Search the Community

Does Kaspersky still recommend setting Core Isolation i.e. Memory Integrity to ON? I have just installed Win 11 as update and Memory Integrity and Microsoft Driver List are set to off presumably by my already installed Kaspersky (Standard) Many thanks

Hello @User23837, Thank you for update! You've been an incredibly *proactive* user, personally we wish more subscribers were like you - however - you also need to email thru (your) observations - changes - to the support team - so the data can be recorded in (your) incident request; the 'devs' don't have time to do that, and with the complexities of the VPN transition they've barely had time to scratch-their-ar*es*. The current status for the DNS leak, as advised by Kaspersky is "sorry for any delays, still being worked on". We're delighted to read Fastest-server is fixed by the update. Regarding TLS, please submit that to the Kaspersky Customer Service team, they may ask for data; we *know* raising incidents can be a pain but they're essential for Kaspersky's problem management process -> please post back the INC0000? Thank again🙏 Flood🐳+🐋

@Cems Welcome. Please see → Update to the Latest Version ?

Welcome to Kaspersky Community. 1st of all. I would update Your KTS to Kaspersky Plus. Please provide version of K. VPN installed. Also, check this link: https://support.kaspersky.com/faq/ksec-migration

Hallo, nach dem Update sind alle Favoritenserver weg, nur noch 86 da, kein DOUBLE VPN mehr und auch die anderen Funktionen wie privater DNS, Trackingschutz etc. sind weg, dazu ist die Downloadgeschwindigkeit auf die Hälfte reduziert, über das Update hatte ich schon im englischen Forum gerade gelesen, ist für mich eine Frechheit. Soll das so bleiben ???????????????, dann mal frohe Weihnacht, dann kann man ja gleich zur Freeware greifen. Wird wohl bei Nichtänderung ein neuer Provider gesucht. Da gibt es ja genug.

Hello Berny, Thank you for your reply and for the links. I understand that as a forum moderator you cannot directly change VPN servers or technical settings. However, I wanted to kindly ask if you could check the IP geolocation yourself for the Taiwan server using a few common services: https://whatismyipaddress.com/ https://www.whatismyip.com/ https://2ip.io/ https://www.myip.com/ https://www.showmyip.com/ You will likely see different countries reported depending on the service (e.g., Pakistan, Germany, maybe Taiwan), which illustrates the issue with manual location selection after the recent VPN update. I thought it might be helpful for awareness and context, even if you cannot directly fix the problem. Thank you for your time and help. Best regards,

Just like MH38918 i have the same problem since last update and just like G68 i have the same problem when it connects. I don't know who decided that update but it's really awful and made me think about renewing my subscription with Kaspersky hugely.

Thanks for reply. Just now, my Windows prompted me to update. After the update, the quick scan returned to normal. Thank you very much. Could you explain what caused this?

The sending server connects and negotiates TLS correctly, but the connection is dropped during the DATA phase. Postfix is not rejecting the mail. The error points to a local SMTP proxy/security filter (klms-smtp_proxy) interrupting the SMTP stream. Check, update, or temporarily disable that proxy and its SMTP inspection settings.

Having this same issue. I raised a ticket and sent them the necessary info. Waiting on some reply. The connections are all really inconsistent and slow (I get like 200+ ping on a VPN from my home country! wut?). This update definitely broke plenty of things, they're probably aware of it but I haven't seen any official communication on the issues. I recall someone mentioned here even DNS servers are borked, so I guess this update was just rushed and broke so many things. Hopefully something comes up, since this used to be such a reliable and fast VPN compared to so many on the market for me.

Hello, I am writing to report a malicious sample currently circulating in pirated game distribution channels. It masquerades as the legitimate libEGL.dll file but contains a cryptocurrency miner. Currently, it has a very low detection rate on VirusTotal (detected only by Huorong and Rising), and it bypasses most major AV engines. Technical Details: Malicious File: libEGL.dll File Size: Approximately 525 KB (Note: Legitimate versions are typically around 377 KB). SHA256: 8bacb2082eb37fd7aed5bb6a7fc766d9937d9f3ed926ae82420d37af754a216c Behavioral Analysis: File Dropping: Creates a directory at: C:\Users\%USERNAME%\AppData\Local\syscacheapp. Drops a large executable named cacheapp64.exe (approx. 750 MB). Characteristics of dropped file: Compiled with GCC/MinGW, extremely high entropy (packed/obfuscated), accompanied by numerous fake DLLs. Persistence: Achieves auto-start by modifying the Registry: Key: HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell Distribution & Context: Vector: Confirmed presence in unauthorized/pirated releases of games (specifically those using RPGMaker or TyranoScript engines). Sources: Widely distributed via major sharing communities such as anime-sharing, hentai-share, and ggbases. Origin: The widespread nature suggests a potential "supply chain" poisoning within the upper-level crack/distribution groups. Sample Download: Link: [ https://files.catbox.moe/jmn65o.7z ] Password: 123 Archive Structure: 1.7z contains libEGL.7z (The malware sample) and Attachment.7z (Screenshots and structural analysis). Please analyze this sample and update the database. Thank you. https://metadefender.com/results/file/bzI1MTIyOHM0RHlFWkdCazQ4emVMdGdZM2w https://www.virustotal.com/gui/file/021b7a9269bc251e66c4de170c7e81e7e9df482c386c84b7db6e86e986dcda10 https://www.virustotal.com/gui/file/8bacb2082eb37fd7aed5bb6a7fc766d9937d9f3ed926ae82420d37af754a216c https://forum.kaspersky.com/topic/游戏libegldll存在挖矿病毒-57734/

Hello @v.chandrakanth, Welcome! *Also* which region are you located in? From Kaspersky's @Danila T.: This is likely due to an update of the VPN infrastructure. All VPN users will see a new agreement in the app which they need to accept. The number of available VPN servers will change from ~105 to ~85, most common servers will remain. The router feature, protocol selection and dual VPN options will disappear. We’re continuing to expand coverage and add new features in upcoming updates. Original source reference: https://forum.kaspersky.com/topic/after-update-lost-some-servers-and-double-vpn-57341/#findComment-221765 ***Please contact Kaspersky Customer Service https://support.kaspersky.com/b2c#contacts, on the support page select Email, fill in the template as shown, please provide a *detailed-history* & please do not select the AI-Bot to submit the request: Kaspersky have a 30-day money-back guarantee that (you) agreed to when (you) purchased the subscription - for all other situations (you'd) need to discuss with Kaspersky support. Thank you🙏 Flood🐳+🐋

Hello @Michail & @titi, Welcome! From Kaspersky's @Danila T.: This is likely due to an update of the VPN infrastructure. All VPN users will see a new agreement in the app which they need to accept. The number of available VPN servers will change from ~105 to ~85, most common servers will remain. The router feature, protocol selection and dual VPN options will disappear. We’re continuing to expand coverage and add new features in upcoming updates. Original source reference: https://forum.kaspersky.com/topic/after-update-lost-some-servers-and-double-vpn-57341/#findComment-221765 ***Please contact Kaspersky Customer Service https://support.kaspersky.com/b2c#contacts, on the support page select Email, fill in the template as shown, please provide a *detailed-history* & please do not select the AI-Bot to submit the request: Thank you🙏 Flood🐳+🐋

Hello @nonanche92000, Welcome! From Kaspersky's @Danila T.: This is due to an update of the VPN infrastructure. All VPN users will see a new agreement in the app which they need to accept. The number of available VPN servers will change from ~105 to ~85, most common servers will remain. The router feature, protocol selection and dual VPN options will disappear. We’re continuing to expand coverage and add new features in upcoming updates. Original source reference: https://forum.kaspersky.com/topic/after-update-lost-some-servers-and-double-vpn-57341/#findComment-221765 ***Please contact Kaspersky Customer Service https://support.kaspersky.com/b2c#contacts, on the support page select Email, fill in the template as shown, please provide a *detailed-history* & please do not select the AI-Bot to submit the request: Thank you🙏 Flood🐳+🐋

Hello @User23837, Thanks for posting back! & Hello @Loose 1000, welcome! From Kaspersky's @Danila T.: This is due to an update of the VPN infrastructure. All VPN users will see a new agreement in the app which they need to accept. The number of available VPN servers will change from ~105 to ~85, most common servers will remain. The router feature, protocol selection and dual VPN options will disappear. We’re continuing to expand coverage and add new features in upcoming updates. Original source reference: https://forum.kaspersky.com/topic/after-update-lost-some-servers-and-double-vpn-57341/#findComment-221765 Kaspersky are also sending an email to subscribers regarding Kaspersky's partner change to their VPN infrastructure Thank you🙏 Flood🐳+🐋

Hello@PH ARGOS, Welcome back! Yes, it's a legitimate email regarding Kaspersky's partner change to their VPN infrastructure: From Kaspersky's @Danila T.: This is due to an update of the VPN infrastructure. All VPN users will see a new agreement in the app which they need to accept. The number of available VPN servers will change from ~105 to ~85, most common servers will remain. The router feature, protocol selection and dual VPN options will disappear. We’re continuing to expand coverage and add new features in upcoming updates. Original source reference: https://forum.kaspersky.com/topic/after-update-lost-some-servers-and-double-vpn-57341/#findComment-221765 Thank you🙏 Flood🐳+🐋

Hello @adamttt, Welcome! From Kaspersky's @Danila T.: This is due to an update of the VPN infrastructure. All VPN users will see a new agreement in the app which they need to accept. The number of available VPN servers will change from ~105 to ~85, most common servers will remain. The router feature, protocol selection and dual VPN options will disappear. We’re continuing to expand coverage and add new features in upcoming updates. Original source reference: https://forum.kaspersky.com/topic/after-update-lost-some-servers-and-double-vpn-57341/#findComment-221765 Thank you🙏 Flood🐳+🐋

I thought I'm alone very disappointed, very angry, what this stupid update, I was happy with the old version now what no gaming server no choice to chose protocols it's even not working since yesterday i lost 10 hours to fix the stupidity of someone and still on it, how much stupid can you get, ask the one made this very much more so stupid update. I don't even think the kaspersky customer care service care for our feedback but i must say it for the records, For years i had been a customer to kaspersky vpn and security if the issue is not resolved, it's a Sayonara.

No, because i want this to be wherever i am, not just at home. At least before the update, there were some servers that had consistent IP addresses. So static IP wasn't really necessary. I can't find such server in the new update

I read some threads about notifications and disabled ALL of them in the Kaspersky settings but problem still exists I am using Kaspersky Basic for one or two years and was happy about seeing nearly no notifications but this has changed some months ago by a Kaspersky update maybe and has become quite annoying, many times I get this kind of notifications which I do not need see the picture attached just using programs I trust and use for many years making a software report, searching for duplicate files and many other things and nearly always Kaspersky thinks that it must warn me but it just disturbs me. Even worse that I have to use a rather low screen resolution because of my old eyes so I often cannot close these windows even after changing to a higher resolution see the picture again, no OK, no ESC, no close button, I just have to wait if these Kaspersky windows close, sometimes they do, sometimes not, I even cannot stop the programs Kaspersky warns me about in these situations using Task Manager or System Informer etc. So is there a way to disable this kind of notifications completely ? I would be very happy about this

How to know the exact version in the control panel, it shows 19.0.0.1088. As far as I know, it's KSOS 6 I will try to update now then I will let you know

Please note product is updated gradually according region etc... So other people can have new version sooner like you.. In older version was choice keep current version or update new. Now it is automatic. Maybe you can disable automatic update (i didnt tried) but you can if you want really stay on older build. In Taskmanager is Kaspersky upgrade launcher which run everyday (at logon user). Try disable it. Or simply block upgrade.exe in program files by firewall.

Yeah Kaspersky VPN update has DNS issues. its definitely how they configured it, i've been having the same problems on mobile as i do for PC.. its been like a month now since I update and still have these problems. I already opened a Kaspersky VPN PC ticket. I hope they do better QA testing in the future for the scenarios like the ones you mentioned and for sites like youtube (actually playing videos for longer then 30 seconds etc...). I hope the devs read the forums 🫠

Hello @voseco Welcome back! KIS is Kaspersky's *old* software, it's been replaced by Kaspersky STANDARD, Kaspersky are offering a *free* upgrade, *read*, Kaspersky: Basic, Standard, Plus, Premium - info & FAQ, by Kaspersky - Danila T. The Kaspersky Standard download link is: https://www.kaspersky.com/downloads#update-product. Intrusion Prevention and Network Attack Blocker, are 2 different modules. KIS doesn't have Intrusion Prevention, in KIS the same module is called Application control -> *which* Kaspersky software is *actually* installed: on Windows Task-manager *Hidden-icons*, rightclick the Kaspersky icon, select About, post back the About information please? IF / when network attacks are active - they'll be logged in the Network Attack Blocker Report - *read* -> Network Attack Blocker Report. *Read*: Reports window IF / When there's an attack there may be events logged similar to: "DoS.Generic.Flood.TCPSYN, the same minute as one of the Scan.Generic.PortScan.TCP notifications." *IF (your) report window shows *no* events it may mean there are no events OR possibly, the 'Save in Local Report' option has been unchecked - check in configure Notifications: Understanding the Notifications Scan.Generic.PortScan.TCP: This notification indicates that Kaspersky detected what it interprets as a port scan. Port scans are commonly used to check which ports are open and listening for incoming connections on a device. This action in itself is not necessarily malicious, as some network processes (especially legitimate ones within your own network) might trigger this alert. DoS.Generic.Flood.TCPSYN: A DoS (Denial of Service) flood attack notification means that Kaspersky detected a surge in SYN (synchronization) packets. A SYN flood attack typically involves an attacker trying to overwhelm a device by sending a high volume of connection requests. Reset the router to factory defaults, update passwords & monitor for this notification, if it appears contact KCS - see the last dot-point. Router Scanning Internal Network: Some routers have built-in features to scan internal networks for active devices and may periodically query connected devices, which can trigger port scanning alerts. These scans are usually benign. Network Monitoring Services: Certain services on the router may actively monitor the network, especially if you have advanced settings enabled, which could trigger TCP scans. Some routers may do this to detect devices on the network or check connectivity and traffic flow. False Positives: It’s possible that Kaspersky is misinterpreting regular network behavior as a port scan. Many antivirus and security software suites may flag standard network activities as potentially suspicious, especially on a local network where a device (in this case, the router) frequently communicates with multiple devices. Steps to Address the Issue Check Router Logs: Access your router’s admin interface and look at the log settings to see if there are any scans or active network monitoring events that might correspond with the timestamps of the notifications. Disable Unnecessary Router Features: If your router has network management or scanning features, try disabling them temporarily to see if the notifications stop. Look for settings related to Network Discovery, Diagnostics, or Intrusion Detection. Adjust Kaspersky’s Network Settings: In Kaspersky Premium, you can customize the settings for Network Attack Blocker. Adding your router to a trusted devices list or lowering the sensitivity of attack detection for the local network could reduce these alerts if they are indeed false positives. With Kaspersky Standard this isn't possible. Run a Manual Security Scan: If you haven’t already, run a full security scan on all devices connected to the network to ensure there aren’t any infected devices that could be inadvertently sending out suspicious packets. Observe and Monitor: Reset and update passwords, keep an eye on the notifications. If the frequency decreases or the alerts stop altogether, it’s likely that these were routine scans or a temporary anomaly. When to Take Additional Action If these notifications continue and you notice any unusual network behavior—such as significantly reduced performance, new unknown devices appearing on your network, or more attack alerts targeting different MAC addresses—then it might be worth deeper investigation by Kaspersky Customer Service, Kaspersky Support: https://support.kaspersky.com/b2c#contacts. Thank you🙏 Flood🐳+🐋

The alert come back again. So after about half an hour trying to figure out what is it and where is it. basically this base.apk is the core of installed Samsung Internet system App. I went to the google play store, uninstalled update. Scanned. No alerts. However, when I try to install update, it triggers the alert again. But the second time, when I try to "block" it, it says it's neutralized this time. I tried to extract the apk but somehow ML manager is not generating the file. The newest update is Samsung Internet v29.0.0.59. I guess you guys can get it from the play store and test it. My phone is not rooted. I can't get the apk now, or it is somehow modified due to that "The threat is neutralized". I am pretty sure it is the trigger for the HEUR. I will report later if I am able to get this apk.