Search the Community

Thank you for that info! Could you please add klserver.exe and Up2Date.exe to trusted zone at KES 11.1 and launch installation once again? Please inform us about result.

Hello -Question- When i search through a file (.exe) using Kaspersky Internet Security it finds a file that it considers a threat. C:\Users\Me\Downloads\Patch.exe//File4260 It looks like it is a file in the installer/unpacker that it considers suspicious and not the .exe itself. The search itself searched through roughly 25 000 files. Kaspersky says the name of the object/threat is "not-a-virus:RiskTool.Win32.HideExec.bm" Kaspersky also gave me a choice when i came to handling the threat, that i could actually add exception for it or ignore it. So it seems that kaspersky doesen't see it as super dangerous? What does "HideExec.bm" mean? Is there any way i can figure out what the object in question does? I placed the suspicious file in quarantine and removed almost instantly after i searched through it and found the suspicious file. As stated in the Background below alot of people, including myself, need the patch in order to run the game at all. I will consider re-downloading the patch and using it depending on the feedback i get on this forum. I have read the kaspersky website blog post about "Not-a-Virus" but i still do not know if i should trust the identified object in question. (https://www.kaspersky.com/blog/not-a-virus/18015/) -Quick Background- There is a somewhat old game in which alot of people NEED to use an unofficial patch in order to get to run/function. The patch can be obtained from a well known website that alot of other modifications/patches can be downloaded from. There is nothing suspicious about the website itself. (https://www.moddb.com/) On the forum dedicated to the game on Steam, alot of people have brought up the fact that their antivirus program treat the patch (.exe) as suspicious or even as a virus. Many users ignore the warnings of their antivirus and run and use the program anyways. Because it's an easy way to get the game to run. I think the .exe itself is an installer for the patch for the game. Probably an "unpacker" of sorts. (User run program -> User selects game directory in the installer -> Program places a bunch of files and such in the game directory + a folder structure -> Patch Finished/Installed) There is alot of people who say it is a false positive and there is nothing to be worried about, that the antivirus treat it as suspicious because it is an .exe file. That the creator is trusted and alot of people are using the patch etc... Thank you for reading. Sorry for the long post and bad English.

me34 run a quick scan with active and inactive exception, this is enough to check either run the file that is added to the exception, with the active and inactive state, there will also be a difference

will be detected, because you run a selective scan of the file, and it runs when you wish, otherwise it will be an error that the scan is not performed during a quick and complete check, the file will be excluded from the check on the object that you specified in the exception and the protection components you specified

Hello JeffreyStratton, Thank you for the information and the screenprints - very helpful! Yup, Kaspersky is detecting httpcolonslashslashs3-us-west-2.amazonaws.comslash dropmockslashkineticslashtemplatesslashx=etc as malaware. (URL/link modified to comply with Community rules) 69 other engines show the same url/link as clean. Sometimes, due to the every changing nature of malaware, viruses and other "bad" things, the definitions and categorisations published by AV providers and referenced in database updates make false positive detections. The best course of action is to escalate the issue you've identified to Kaspersky Malaware Experts & asking them "why" the detection is happening to a DropMock program you've always used safely? If the detection is valid the experts will provide you with an explanation. If the detection is a false positive the experts will fix it & advise you. The turnaround time by the expert team for this type of issue is usually fairly quick. Please do let us know the outcome? Many thanks!

I'm afraid, it is impossible. You will have to open the Safe Money window and there already click on the link in the list to launch the Secure Browser How to quickly open a website in Protected Browser

Hi, Unfortunately, the provided GSI doesn't contain information that we need. Could you please provide full GSI archive with Event logs. If the error appears with NTFS path, please set UNC path to this folder. If in both cases the error is returned, you should set permission on this folder correctly this command can be executed. After this command processes without an error, you should launch KSC Backup Task using whether NTFS path or UNC Path (i.e. those path by which this command runs without errors) Thank you!

Good Morning Flood! Thanks for getting back to me! I try to focus for now, on my main PC, after if we sure - its clean, can comes the rest of my devices. Headache to not have a "uninfected" device in a household. Quick Answers: From the APP store i cant access certain apps via Search - which apps, which store? on iPhone 5S ( Model Number: NE432B/A ) running on iOS 12.2 - in the APP Store i try to search for "Malwarebytes App" - only relevant results comes up, but not the Malwarebytes app. In DuckDuckGo browser i went to Malwarebytes homepage, i try to open the "App Store logo on the site" - and comes up this message: Certification problems on websites via Browser etc., which websites? Which Browser? Which certificates? Same iPhone 5S device - Kaspersky Safe Browser - like any kind of search, comes up this message: on iOS iCloud activation messages daily few times.. what messages? " if i can catch it, i will upload as well, but something similar message what i see: "Your carrier may charge for activating icloud on this device" popup message Name & version of Kaspersky software? PC: Latest Kaspersky Total Security - version 19.0.0.1088 (f) Name, version & build of Operating system? Microsoft Windows 10 x64 build 17763 ( using a PRO license key ) Browser/s, version/s? Opera Version:60.0.3255.135 Detail, description, steps, information: like: when the issue 1st started, does the issue happen at all times of the day, certains times, does any action ameliorate the issue/s, does the issue happen irrespective of the browser used? The NORDVPN issue is seperate, have you granted access? & please read on: I did not grant any access to NordVPN so far... These are an example from this recent Windows installation:: When im was writing this comment, after couple of minutes the "insert image button" greyed out, so i had to refresh the page to use it try to listen online radio stream, suddenly stops after 5-7 mins, i cant start it again via the button provided on the page, i need to reload, or reopen again When i try to press CTRL+V, it does the job, but the screen scrolls up 1 page Yesterday when i type my first message here, weird prompt comes up, and it was selecting "double characters" instead of a normal - i try to catch it again and save a screen from it When the computer starts, and when i connect manual to my WIFI network, staight away comes up the NordVPN certificate problem message, if i ignore it, comes up 5-6times in 30 mins time, even if i not logged into my account in the NordVPN app Its a fresh install of Win10, the following apps were installed: Kaspersky Total Security, Nord VPN, Malwarebytes and Opera, nothing else, and now i will install Microfost Office 2016 Plus When i notice first time, something wrong? Around 2 months ago, Im was using iTunes on the Same PC, and when i close the app, the DVD drive tray come out - Eject - for no reason. Im was using cFos Speed, and i notice the same unusual network Activity - even when the PC was in Idle state. Couple of Windows reinstalls, similar unusual things, weird search result in Firefox browser on eBay, Aliexpress did not want to connect behind VPN, connection errors when i try to load pages... Sometimes, the Mouse Cursor jumping bigger when i try to move around on the screen, its like someone in my PC via Remote Desktop... None of my PC/Laptops let me to access the router via 192.168.1.1 - website cant be reach something similar message Mozilla firefox was doing some weird stuffs, i did remove it, after a quick clean in the registry reinstall, and "Dark Theme" was installed rather than a normal "Light Theme" And the list just goes on and on.... On my other devices Certain icons disappeard from Aliexpress app, and my Ebay app was producing weird search result. Apps after just a start asking for "Rate our App" all the time I do my best, i try to sort out the netstat -ano PID-s asap. Many thanks! Regards

SAJFLADD Yes, a rootkit scan is also performed during a quick scan. Fast scanning requires more system resources than rootkit scan. I would not turn off rootkit scan, which is performed once every 24 hours

Are you suggesting that a quick scan contains features of the rootkit scan? If so, what's the point of having a separate rootkit scan, we may as well just have a full scan and quick scan? S

Tks. Have done the first part. Will try the settings part Quick Scan.

Clear check box Search for software that is intended to conceal traces of a malicious program in the system (rootkits) https://help.kaspersky.com/KTS/2020/en-US/68153.htm In Seting - Scan section, set up a schedule Quick Scan https://help.kaspersky.com/KTS/2020/en-US/68154.htm

Redmat - ransomware-type infection. The infection comes from the Djvu ransomware family. Redmat is a high-risk ransomware designed to stealthily infiltrate computers and encrypt most of stored data. Ah right, a quick search of Kaspesky's and nomoreransom.org's list of decryptors yields nothing for Djvu ransomware

Re: "why not say to developer: "Hey! Your software has many strange things and a lot of trash/unwanted software, to make it compliant, take off this and this and your software now is safe! If it is a very good software then ask for subscription or a TIP."? Because it's a developers job to know what features of their products will potentially be flagged as "Riskware" and to refine their products so they're compliant. It's not Kaspersky's or any other AV providers job to search the Internet and tell every developer, "your software is a problem because of a.b.c.d, do x.y.z make it compliant. You could raise a request with DriverPack developers, asking them to remove the "many strange things and a lot of trash/unwanted software". A quick search shows many people asking similar questions to your OP. (imo) DriverPack developers already know, they prioritize making money and pushing riskware as opposed to customer care.

Just a quick update, the VPN is now broken on the old server after updating to KSC11 and KES11.1. It was tested and proved to be working fine for a few days and then it started failing today. What needs adding as an allow rule in web control to resolve the vpn issue? The domain name of the vpn has already been added originally and that's not resolved the issue. My presumption is that the issue is KES11.1 rather than KSC11.

I have 10.3.407 KES version and managed more than 3000 client machine with two version of KES (10.2.1.23 and 10.2.6.3733) while I have face an error on a lot client machines under the console report and it’s number get up in every day; - Database are out of date - Antivirus protection is not running - Protection is disabled. So how Can I fix the problem in a short time? I will not be quick to answer for a quick reply . //Mod Note: moved to proper section.

If it's not running, it's not protecting anything. I think the recommended setting would be to launch the task at program start. Then it will be started and keep running after KSFSW launches.

Thank you for your reply. But it is too late. I tried to uninstall it. It would not let me. And after that, it appeared that the Total Security was trying to launch the application as it said it had been for days. It would not allow me any access to internet. Not Chrome or Edge. Not to my email. So I took it off to the computer folks. Something that Kaspersky did all on its own, nothing that I initiated by anything. Although I made it worse by trying to uninstall it. Appreciate you input. I had already put 5 hours into it trying to solve and reading in the forums and for solutions. Time for the pros to try to fix it.

Hi, Still waiting for your quick response. Thank You

Hi "Flood" thanks for your quick reply I am french so obviously french will be great but english in a reaonnable level would be fine also I don't need explanation from kaspersky website that i already read many times. Everything works fine on a daily basis (block apps, limit time, request/permission...) I need a patch or a solution to prevent my son to play around with his WIKO Ufeel and disable KSK I have KSK 1.17.0.907 on my mobile (master) i have to check his when we are back at home tonight Thanks in advance

Thank you for the very quick reply. I know I have to buy a licence to use it permanently, but want to make sure i can use the free trial then use a code from ebay or Amazon to then use it permanently.

FLOOD: The steps I use to access these sites: I open Chrome, which opens my default tabs. I click New Tab and then click links to each of my bank links (see attached image). This is turn should launch each of the sites in Safe Money. Here is the image of the Safe Money Settings page

I mean you could test it in multiple VMs But a quick search through the EULA, I can't find any mention of devices or PCs (using the find function in Notepad) This is the EULA from the KFA (EU Version), if you find anything related to device limits let me know. https://pastebin.com/96jZ6nsv It's on a Pastebin link because of the forum character limit

I had an issue to launch KIS 2019. It keeps "Loading the application" like foreeever. And i tried to uninstall the KIS 2019, and got a message Error 1306. Due to this matter, i'm planning to a downgrade my KIS 2019 to KIS 2017 that is more stable. My question is : How to uninstall KIS 2019 due to this error 1306? How to keep my license and save it for my next KIS 2017? Thank you

Now even without interactive protection, "C:\Program Files (x86)\Tajpi" in the exclusions and "Tajpi.exe" in Trusted (Application Control) group I cannot launch the application...