All my webnavigation is deviated to ff.kis.v2.scr.kaspersky-labs

[hdegyns]

Hi,

I had Kaspersky Free 20.0 installed. This program injected some code in my browsers without my concent. From that moment, all my navigation is redirected to ff.kis.v2.scr.kaspersky-labs, this dramatically slows down my connection. This is really a harmfull software.

I have removed Kaspersky Free 20.0 from my computer but the redirection remains. I tried reinstalling the browsers but the redirection remains.

Can you help to get rid of this VIRUS?

Thank you for your help.

 

[Flood and Flood's wife]

Hello @hdegyns, 

Welcome!

Has a reset been done on each browser?

• 1 Run Firefox default profile. If Firefox is currently running, close, press Win+R - type in firefox -p, from the popup select default,  replicate the issue, post an image of the result?

 

For Chrome, IE & Edge, run the system is SafeMode with Networking:

• 2 Replicate the issue in each browser & post images of the result from each browser please? 
• 3 Run a GSI & Windows Logs, upload the .zip to cloud & post the link please? 

Please post back?

Thank you🙏

Flood🐳

[hdegyns]

Hello and thank  you for your answer.

It took me some time to get back to my computer.

I will try to be as precise as possible because I think I have solved the problem.

I have tried to run FireFox in safe mode, the connection was still very slow. Then I have created an other profile under FireFox. This removed the message connection to ff.kis.v2.scr.kaspersky-labs, whenever I tried to access a site but the speed was still very slow. According to speed tests the connection speed got a little bit better but only marginally. This could be a coincidence.

Then I installed a new browser, and was able to navigate at the maximum allowed speed. I installed a second one did a few speed test and got the same result. It appeared that browsers installed when Kaspersky Free 20.0 was installed were still connecting through ff.kis.v2.scr.kaspersky-labs and surfing at low speeds and browsers installed after i had Kaspersky Free 20.0 removed were surfing at maximum speed.

For some reason I checked the devices manager on my machine and found out that two devices related to Kaspersky were still present on my machine. I uninstalled them, restarted the computer and all browsers, old and new, are now surfing at about the same speed. Firefox is a little bit slower but according to a lot of different sites this is normal.

So the problem was the two drivers that Kaspersky left on my machine, removing them seems to have solved the issue.

[Flood and Flood's wife]

Hello @hdegyns, 

Thank you for the update👌

I think the 2 devices you’re referring to are the Kaspersky Security Data Escort Adapter, components of Kaspersky Secure Connection-VPN🤔

Removing Kaspersky Security Cloud would leave Kaspersky Secure Connection-VPN & it’s components as the two products are separate. 

Thank you🙏

Flood🐳

[pairofdocs]

I’m having the same issue. Using the default profile in Firefox does not fix the issue. All Kaspersky drivers have been removed from the device manager.

 

[Flood and Flood's wife]

Hello @hdegyns, 

Welcome!

1. Are you also using Kaspersky Free for Windows?
2. Is the issue new or has always existed?
3. Run a GSI & Windows Logs, upload the .zip to cloud & post the link please? 
4. In the canvas page/image, which issue are you showing? 

• https://youtu.be/UMW0L9rJA10

Thank you🙏

Flood🐳

[pairofdocs]

1. No, I was running KIS 2020 but I uninstalled it yesterday (along with Kaspersky Secure Connection).
2. Look at the bottom corner of the image: Firefox is still attempting to connect to ff.kis.v2.scr.kaspersky-labs.com.
3. The issue is new since installing and uninstalling KIS 2020
4. File Attached

[Flood and Flood's wife]

Hello @pairofdocs, 

As I understand, KIS20 is uninstalled, yet the fictitious address, used by the Kaspersky Protection extension, to communicate with KIS, is still showing in the Firefox Default browser🤔

Please do the following & please make a video of it:

• If Firefox sync is on, turn off, create a new Windows profile, login under the new profile, download a new Firefox installer, run Firefox, using the default profile, check if the issue repeats? Please let us know & include the video? 
• Also, if the issue does repeat & if you have a Kaspersky software license, raise a request with Kaspersky Technical Support, include the full GSI & Windows Logs, as previously requested, and the video of: KIS uninstalled, no KIS extension, a new Windows profile, using a Firefox Default profile, with Firefox sync off, there remains visible call to ff.kis.v2.scr.kaspersky-labs.com.
• After submitting the case, you’ll receive an automated email with an INC+12digits reference number, then, normally, within 5 business days, a Kaspersky Technical Support human will communicate with you, also by email, you may continue to engage with the Kaspersky Technical Team via email or by updating the INC in your MyKaspersky account.

• When Kaspersky Technical Support provide you with a solution, please share it with the Community? 

Thank you🙏

Flood🐳