Help needed - Could anyone tell me exactly how to fill Kaspersky Free antivirus exclusion forms?

[klauss305]

Hello, until recently I used to have Avast Free Antivirus installed in my computer, but I uninstalled it as it slowed my computer too much.  To replace it I have just installed Kaspersky Free antivirus.

 

I need to add two exclusions: one exclusion for everything under the Acrobat folder, and the other only for only a single dll file.  When I had Avast Free Antivirus, I was able to do that adding these two exception rules:

C:\Program Files (x86)\Adobe\Adobe 11.0\Acrobat\*
C:\Windows\System32\SppExtComObjHook.dll

 

Now, I would like to set up these same exclusions in Kaspersky Free antivirus.  When I go to the relevant settings section of Threats and Exclusions, I find that every time I add a new exclusion I need to provide the following information:

 

File or folder
-----------------

Object
-----------------

File Hash
-----------------

Protection components
-All components
-Selected only
 +Scan
 +File Anti-Virus
 +Mail Anti-Virus
 +Safe Browsing
 +System Watcher
 +AMSI Protection

Comments
-----------------

Status
-Active
-Inactive

Filling the exclusion form is daunting to me to say the least.  And the instruction in Kaspersky site are simply incomprehensible for me.  Could anyone here explain exactly how should I fill (what to put in each entry section of the form) each one of these two exclusion forms? 

 

Thank you.

 

PS:  

-Also I found weird that when I tried to browse the dll file (SppExtComObjHook.dll) at C:\Windows\System32\SppExtComObjHook.dll, the dll file (SppExtComObjHook.dll) did not show up, but other dll files (and also other exe, etc. files) did show up.  What is the explanation of that?

-I tried to get Kaspersky Security Cloud Free from the Kaspersky Security Cloud - Free option at the left bottom of www.kaspersky.com.au/downloads  (I live in Australia) which opened www.kaspersky.com.au/free-cloud-antivirus  but redirected to www.kaspersky.com.au/free-antivirus where I got Kaspersky Free antivirus that I installed in my computer.
However, I could instead have tried to go to the global Kaspersky Security Cloud Free site at www.kaspersky.com/downloads/try-free-cloud-antivirus  (which I could access without being redirected to the Australian site) and then I could have downloaded and installed Kaspersky Security Cloud Free.  Would that have worked or would I have been blocked?

Thanks for your assistance.

[Flood and Flood's wife]

1. I found that when I tried to browse the dll file (SppExtComObjHook.dll) at C:\Windows\System32\SppExtComObjHook.dll, the dll file (SppExtComObjHook.dll) did not show up, but other dll files (and also other exe, etc. files) did show up. What is the explanation of that?
2. I need to add two exclusions: one exclusion for everything under the Acrobat folder, and the other only for only a single dll file. 
3. I tried to get Kaspersky Security Cloud Free from the Kaspersky Security Cloud - Free option at the left bottom of www.kaspersky.com.au/downloads, which opened www.kaspersky.com.au/free-cloud-antivirus  but redirected to www.kaspersky.com.au/free-antivirus where I got Kaspersky Free antivirus that I installed in my computer. However, I could instead have tried to go to the global Kaspersky Security Cloud Free site at www.kaspersky.com/downloads/try-free-cloud-antivirus  (which I could access without being redirected to the Australian site) and then I could have downloaded and installed Kaspersky Security Cloud Free.  Would that have worked or would I have been blocked?

 

Hello @klauss305,
Apologies for the delay responding to your topic😥

1. Regarding, (SppExtComObjHook.dll), does the file exist? 
2. Regarding the exclusion for C:\Program Files (x86)\Adobe\Adobe 11.0\Acrobat\, use a *.* mask, see our image:

   

    

    

3. Regarding: www.kaspersky.com.au/downloads - https://www.kaspersky.com.au/free-antivirus, is Kaspersky Free for Windows, from Kaspersky's *new* MR5 range; it replaces Kaspersky Security Cloud Free; read: Kaspersky: Basic, Standard, Plus, Premium - info & FAQ 

   

    

    

4. IF you wish to go to Kaspersky's global website you're still able to download Kaspersky Security Cloud Free, 21.3,  the previous version. You will not be blocked from accessing this software

   

    

    

Any problems or questions, please do not hesitate to post back? 

Thank you🙏, 

Flood🐳+🐋
Resource:

Kaspersky Free 21.3 online help

[harlan4096]

Also,

 

About SppExtComObjHook.dll: this is a known dll used by a hacktool called KMSPico (and others). In this thread is very explained how Exclusions works in Kaspersky. It is in Spanish language, but pictures are very clear ;)

 

Link

 

[klauss305]

Flood and Flood's wife, thanks for your helpful assistance and feedback.  I will follow up on your responses in order.

1. The file SppExtComObjHook.dll does exist at C:\Windows\System32\SppExtComObjHook.dll, but is not shown up when trying to select from Exclusions in Kaspersky.  Please refer to attached screenshots below.

 

 

2. I will use the *.* mask you advised for C:\Program Files (x86)\Adobe\Adobe 11.0\Acrobat\, as shown in your screenshot.
3. I am extremely confused about this.  You are saying that the Kaspersky application from www.kaspersky.com.au/free-antivirus is Kaspersky Free for Windows, from Kaspersky's *new* MR5 range; it replaces Kaspersky Security Cloud Free.  Note that, as shown in the attached screenshot, the version of the Kaspersky Free for Windows that I installed is 21.5.11.384 (b).
4.  

 

Now, if you go to support.kaspersky.com/kfa  this says:

 

Switch to new Kaspersky Security Cloud Free

In the nearest future we are going to replace Kaspersky Free with a more advanced solution — Kaspersky Security Cloud Free.

In some time we will gradually start discontinuing the support of Kaspersky Free: we will stop releasing antivirus database updates, therefore protection against latest threats will no longer be guaranteed. Kaspersky Security Cloud Free is already available and we encourage you to switch to it as soon as possible.

 

So, all of this is contradictory: on one hand you are saying that Kaspersky Free for Windows, from Kaspersky's *new* MR5 range (what is MR5 range?), it replaces Kaspersky Security Cloud Free, and on the other hand Kaspersky is clearly saying that Kaspersky Free will be replaced by  Kaspersky Security Cloud Free, encouraging users  to switch to it as soon as possible.

 

Also what is MR5 (and MR4, MR3, etc.), what does it stand for?  Also, where can I find the version history for each Kaspersky application?

 

harlan4096, thanks for your insightful feedback.  Luckily I can read Spanish, so I will read carefully the link that you provided.  This file SppExtComObjHook.dll is definitely not a malicious program (I have carefully checked that) but a program that allows resetting again the countdown period for a Microsoft Office demo suite that I have.  So I want to keep this file and not have it deleted/removed.

 

harlan4096, what is not clear, in order to select specifically the SppExtComObjHook.dll file in the way describe in the Spanish link that you provided

(https://community.kaspersky.com/para%2Dusuarios%2Dparticulares%2Dforum%2Dpara%2Dusuarios%2Dhispanohablantes%2D70/exclusiones%2Dignoradas%2D21828?postid=94109#post94109),

you need to specify the Object name.  My question is: how do I identify the Object name for my SppExtComObjHook.dll file ?

 

Thank you very much for your help.

[harlan4096]

@klauss305: the object is the specific detection You get from Kaspersky for the dll file SppExtComObjHook.dll

 

To get it, check in Your Kaspersky Reports :)

[Flood and Flood's wife]

Hello @klauss305, 

You’re most welcome!

Thank you for posting back and the extra information. 

• ✅ Moderator @harlan4096 will kindly help you with the .dll issue, he’s the expert in that area.

Re: Kaspersky Free, “Switch to new Kaspersky Security Cloud Free” & MR5, yes, agreed, it’s confusing…

Kaspersky Free was MR2 & earlier, Kaspersky Security Cloud Free is MR3, there was no MR4 & now Kaspersky has released MR5

 

To make things even more confusing, atm there’s no documentation available for the MR5 Free version, only: Kaspersky: Basic, Standard, Plus, Premium - info & FAQ & Kaspersky Basic | Standard | Plus Online help

Historically, Kaspersky published documentation for Kaspersky Free, not for Kaspersky Security Cloud Free & we don’t think they’ll publish MR5 Free specific doco either, altho we don’t know that conclusively. 

You have MR5, 21.5.11.384 patch(b)

Thank you🙏, 

Flood🐳+🐋