Jump to content

Suspicious activity has been blocked: Read memory of other process. But they are Windows process: WMI Host and Gaming Services. False positive?


FabioQuadros
 Share

Go to solution Solved by Flood and Flood's wife,

Recommended Posts

  • Solution
Suspicious activity has been blocked: Read memory of other process.But they are Windows process: WMI Host and Gaming Services.
Hello FabioQuadros, Welcome!
  1. Was a "Protected" browser, & or SafeMoney browser active at the time the events were logged?
-- Kaspersky application logs "Suspicious action was blocked" events, for normal system processes when SafeMoney/Protected browser is active. According to the Kaspersky Lab Technical Experts, this "known" issue, is not an issue, it is "by design"... (imo), this specific event should be documented, many folks have been concerned upon finding it in the Kaspersky application reports (see my attached report) 15.09.2019 11.21.36 Suspicious action was blocked WMI Provider Host Action: Read memory from other processes Application: WMI Provider Host Application path: C:\Windows\System32\wbem\WmiPrvSE.exe Time: 15/09/2019 11:21 AM ---
  1. To check/test, clear Kaspersky application reports, open a Protected/SafeMoney browser, recheck reports.
If "Suspicious action was blocked" events are logged, outside of the above parameters, please post back? Thank you:pray_tone3:.
Link to comment
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
 Share



×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.