Search the Community

Hello! A new beta build is available - about product. You can download the distribution kit by the link: Download Warning! turning ON full disk encryption on a hyper-V 2022 VM will result in VM failure. To test the application, activate the license embedded in the distribution kit. You should only use the beta build with this license provided for testing. If for any reason you use your existing commercial license to activate the beta application, the duration of the useful use of such a license for the time of testing is not renewed or compensated.

Добрый день, @Grig, Какую версию Kaspersky Rescue Disk использовали? Какая именно ошибка возникает? Пробовали новую 2024 бету? Можете собрать и приложить логи: https://support.kaspersky.ru/krd18/troubleshooting/14234 https://support.kaspersky.ru/krd18/diagnostics/14223#block1

Hello! A new beta build is available - about product. You can download the distribution kit by the link: Download Warning! turning ON full disk encryption on a hyper-V 2022 VM will result in VM failure. To test the application, activate the license embedded in the distribution kit. You should only use the beta build with this license provided for testing. If for any reason you use your existing commercial license to activate the beta application, the duration of the useful use of such a license for the time of testing is not renewed or compensated.

Mijn vraag is de volgende als ik de laptop opstart met de rescue stick krijg ik het beeld van acer en in de linker boven hoek op het scherm een klein vierkantje. Hoor dat de laptop draai maar er gebeurd niets wie kan me helpen met dit probleem

Is it this setting? I thought it's affecting only scanning. Thing is, that in most other cases Intrusion Prevention works fine and as expected. For example, in "Manage resources" I created my own category under "Personal data". Let's say I called it "My Data". In "My Data" category, I set all application categories, including "Trusted" to "Ask user". And all apps by default inherits that. Now, let's say, I want to restrict other applications and processes from accessing Telegram's appdata (portable version) and whitelist only Telegram to access it. So I add new path like this under "My Data" category: C:\Telegram\tdata\* And whitelist telegram apps by "developer" category like this: Now, when I open Telegram - I still get asked if I should allow or block access. It is expected, because Telegram is being ran not by itself, but by Windows Explorer and run sequence appears like this: Windows Explorer -> Telegram What's weird is that for some apps/processes it appears in the Application list with new run sequence, so it can be configured. In case with Telegram it doesn't happen. So, the only way to stop these access prompts is to go to Telegram application settings in Kaspersky and enable "Do not inherit restrictions from parent process (application)" like this: Now it works as expected, whenever I run Telegram, even if it was started by Windows Explorer, it starts properly and doesn't ask me to allow or block it every time. But with scenario described in my first post, where it's low-level disk access in question, it doesn't work as expected.

Hello! A new beta build is available - about product. You can download the distribution kit by the link: Download Warning! turning ON full disk encryption on a hyper-V 2022 VM will result in VM failure. To test the application, activate the license embedded in the distribution kit. You should only use the beta build with this license provided for testing. If for any reason you use your existing commercial license to activate the beta application, the duration of the useful use of such a license for the time of testing is not renewed or compensated.

Welcome to Kaspersky Community. Enabling those exclusions for the main app that generates the random new cmd files every time should do the trick 🤔 Is it Your main app placed in Trusted group or in a restriction group? Since by default trusted apps should have access without prompts for low-level disk access, see this capture, as an example:

Hi, when I start Kaspersky Rescue Disk and select GRAPICH MODE I get a totally black screen. I can't scan, much less the other functions don't work, always a black screen as I continue. I can only scan from Windows. Depends on what?

I have met this problem too. It occurs when you access `\\wsl$.localhost\` path by the windows program or access `/mnt/[disk]/xxx` by the Linux program, especially under heavy random access load (such as compiling or indexing) I have found that disabling the `system watcher` in kaspersky will help a lot (the problem still occurs but at a very low frequency) I have a log file (by kaspersky problem reporting tool ) generated for this problem but it's too large (121MiB) to upload here. If needed, please tell me how to upload it. Env: laptop(amd 7940hs + nvme ssd + wsl2), Kaspersky standard (ver 21.17.7.539(b)) Operation: call powershell.exe(with anaconda env automatically activation) under wsl2 path (/home/UserName/ <=> /wsl$.localhost/Arch/home/UserName/) Note: 1. with `system watcher`, the whole system freezes for more than 2mins, and disabling the `system watcher` will quit the frozen state immediately. 2. bare powershell is ok (comment out the anaconda-related configs). I think maybe it is because the anaconda(windows program) reads things under the current path(Linux path) too much.

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. If multiple e-mails are selected in Security for Microsoft Office 365, they cannot be saved to disk. You can only save them one by one.

Community please, could you help me. How can I reduce the space occupied by the Kaspersky Lab folder on my computer, I attach a screenshot I would greatly appreciate your valuable support.

Windows 11 Home Single Language - versão 22H2 Kaspersky Plus (assinatura de avaliação) - versão 21.14.5.462 Realizei os seguintes passos do guia https://support.kaspersky.com/krd18/howto/14226#block1, mas mesmo assim, ao inicializar a imagem da ferramenta com o Rufus, tanto no ISO Image mode e DD Image mode, ao selecionar a opção 'Kaspersky Rescue Disk. Graphic mode' lnão aparece mais nada na tela e tornando-se necessário o desligamento forçado. Testei também com o YUMI, mas se quer foi reconhecido e mesmo estando em primeiro na prioridade de boot. Mais informações: IdeaPad 3 15ALC6 (AMD Ryzen 5 5500U) UEFI, TPM 2.0, Boot seguro ativado e Inicialização rápida desativada.

Ayuda, creé un USB booteable de 16gb en NTFS para poder realizar una limpieza de virus en mi pc, pero al momento de bootear desde dicha memoria, me aparece este error: Welcome to GRUB Begin of (memdisk)/grub.cfg Check signature state is enforce Prefix is (hd0,msdos1)/boot/grub error: unknown filesystem. Invalid prefix. Try to search KRD files error: no such device: /boot/grub/k-x86 Root is hd0, msdos1 Config (hd0, msdos1)/boot/grub/grub.cfg Rebooting the system after 12 conocen la solución?

Hello, a got a issue whit the Karpersky rescue disk, when im in the interfeace of the KRD, i select the option "graphic mode" to continue whit the recue process and nothing hapen, just a black screen. I read in this forum a similar issue and read that maybe it is an incompatibility whit my Pc, so i tryed to follow the steps about the "Hardware info", but even when i select the option "Hardware info" still continue to a Blackscreen. I called to Costumer service and they just could provide me the same topicforum i read before and nothing else. I dont know what to do now. My pc model is : Asus Tuf A15 (windows 11)

Build: Kaspersky Premium 21.18.2.169 В приложении появилось уведомление о необходимости перезапуска после обновления модулей. Перезапуск совершен нажатием кнопки в уведомлении. После перезапуска продукт сообщил о проблеме с антивирусными базами и информацией о подписке (лицензии), записал трассировку и предложил обновить базы. После повторного обновления антивирусных баз проблема ушла. Трейсы: https://disk.yandex.ru/d/AcRKIkWFbQLCbQ

Güncelleme sonrası bilgisayarı yeniden başlattınız mı? Yönetici olarak komut penceresin açıp sfc /scannow yazıp tamamlanmasını bekleyip sistemi yeniden başlatın. Sorun devam ediyorsa Kaspersky kaldırıp yeniden yükleyin. Eğer bu tarama işlemi diğer disk bölümlerinde de aynı şekilde ise bunu yapın. Sadece bir klasör veya bir disk bölümünde geçerliyse farklı bir durum söz konusu olabilir.

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. Environment/Preconditions KSC - 12 KSWS - 11.0.1.897 You may find a massive increase in disk usage from the folder report under the Kaspersky folder. The size of the report folder will increase from around 2GB to 12GB, the files in the report folder have random name (like 340a13d9-2a50-4c4e-94d6-82a79d80da4b), which rapidly grows and consumes disk space. The file can be deleted to resolve the disk space full issue, which itself can cause many issues (can't log in to the server, KSWS stop, etc) To delete the file: Stop KSWS. Add permission/owner for the login account. Right-click and delete file. This issue is caused by the Task log setting under Log and Notification tab in the KSWS policy. To avoid the detailed events issue: Ensure that there are no Informational events in the Importance level option in each Component. Remove task logs older than (days) is selected. In case you do the above step and the random file is still keep growing rapidly (100 MB per hour), it may be causes by the flooding event. You can check the event flooding by using "DB Browser for SQLite". For example, the log above is generated by the Application launch control component. You may solve this issue by disabling Application launch control log.

Не запускаются модули защиты от Веб-угроз и почтовых-угроз. При переустановки KES и перезапуска модулей проблема не решилась. Версия KES 12.5.0.539 ОС Windows Server 2016, Windows Server 2008 R2. ссылка на GSI https://disk.yandex.ru/d/irnodLpwWItuzw

Bonjour à toutes et à tous, Je suis confronté à un problème persistant avec mon PC Windows qui a des symptômes étranges - ralentis, des fenêtres publicitaires aléatoires et des signes indiquant qu'il pourrait être contrôlé à distance. Je soupçonne fortement une infection par des virus. Dans ma quête pour résoudre ce problème, j'ai trouvé un guide très détaillé qui explique comment supprimer tous les virus de mon ordinateur Windows.Voici le lien de l'article : https://www.funinformatique.com/comment-supprimer- tous-les-virus-de-mon-ordinateur-windows/ J'ai suivi toutes les étapes soigneusement, y compris l'utilisation de l'USB Live Kaspersky Rescue Disk. Cependant, j'ai rencontré un obstacle : bien que j'aie réussi à enregistrer l'image ISO sur ma clé USB, je ne suis pas certain de la façon de démarrer mon PC à partir de cette clé USB. Y at-il quelqu'un ici qui a déjà utilisé l'USB Live Kaspersky Rescue Disk et pourrait me donner quelques conseils sur comment démarrer mon PC à partir de cette clé USB ? Merci d'avance pour votre aide.

21.18.5.364, трейсы: https://disk.yandex.ru/d/6iUcpneHdNXaSg Всё также: Приложение предлагает перезапуститься, чтобы обновить модули. После перезапуска видим проблемы с подпиской и базами, большая часть модулей не работает. Обновляем базы повторно - всё приходит в норму.

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. In KSWS/KESS/KICS there is an option in update task to Lower the load on the disk I/O. It is important to understand that when this option is enabled the task does not use HDD resources at all. Updater will not only place current updates to RAM. Update temp and cache files will also be placed there. Incorrect expectation: The task uses dedicated amount of RAM, in case if dedicated RAM is not enough for all update files including temp and cache task will continues through HDD. Actual product behavior : The task uses dedicated amount of RAM, in case if dedicated RAM is not enough for all update files including temp and cache then task fails with the error: Failed to update. Reason: insufficient drive space.

Дисклеймер. Обязательно к прочтению перед использованием материалов базы знаний Форума. Описание Здесь мы расскажем, как установить KATA 6.0 AstraLinux в VK Cloud - https://support.kaspersky.ru/KATA/6.0/ru-RU/264697.htm Окружение, что используется: RHEL 9.3, VK Cloud, пакет qemu-img , KATA AstraLinux ISO образ (расположенный локально в ОС) - VK cloud поддерживает ТОЛЬКО AstraLinux версию. Инструкция по установке Для начала нужно подготовить образ AstraLinux для VK Cloud, он должен быть в .raw формате (VK Cloud поддерживает только этот формат) - необходимо конвертировать образ из .iso в .raw В данной статье мы используем RHEL 9.3, откройте терминал и установите пакет qemu-img yum -y install qemu-img После установки пакета выполните конвертацию qemu-img convert ~/Downloads/kata-cn-6.0.0-200-addon.x86_64_en-ru.iso ~/Downloads/kata6_astra.raw Залогиньтесь в свой аккаунт VK Cloud и перейдите в Cloud computing -> Images -> кликните Create -> выберите наш .raw образ и кликните Create image Теперь нужно создать основной диск для нашей инсталляции, перейдите в Cloud computing -> Disks -> Create disk -> выберите Source - Empty disk, Disk Type - High-IOPS SSD (high ops) -> Create disk Вернитесь в раздел Images - создайте ВМ из образа, как показано ниже Настройте ВМ согласно Калькулятор масштабирования (не обращайте внимания на наши настройки, это демо инсталляция) Вернитесь в раздел Disks и подключите ранее созданный нами диск к ВМ, как показано ниже В разделе Virtual machines кликните на ВМ и перейдите на вкладку Console -> начните инсталляцию Оказавшись в консоли, следуйте шагам инсталлятора На этом шаге выберите ИСКЛЮЧИТЕЛЬНО single режим (потому что VK Cloud поддерживает только этот тип инсталляции центральной ноды) После рестарта ВМ (вы попадете в окно выбора - снова установить КАТА или обновить версию 5.1) перейдите на вкладку General information и остановите ВМ, как показано ниже Выполните шаги, как показано ниже и выберите ранее созданный вручную диск (в нашем примере это kata6_astra_main 180 GB), дождитесь окончания выполнения операции замены диска. После этого либо сделайте диск non-bootable или удалите его, как показано ниже Включите ВМ заново Перейдите во вкладку Console и продолжите установку продукта, как мы обычно это делаем на VMware -> настройте подсети docker -> настройте сетевой адаптер (dhcp или static) > установите длину пароля и сам пароль -> настройте DNS сервера -> решите, включить ли захват трафика через SPAN или нет (y/n) > настройте NTP сервера На этом все, продукт КАТА установлен, теперь вы можете настроить его под УЗ admin и далее использовать на ваше усмотрение.

Does anyone know where to find the log file/txt file after a scan from the rescue stick? I have resorted to taking photos of the results and photos of the report, but surely it is saved somewhere? Cannot find it on the stick 😒

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. This article is about Kaspersky Endpoint Security for Windows (KES for Windows) Problem "Removable disk" Encryption is enabled and the policy applied to the machines, but nothing happens when the client connects USB drive. Solution Encryption of the removable drives supports two modes: Encrypt entire removable drive: based on Kaspersky Full Disk Encryption (FDE), the entire disk including the file system is encrypted using klfde.sys. Encrypt all files or new files only: based on Kaspersky File Level Encryption (FLE), files on a removable drive are encrypted using klfle.sys and file system remains unchanged Encryption of removable drives (kaspersky.com). If you have collected GSI from an affected device, check file KL_Drivers_Versions_****.txt: If klfde.sys module is installed on the machine → there should be klfde.sys in KL_Drivers_Versions_****.txt file in GSI. If klfle.sys module is installed on the machine → there should be klfle.sys in KL_Drivers_Versions_****.txt file in GSI. If there's no GSI from an affected device, check: klfde.sys module is installed on the machine (in case of Encrypt entire removable hard drive) → path C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security for Windows\klfde_x64 klfle.sys module is installed on the machine (in case of Encrypt all files or new files only on removable hard drive) → C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security for Windows\klfle_x64 If none of the above exists, the related component as per Change application components (kaspersky.com) should be installed. Portable mode (which allows access to data outside the corporate network and allows encrypted data to be accessed on computers that do not have KES installed) is only available for File Level Encryption (FLE). It is not possible to enable portable mode support for Full Disk Encryption (FDE).

I have just tried to access the website of a wildlife rescue charity - https://www.hessilheadwildlife.org.uk/ and get this error message: Is the website really infected, and if so what would they need to do to fix that? Thank you in advance. Steven