Kaspersky Free prevent stopping a kernel driver (service)

[Wagnard]

Kaspersky Free prevent stopping a kernel driver (service).

An easy test is to launch "LibreHardwareMonitor" , this will create a file named "LibreHardwareMonitor.sys" (it's a kernel service ).

Normally when we close the application, the service stop and the file get deleted but not with Kaspersky free installed.

I must uninstall Kaspersky to expect "normal" behavior.

[harlan4096]

Welcome to Kaspersky Community.

 

Please provide KFree version installed and operating system.

 

Did You try to add an exclusion?

[Wagnard]

I did not try the exclusion and for the version, all I can tell is that it was the version at the time of posting the forum thread.

I'll reinstall it later and see if the exclusion help.

[Wagnard]

Sorry for the late reply, adding an exclusion for the entire folder doesn't work.

[harlan4096]

Can You provide a capture of the exclusion created? thanks.

[Wagnard]

The exclusion is the Last one, the G:\...

Edited January 10 by Wagnard

[harlan4096]

In the field "Object name:" You have to type the specific detection of Kaspersky, and not "*".

[Wagnard]

* means ALL objects. It's not the first time I exclude something and this work for others things.

[harlan4096]

Can you provide the location and captures to show where it is created LibreHardwareMonitor.sys, to reproduce the issue?

 

[Wagnard]

It is located on the same folder of the .exe

Edited Wednesday at 06:21 PM by Wagnard

[harlan4096]

 

Ok, I'm trying it in a Virtual Machine with W11 + KPremium 21.19b, and even running that tool without Kaspersky running, that .sys file can't be deleted after You run once LibreHardwareMonitor.exe 🤷‍♂️ having Kaspersky exited should not stop or interfere with any blocking in the system 🤔

[Wagnard]

Yes I know, it's not normal. On my side I had to uninstall Kaspersky and use default windows defender for the file to be automatically removed on exit.

[harlan4096]

Maybe You should report it to K. Support, maybe they will request You to enable product traces while reproducing the issue, and try to fix it.