KSC Not honoring exclusions.

[UEFI Rootkit]

Kaspersky Security Cloud will absolutely, positively NOT honor the exclusion of "*HackTool.Win32.RouterScan.a". UDS,HEUR, and VHO have been added for both the executable file and its accompanying "librouter.dll" file. To clarify the object exclusions:

UDS:HackTool.Win32.RouterScan.a (RouterScan.exe)

HEUR:HackTool.Win32.RouterScan.gen (RouterScan.exe)

HEUR:HackTool.Win32.RouterScan.gen (librouter.dll)

HEUR:HackTool.Win32.Convagent.gen (librouter.dll)

UDS:HackTool.Win32.RouterScan.a (librouter.dll)

VHO:HackTool.Win32.Convagent.gen (librouter.dll)

All of these have been added to the threats & exclusions list, but KSC continues to block execution, which forces me to disable it temporarily in order to run the software.

::EDIT::

I have also added the application and its DLL to the "Trust Applications" list with no effect.

 

Edited February 4, 2023 by UEFI Rootkit

[UEFI Rootkit]

Forget it. I uninstalled it. System runs noticeably faster without it anyway. Also disabled another piece of trash (Windows Defender) completely through group policy, giving me an even further boost and peace of mind. I don't know what I was thinking allowing these kinds of applications to run on my machines.

[Berny]

@UEFI Rootkit Welcome.

Can you please check your Kaspersky reports and post a screenshot from the alert, Kaspersky is always blocking malicious objects …