Kaspersky Notifications Taking Focus from other Apps and Freezing them

[Davmacrat]

Hi @Flood and Flood's wife

I am on it now, be back in touch soon.

Kindest regards

D.

[Davmacrat]

Hi @Flood and Flood's wife

OK stuck again. Removal password is being asked for See attached. The password is not set. See attached. The uninstall process is reporting that the application could malfunction if I cancel. So, stuck in limbo. See attached.

Any ideas?

Kindest regards

D.

 

[Flood and Flood's wife]

31 minutes ago, Davmacrat said:

Removal password is being asked for, the uninstall process is reporting that the application could malfunction if I cancel.

Hello @Davmacrat, 

Thank you for the update, you're not having much luck are you?, never mind, proceed as follows please:

1. Please cancel the removal of Kaspersky Plus. 
2. Shutdown the computer using Shutdown, not Restart, power on by pressing the power button, login.
3. IF you still have KLAPR, Kaspersky's Password reset tool, unzip it, then run the computer in SAFE MODE - if you don't still have it - please download it again. 
4. Run KLAPR for Kaspersky Plus - use this guide: How to reset a password for uninstalling, closing or configuring an application. 
5. Revert to normal mode. 
6. From Windows, Add or remove programs, uninstall Kaspersky Plus; at the completion of the uninstall, make sure the computer is rebooted. 
7. Continue with removing KVPN, KPM & SFC & the post back?

& as always, if you run into strife, post back please? 

Thank you?
Flood?+?

Edited November 7, 2022 by Flood and Flood's wife

[Davmacrat]

Hi @Flood and Flood's wife

That's done in Safe Mode. No change. Still asking for a password.

Do you have the registry entry for the password enable setting for both versions. I can have a look what it is set to. I don't see any other way other than resetting the PC and I'd rather not do that.

Kindest regards

D.

[Flood and Flood's wife]

8 minutes ago, Davmacrat said:

That's done in Safe Mode. No change. Still asking for a password.

Do you have the registry entry for the password enable setting for both versions. I can have a look what it is set to. I don't see any other way other than resetting the PC and I'd rather not do that.

Hello @Davmacrat, 

Thank you for posting back & the information! 

1. When KLAPR was run, in SAFE mode, did it show that it had reset Kaspersky Plus password? 

Thank you?
Flood?+?

[Davmacrat]

Hi @Flood and Flood's wife

No, it reported that “The operation was completed successfully.”

Kindest regards 

D. 

[Flood and Flood's wife]

13 minutes ago, Davmacrat said:

1. No, it reported that “The operation was completed successfully.”

Hello @Davmacrat, 

Thank you for posting back & the information! 

Hmmm, there's clearly something amiss. 

Please do the following:

1. In SAFE mode, run KAVREMOVER, to see which Kaspersky software is now detected - write back or post a screen-print please?  
2. Still in SAFE mode, go to C:\temp & delete all files & folders. 
3. Still in SAFE mode, go to C:\Users\USER\AppData\Local\Temp & delete all files & folders -> {USER = your name} 
4. Return to Normal mode. 
5. As ADMIN, run sfc /scannow - post the result please?

Thank you?
Flood?+?

Edited November 7, 2022 by Flood and Flood's wife

[Davmacrat]

Hi @Flood and Flood's wife

In Safe Mode: (Hidden files and folders visible)

1. Done. Only program seen was Kaspersky Password Manager.

2. C:\temp & delete all files & folders. - No files or folders to delete

3. C:\Users\USER\AppData\Local\Temp & delete all files & folders. - All files and folders Deleted. Lots and Lots of them.

4. In normal mode:

5 As ADMIN, run sfc /scannow: No integrity violations. See attached:

Kindest regards

D.

[Flood and Flood's wife]

Hello @Davmacrat

Thank you for the update & apologies for the delay?

• Regarding the password issue, we're waiting for feedback from Kaspersky.
• Clearing the password issue, if indeed it can be done, may not resolve other underlying issues that have existed, from the beginning when you first logged the topic. 
• We understand you'd prefer not to reset the PC; however, it may be best to start with a clean slate - perhaps have a think about it? 

1. In the interim, please go back to SafeMode, & delete all files & folders in: C:\Windows\Temp
2. Return to normal mode, then proceed as follows:
3. Create another System restore point. 
4.  Go to Windows Installed apps - uninstall Kaspersky VPN, - during the uninstall, there will be a prompt to save information, select *Save License* only - do not check any other check box, at the end of the uninstall, make sure the computer is REBOOTED. 
5. Sign back in, or if you're already signed in, go back to Windows Installed apps - uninstall Kaspersky PM, - during the uninstall, there will be a prompt to save information, select *Save License* only - do not check any other check box, at the end of the uninstall, make sure the computer is REBOOTED. 

Keep us posted when you get to 5. please? 

Thank you?
Flood?+?

[Flood and Flood's wife]

On 11/8/2022 at 12:57 AM, Davmacrat said:

1. Done. Only program seen was Kaspersky Password Manager.

Hello @Davmacrat, 

• ?Update, please read our PM first

1. Create a System restore point.
2. Change to Safe Mode.
3. Run Kavremover with --nodetect key.
4. Select Kaspersky for Windows manually in the drop-down list.
5. Remove Kaspersky for Windows. 
6. Return to normal mode followed by a shutdown computer, using Shutdown, not restart, however, note: ⚠️IF there's more than one Kaspersky AV -> shutdown the computer, using Shutdown, not Restart, power on, login, go back to Safe Mode & rerun Kavremover with the nodetect key, to remove the second instance. 

Please share the outcome with the Community?

Thank you?
Flood?+?

Edited November 8, 2022 by Flood and Flood's wife

[Davmacrat]

Hi @Flood and Flood's wife

Have completed your interim actions (penultimate post). There is no options to save licences. See attached.

The VPN and KPM apps have been removed successfully.

Have followed this latest post to the letter. notes on steps below:

4. "Kaspersky for Windows" did not feature. There were 3 options 

• Kaspersky Basic, Standard, Plus, Premium
• Password Manager
• Secure Connection

I chose the first.

5. The latest version of Kaspersky was removed successfully.

6. Reran the supplied Kavremover which failed to detect any further instance of Kaspersky Basic, Standard, Plus or Premium.

The only place I can see any reference to Kaspersky is in Installed Apps and AppData for KPM saved backup vault.  This would tend to suggest that there is still a registry entry for Kaspersky 21.6.7.351, but no files or folders exist as far as I can see. No Kaspersky aps are loading on power up. See Attached.

What would you suggest are the next steps?

Kindest regards

D.

 

[Flood and Flood's wife]

4 minutes ago, Davmacrat said:

• 1. There is no options to save licenses.
• 2. The VPN and KPM apps have been removed successfully.
• 3. Have followed this latest post to the letter. 
• 4. "Kaspersky for Windows" did not feature. There were 3 options 
• Kaspersky Basic, Standard, Plus, Premium
• Password Manager
• Secure Connection
• 5. I chose the first = the latest version of Kaspersky 21.8, was removed successfully.
• 6. Reran the supplied Kavremover which failed to detect any further instance of Kaspersky Basic, Standard, Plus or Premium.
• 7. The only place I can see any reference to Kaspersky is in Installed Apps and AppData for KPM saved backup vault.  This would tend to suggest that there is still a registry entry for Kaspersky 21.6.7.351, but no files or folders exist as far as I can see.
• 8. No Kaspersky aps are loading on power up. 

Hello @Davmacrat, 

Thank you for the update, the information & the hard work, progress, bloody beauty, well done?!!

•  1. No Licenses - good to know, thank you! 
• 2. Have they - the first & second image, in your last post, do not show that?? 
• 4. No Kaspersky for Windows - good to know - thank you!! 
• 5. Excellent - success,  well done?!!
• 6. Ok. 
• 7. Kaspersky sfw showing in Installed Apps and AppData -> 21.6.7.351 - is an earlier version of the AV, not KPM - please post an image of the Installed Apps and AppData screen, please show the screen in Details format - not tiles please? 
• 8. Excellent, progress, we're close, not there yet, but almost ?

Thank you?
Flood?+?

[Davmacrat]

Hi @Flood and Flood's wife

OK, See attached. I don't have permissions for the KPM folder and don't want to start screwing with them. Never did understand them. 

Still the same old original version in the Installed Apps. 

Kindest regards

D.

[Flood and Flood's wife]

36 minutes ago, Davmacrat said:

• Still the same old original version in the Installed Apps - Windows Apps, Installed apps, Kaspersky 21.6.7.351 | 22.9.2022
• I don't have permissions for the KPM folder:  C:\Users\USER\AppData\Local\Kaspersky Lab\Kaspersky Password Manager

 

Hello @Davmacrat, 

Thank you for the update & the information!

• When KPM was uninstalled, the 3 options: Application settings, Vault, Backup copies of the vault, were checked - correct? 
• Do you still have the KPM Vault backup - it should be in C:\Users\USER\Documents\Kaspersky Password Manager\Backup {USER = your name}, unless you saved it in a different location? 
• Please proceed as follows:

1. Copy, move the KPM Vault backup to a USB or secure Cloud storage or both - temporarily. 
2. Make sure Windows Hidden files, is checked/ticked, refer: View hidden files and folders in Windows 
3. Create a System restore point.
4. Create a Full system back up, make sure all your important files are saved to offline storage. 
5. Create a Registry backup.
6. Change to Safe Mode.
7. Run Kavremover as ADMIN, with the nodetect switch, post a screen-print of *all* Kaspersky software Kavremover detects please? 
8. IF no Kaspersky software is detected, run Kavremover as ADMIN, without the switch, post a screen-print of *all* Kaspersky software Kavremover detects please? 
9. In Windows Explorer, search 21.6.7.351 - post a screen-print of the result please? 
10. In the System registry, search 21.6.7.351 - post a screen-print of the result please? 

Thank you?
Flood?+?

Edited November 9, 2022 by Flood and Flood's wife

[Davmacrat]

1 hour ago, Flood and Flood's wife said:

When KPM was uninstalled, the 3 options: Application settings, Vault, Backup copies of the vault, were checked - correct? 

Correct.

 

1 hour ago, Flood and Flood's wife said:

Do you still have the KPM Vault backup - it should be in C:\Users\USER\Documents\Kaspersky Password Manager\Backup {USER = your name}, unless you saved it in a different location? 

Yes.

1. Done.

2. Done

3. Done

4. Done

5 Done.

6. Done

7 & 8 Done. Cannot get screen Print in safe mode. Appears that Kaspersky's inventory of software is listed on selection going back to year dot. Both Kavremover apps present the same thing. Ran them in normal mode but only to the selection. Screen prints attached.

9. Nothing found in File Explorer. See Attached.

10. Several Items found in Registry. See Screen prints.

Right it's 4am here, been a long day, and I need to sleep.

Kindest regards

D.

 

[Flood and Flood's wife]

18 hours ago, Davmacrat said:

10. Several Items found in Registry. 

Hello @Davmacrat, 

Thank you for the information, we hope you had a restorative sleep? 

1. Change to Safe Mode. 
2. Manually select & remove Kaspersky Basic/Standard/Plus/Premium MR4-MR7 -> (see image)  capture/note any completion message
   Spoiler

   

3. Return to Normal Mode
4. Shutdown the Computer using Shutdown, not Restart, power on using the power button, login. 
5. In the System registry, search 21.6.7.351 - post a screen-print of the result please? 
6. Change to Safe Mode. 
7. Manually select & remove Kaspersky Secure Connection (see image) -> capture/note any completion message? 
   Spoiler

   

    

8. Go to: C:\Users\USER\AppData\Local\Temp & delete all files & folders || USER = your name 
9. Go to C:\Windows\Temp & delete all files & folders. 
10. Return to Normal Mode.
11. Shutdown the Computer using Shutdown, not Restart, power on using the power button, login. 
12. In the System registry, search KSDE21.7 ->  post a screen-print of the result please? 
13. In the System registry, search KSDE21.8 ->  post a screen-print of the result please? 
14. In Windows, Control Panel\All Control Panel Items\Programs and Features, search Kaspersky - post a screen-print of the result please? 
15. Create a System restore point.
16. Export the System registry. 

Any problems or issues or if you get stuck, please post back? 

Thank you?
Flood?+?

Edited November 9, 2022 by Flood and Flood's wife
added (see image) to 2 & 7

[Flood and Flood's wife]

Additional @Davmacrat, 

?Run & remove the Kaspersky software the ADMIN profile?

[Davmacrat]

Hi @Flood and Flood's wife

OK that's all done to the letter. Notes against serials below.

1. Done

2. Done. See attached Screenshots 001 to 003

3. Done

4. Done

5. Done. All searched entries found exactly the same as posts sent last night with one exception. An extra entry was found  as shown at Screenshot 004. All others were checked and found to be identical to last night's screenshots.

6. Done.

7. Done See attached Screengrabs 005 and 006

8. Done.

9. Done.

10. Done

11. Done.

12. Done. Same single entry as posted last night in every detail.

13: Done. Same single entry as posted last night in every detail.

14. Done. See Screenshot 007.

15. Done.

16. Done.

I'm off now. Early start tomorrow. Will be back in touch tomorrow. 2am here.

Thanks Flood.

Kindest regards

D.

[Davmacrat]

Hi @Flood and Flood's wife

hope you are well?

Do you have any further advice regarding this issue?

kindest regards 

D. 

[Flood and Flood's wife]

On 11/10/2022 at 12:50 PM, Davmacrat said:

Hi @Flood and Flood's wife

OK that's all done to the letter. Notes against serials below.

1. Done

2. Done. See attached Screenshots 001 to 003

3. Done

4. Done

5. Done. All searched entries found exactly the same as posts sent last night with one exception. An extra entry was found as shown at Screenshot 004. All others were checked and found to be identical to last night's screenshots.

6. Done.

7. Done See attached Screengrabs 005 and 006

8. Done.

9. Done.

10. Done

11. Done.

12. Done. Same single entry as posted last night in every detail.

13: Done. Same single entry as posted last night in every detail.

14. Done. See Screenshot 007.

15. Done.

16. Done.

 

1 hour ago, Davmacrat said:

Do you have any further advice regarding this issue?

Hello @Davmacrat, 

Thank you for the update & the information, apologies for the delay, we've sent you a message. 

Thank you?
Flood?+?

[Davmacrat]

Hi @Flood and Flood's wife

Done. Speak soon.