Search the Community

Уже несколько недель касперский пытается вылечить троян. После лечения и перезагрузки он находит его снова. Также касперский делал 2 принудительных лечения во время которых у меня недоступны запросы в браузере, какие либо приложения виндовс, и по какой то причине перестаёт работать микрофон в дискорде. Почему то не могу найти в отчётах лечения может я просто слепой.

Boa noite, me chamo gustavo e estou com um problema que está me estressando muito, a um tempo acabai sofrendo com um programa licenciado por um empresa que no fim, mesmo sendo pago era um malware que acabou vazando dados meus e me deixando bem impotente, dai por recomendação de um amigo assinei o plano da Kaspersky plus. realmente não tive mais problemas com isso, mas em contra partida pouco tempo depois percebi que o celular de minha mãe estava com o e-mail dela alterada e varias coisas da própria área de trabalho do celular dela alteradas. Depois de fazer algumas verificações averiguei que sim era um trojan e que ele tinha roubado bastante dados da minha mãe, além de ter trocado varias senhas e ter tentado entrar nas suas contas bancarias. Como não sou muito bom nesse tipo de problema, para evitar ser mais problemático coloquei um anti vírus no celular dela que encontrou o problema e me livrei dele. Contudo um dia depois meu colega de quarto também foi atacado, perdeu varias contas, discord, redes sociais, steam, recuperamos tudo, contudo não entendemos como isso tinha acontecido, resolvemos, mudamos a rede wi-fi, senha e etc, formatamos o roteador e o computador dele, mas hoje ele foi atacado novamente, ainda pior porque perdeu aceso a uma de suas contas bancarias, sua conta salario. Eu realmente não faço ideia o que posso fazer para acabar com esse problema, estou pensando em formatar simplesmente todos os eletrônicos da rede por medida desesperada, mas eu realmente não faço ideia como resolver e gostaria de alguma orientação. Por hora minha maquina está segura, mas não tenho mais nenhuma noite de sono ficando a espreita, olhando cada notificação, cada mudança com medo de perder algo novamente. Uma coisa que gostaria de acrescentar que as senhas que usamos são feitas pelo próprio edge reconhecidas como senhas fortes, não tem ligação nenhuma com nada nosso, não anotamos ela no dispositivo e a única forma dele de fato acessar é de alguma forma controlando nosso computador. Isso está acontecendo a mais o menos 6 dias. O computador dele eu considero que foi o mais vulnerável pq ele tem um costume de deixar ele sempre ligado, e ligado a rede, por isso imagino que o mesmo está ou estivesse na rede wi-fi. Olhamos alguns fórum e temos receio do hacker estar em nivel kernel de algum dispositivo, já que os anti virus não parecem funcionar para o detectar. No primeiro problema, quando meu colega de quarto foi hackeado, entramos no painel de controle e revogamos acesso a rede de praticamente todos os apps, deixando somente acesso ao sistema do win 11 e apps necessários, excluindo acesso a todos os outros para ter acesso a internet.

Hello Kaspersky Team and Community, I've been observing the Kaspersky Cyberthreat Live Map for a while now, and I'm a bit puzzled. While the map highlights significant activity globally, I've noticed that Canada often shows minimal threat data compared to many other countries, even during times when cybersecurity risks seem high worldwide. Given the heightened state of cyber activity, this discrepancy is causing me some concern. Could this be due to certain monitoring constraints specific to Canadian infrastructure, or perhaps an intentional choice in data visualization for regions? If this data gap is indicative of low activity, is there something about Canada's cybersecurity landscape that could explain this? Or, should I be worried that it might signal an oversight or lack of reporting that could impact our national security interests? Looking forward to your insights! Thank you. mato lechat

Hola. El dia de hoy necesite entrar a un sitio que es una institucon gubernamental y de pronto me aparecieron 12 notificaciones acerca de malware en la pagina.

I just installed Kaspersky two weeks ago and having issues with connections to my modem and today, I noticed something very weird. I surf on the net at a minimum daily, checking the news or online shopping and maybe 15-30 minutes on social media apps. Kaspersky indicated it has checked over 32,000 links! Umm. Does anyone know if this is normal?

1. 麻烦分析一下这两个文件，应该是病毒，已上传到opentip（结果是未归类） 压缩包解压密码：infected 已上传到谷歌硬盘里 https://drive.google.com/file/d/1NZnBQOiWWmm-SlesMsW33SHy_gBXdXTl/view?usp=sharing 2. 电子邮箱联系技术支持的验证码一直刷新不出来，一直转圈，麻烦排查一下验证码显示是否有问题

Возможно ли взаимодействие компьютера с одним из этих вирусов? Я буду исходить из своей ситуации, чтобы она была описана более понятна для всех. Обнаружил подозрительное вмешательство в своё личное интернет-пространство, злоумышленник решил оставить несколько сообщений от себя в DISCORD (от моего профиля), следов активности с других IP-адресов обнаружено не было, взлома не было, двухфакторная защита активирована. Я начал проверять с помощью антивирусов, увидел, что имелось заражение HOSTS, а после повторной проверки был обнаружен MSTASK Trojan Starter 7691 остальные были менее подозрительными, что могло бы вызвать подозрения на такое вмешательство.

My Kaspersky Premium seems to stuck on removing some malware from my PC. It found 80 issues and I clicked to fix them. I did it few hours ago and the program is still "working". It looks like it stuck. I already restarted the system and nothing changed. Also, the program shows constantly: "Removing these objects requires your decision". It did ask me to make some decisions, which were limited to ignoring some of the issues it found. I did so hoping that maybe I will be able to remove it later by myself.

Словил вирус-майнер который не даёт скачать антивирус, и маскируется под realtek и т.д Закрывает процесс хакер, закрывает проводник если лезешь в program data, если открываешь параметры проводника и кучу ещё всего закрывает, не даёт запускать антивирусы (антивирусы тупо не могут создать файлы конфига или распаковаться). Скачал рескью диск кое как, установил, запустил, сканировал комп 3 часа и даже чёто удалил, но... Так вот вопрос. КАКОГО ХРЕНА ВАШ РЕСКЬЮ ДИСК, НАХРЕН, НЕ ОБНАРУЖИВАЕТ ЕГО? ПОЧЕМУ Я ДОЛЖЕН ЗАПУСКАТЬ ЛЕВУЮ ПРОГУ С ЛЕВОГО ФОРУМА, КОТОРАЯ РЕАЛЬНО РАБОТАЕТ, А НЕ ВАШИ ИНСТРУМЕНТЫ? https://www.safezone.cc/threads/virus-taskhost-exe-realtek-hd-audio.41772/ НИ ДР.ВЕБ НИ КАСПЕРСКИЙ НЕ МОГУТ ВЫВЕСТИ ЭТУ ХРЕНЬ, КАКОГО ЧЁРТА ОНО УЖЕ ТАК ДОЛГО СУЩЕСТВУЕТ И ВЫ НИЧЕГО С ЭТИМ НЕ ДЕЛАЕТЕ? #файл забрали на проверку

Recentemente navegando pela Steam encontrei o jogo Visions of Mana e resolvi instalar a demo para jogar. Hoje ao abrir o jogo para minha surpresa o antivirus detectou que havia um vírus nele, fechou o jogo demo antes mesmo de começar e excluiu o arquivo. É até estranho que uma empresa como a Steam permita que esse tipo de coisa aconteça e até denunciei. Mas também, qual seria a possibilidade disso ser apenas um falso positivo?

I'm using a ThinkPad t14 notebook with Windows 11 Pro 64bits version 23H2, with Mozilla Firefox version 129.0.2

Bonjour, malgré avoir effectué de nombreux antivirus et formater mon pc, mon adresse mail continue à avoir des activités suspectes à des heures où je dors sur mon pc, je soupçonne donc qu'un virus est encore sur mon pc, le hacker ne touche quasi à rien sauf à mon adresse mail. Bien évidemment cette situation est à cause de moi, j'ai récemment crée et installer un jeu sur itch.io si cela peut aider, (mais aussi sur stg gege)

help me pls

Yesterday I was checking my apps on startup and I saw 2 files that I didn't recognize. I can't find their file location and i can't remove them. One of them ("19") was "17" yesterday. It changed. I scanned 3 or 4 times with Kaspersky but it couldn't find any threats. I checked startup file too and there were no files there.

Hello support team, I want to run the following files on my system but VirusTotal detects threat, however Kaspersky is not showing any threat detection(I am using premium Kasepersky, home edition) I just want to know if these files are safe, let me know if You can confirm this. here are the 4 VirusTotal link files: https://www.virustotal.com/gui/file/f5e6682c44cb73f65d2f349fc651d7c3c78b2e49fa56a765a702a877c8c563d3/detection https://www.virustotal.com/gui/file/ce66ca7f2ede112a03356850594762591dbe62ac083eb989c9e8e58b6138e316/detection https://www.virustotal.com/gui/file/e968563a93f2fcb5690ee2f77ab097c8c757da5bb156dead731048dfa64f008b https://www.virustotal.com/gui/file/0175940ccb7a1cc71c27ea13ee574d7f7d73e58e1d9c48f22ffebc157d9a0b24/detection Also let me know if i can somehow send files to you, everyfile is .exe format Thank You in advance, Best Regards

Após realizar uma varredura no meu notebook com o Kaspersky Virus Removal Tool, ele me retornou o seguinte arquivo: Rootkit.Boot.Backboot.e Que está localizado no diretório: \Device\Harddisk1\DR1 Assim como é mostrado no print em anexo: Minha dúvida é, o que é esse arquivo? Quais acessos ele teria no meu computador? E como faço para acessar esse diretório em que ele está localizado? Ps: O arquivo, antes mesmo de estar na quarentena já estava nesse diretório, conforme segundo print em anexo: Ps2: Os outros "virus" eu já consegui remover. O que está me preocupando é esse do rootkit. Ps3: Eu pesquisei na internet e pelo que eu vi esse rootkit só infecta sistemas Linux. É isso mesmo?

My SO is Windows 10, KIS version is 21.3.10.391 I installed KIS to search for a virus in my desktop computer, and while it found there's a Trojan affecting the system, once I accepted to run the recommended action to delete it, it got stuck on it, and it's been more than 12 hours and it's still stuck on the task. I don't know how to proceed, if I should uninstall it and try another antivirus, but I would be glad if someone has any advise on how to proceed, or if it has happened to anyone else.

saben de alguna herramientas para desecryptar

Boa Noite Hoje as 22;43. o meu antivírus identificou um adware no meu notebook e começou um processo para resolver o problema que creio ser removê - lo. Já são 00;54 e até agora o antivírus não concluiu o processo com a pagina em looping. Inclusive, usei eliminadores de adware que não detectaram mais nada. já reiniciei o meu notebook e nada. O que está havendo? Será algum problema grave? Gostaria por gentileza de um suporte de vocês, pois estou aflito Yuri

Пользуюсь системой вин 10 в сборке от OVGorskiy и попался какой то вирус (не исключаю что он был в системе сразу) полная проверка Microsoft defender и просто полная проверка от антивируса системы не обнаружила ничего специфического. Помогите решить проблему пожалуйста

Not sure what this is

here is the question: please I need support I'm currently stuck at question 3 in my learning process of basic investigation which is a cause in the Kaspersky Cloud Pro I purchased I have solved the required question as expected. I arrived at supposedly the correct answer but the system refuses to accept my answer now I cannot further my learning for over 3 days now please I need the correct answer that will solve this problem here is the expected URL: \Device\HarddiskVolume4\server.exe but the system is not accepting it. please help me. Find out if anything was launched from the connected flash drive. Remember that if a process is launched from an external drive, its path begins with “\Device\” Enter the executable file's name:

Got absolutely frustrated with my Lenovo Yoga Slim laptop. Everything started to run especially slow one day and even occasional screen freenzes happen. The laptop went over-heated but memory and cpu usage was actually quite low. Couldn't properly load Youtube video in full screen. Everything is lagging hard. I full scanned my laptop using Kaspersky Standard and a malicious objected was detected. It was a kind of Trojan named HEUR:Trojan.Multi.Runner.l But Kaspersky seemed to do absolutely nothing about it. No disinfection, no quarantine, no deletion? And the next time I full scanned it, Kaspersky simplied told me that No threats are found. Please help me. I have got work to do and I have even tried restoring Windows but in vain. Details are as below: Event: Malicious object detected User type: Active user Component: Virus Scan Result: Detected Result description: Detected Type: Trojan Name: HEUR:Trojan.Multi.Runner.l Precision: Exactly Threat level: High Object type: File Object name: powershell.exe Object path: proc:\C:\Windows\System32\WindowsPowerShell\v1.0 Reason: Expert analysis

so i recently made a post and i asked a question to a mod about this so he told me to make a post about this! heres the virustotal link:https://www.virustotal.com/gui/file/274655e208fdbb597a5dd9b8538d15fa1e388be7b3365eb01db357d3318180ad/relations why is this probably malicious? well recently theres been a thing going on on youtube that includes file sharing. its for a program called alkad rust(its a client that host servers for the game called rust its free) and its becoming quite popular. apart from this client theres people making loaders that allow modifications on this client since its allowed on some specific servers where people are allowed to use this modifications whit no restrictions and you fight whit other people that have the same programs that modify. talking about this modifications half the time this videos are filled whit kid things like minecraft npc's dancing so they can probably trick kids into downloading these programs. and what does the modification programs have to do whit this? well half of these PAID and FREE clients/modifications are malware and include mainly crypto miners or RATS so today i have this exe that only gets 8 virus total scans and its a supposted cryptominer from i was told . I was actually going to run it but i got kinda concerned . so i did some research and kapersky detects it as good ? im shure this is a cryptominer. If not a cryptominer then it still potentually malicious and can cause harm to peoples pc dont know how to hide the link to the file so ill wait for a mod since the mod that i was talking 2 said: When posting suspect - potentially malicious URL(s) or files to the Community for review, modify the information so it's not *live*