If active malware is missed by kaspersky but eventually added to signatures, does it detect it?

[Guest]

Lets say you have File Anti-Virus set to scan only new or changed files. You get malware and it runs, gets past everything but eventually gets added to the signatures. Will it be detected if the malware is active?

[Xzz123]

below is only personal experience gained by being many years of kaspersky user and do notrepresent K‘s official statement:

Whatever your FileAV settings are,the moment the file is launched, K will recheck its reputattion and scan the file

also system watcher keep monitor watching the file behaviors. the overall result is: you dont need to worry

The scan only new or changed files setting only apply before you launche the file.

[Guest]

Thank you. However, what if the file is already active and then signatures update. Any idea on that?

[Xzz123]

if the bad guy is running in background and you do not access to the file, it is highly likely will be detected in memory

[Guest]

Also I believe intrusion prevention detects known malware incase of a update possibly. If its updated with signatures it'll probably be detected in memory.

[Guest]

At least I hope.

[Xzz123]

10 hours ago, Xeno2ig said:

At least I hope.

do not worry

K has sophisticated muti-layer defense

just never try shutdown K after persuaded by social-engineering and phishing attacks