc and attached it here as well.

Fixed: Problem with switching the language on the Virtual Keyboard Some KSeC interface issues Problem with RDP connection in some situations Possible problem with Rootkit scanner auto launch A number of problems with installing the plugin have been fixed, its work has been optimized Improved work of Safe Money with some sites Anti-banner's work Improved Fixed compatibility issues with some software from other manufacturers Scope features: Support of MS Edge browser based on the Chromium features:

Thank you all for the replies! Yes, I have installed the latest version of VLC media player from the original site. I have now manually removed the files using “Remove from quick access” RM B option and the files didn’t appear afterwords. I couldn’t access the files as there was no file in the said location (C:\Users\xxxxx\OneDrive\Desktop) therefore, Im afraid the files are not there anymore. I have KIS2020 installed in my PC. Thank you and best regards, BJ

@nexon, Regarding Samsung Chromium browser, it would be helpful if accurate information is provided at the start of a topic & or when requested. Regarding KIS browser compatibility: ✅KIS Supported browsers Internet Protection only checks websites in Google Chrome. To use Internet Protection while browsing the Internet, set Google Chrome as the default browser. When Internet Protection is enabled, it automatically checks the default browser. If Google Chrome is not the current default browser, the app prompts you to change the default browser to Google Chrome. If you do not want to change your default browser, launch Google Chrome separately to safely use your personal data on the Internet. Thank you🙏 Flood🐳

@BJayakody did you run any particular application prior to those links show up in the Quick Access? Check this out: https://answers.microsoft.com/en-us/windows/forum/windows_10-files/chinese-file-names-just-appearing-on-my-system/a0f00208-199a-45fd-a667-55e31ef5aea8 “When I fired up the VLC media player version 2.0.8 Twoflower.... guess what happened next! A new Chinese file name showed up on the folder! ”

Hello @BJayakody, Also, while you’re waiting for @Wesly.Zhang The Quick Access files are showing as having been on the Desktop, has the Desktop been changed or reset? Please do the following: Reset Clear Windows 10 Quick Access History as follows: [a] Uncheck: Show recently used files in Quick access - note, this is temporary, the setting can be changed back. Uncheck: Show frequently used folders in Quick access - note, this is temporary, the setting can be changed back. [c] Select Clear File Explorer history Select Apply. Reboot, login, start KIS, run a manual Database update, allow it to complete. Run a KIS manual Full Scan, allow it to complete. Recheck the issue? Thank you Flood

Kaspersky rescue disk is a great tool that I have been using for a while. However, in my new computer, it fails to detect network adapters. Attached is the hardware related information. Please, let me know if is there a quick parameter fix I could work on. Cheers, Filipe

So for the Last time PROTECTED Browser PROTECTS you against keyloggers etc untrusted program runed on the background or any other dangerous program installed in PC which catching your Keys on keyboard. Also PROTECTS again screen captures (screenshot) screen lockers etc. It is most important to have kaspersky system watcher enabled in kaspersky settings.

Hi @TimmSkiller, The version of klkbdflt.sys file is 30.0.3716.0 on both my Win 10 machines. Please check the version of the file on your machine. Next send the C:\Windows\System32\drivers\klkbdflt.sys file to me via Personal Messages. In case if the OS crashes, we need to receive a full memory dump. So set the OS to collect full memory dump: https://support.kaspersky.com/common/diagnostics/12402 Next add the dump to an archive and send it to me via Personal Messages. Regarding the “The previous application launch failed” message: Do not agree with sending the data next time the issue occurs. After this: Check the C:\ProgramData\Kaspersky Lab\ folder for the files, there should be dmp files. Add these files to archive to and send to to me via Personal Messages. Finally: collect a GSI report with enabled event log capturing option: https://support.kaspersky.com/common/diagnostics/3632 Also send this report to me via Personal Messages. Thank you.

Hi. For quite some time, I have been getting random crashes on boot in Windows 10 Pro version 1909 with latest updates, with Kaspersky Security Cloud Free version 20.0.14.1085 installed. The BSOD says: KMODE_EXCEPTION_NOT_HANDLED with the fault being in the driver “klkbdflt.sys”, and after the machine has rebooted, the Kaspersky program usually comes up with “The previous application launch failed” with around 80MB of data to send each time it happens. I’ve sent the report once, and I will not sent it again. The crash minidump is attached. Upon further inspection in minidump analyzer tool, i have found out that the driver in question “klkbdflt.sys” is labeled version “fre-win7-amd64”. Could it be that the driver is too old to run on windows 10? it looks like that version of the driver is designed for windows 7. How do I fix this?

Hello @maigor, On the source device, where keyboard lag/delay issue happens & on any remote devices, check List of applications incompatible with Kaspersky Internet Security, to see if there are any software conflicts. Thank you🙏 Flood🐳