Advice Request Kaspersky blocks "http://wpad.domain.name/wpad.dat"

[JB007]

Hello,
Today on one of my PCs Kaspersky Security Cloud starts blocking "http://wpad.domain.name/wpad.dat" ; the result is that I got many, many alarms
I'm wondering if it is a real threat or a FP ?



On VirusTotal, Kaspersky is the only "great" security software detecting this file...

VirusTotal

VirusTotal

www.virustotal.com

 

[Freud2004]

Yes, KIS block the page :




Kaspersky's intelligence portal don't give many clues why the site is blocked by Kaspersky:

 

[LeMinhThanh]

Kaspersky Support Forum

Kaspersky forum where Kaspersky product users and experts share tips, advice, help and solutions in your preferred language

community.kaspersky.com

 

[JB007]

Thanks for your help.
The Kaspersky tutorial is 4 months old: What to do if Kaspersky detects wpad | Kaspersky Community ; and my problem started only yesterday without any change on this PC ??? Now I got an alarm every 10 minutes !
The tutorial is very interesting but too complex for my basic knowledge.
Alas this problem is on my work PC and it is very problematic for me.
I think that the only solution for me is to uninstall KSC on this PC

 

[SeriousHoax]

Thanks for your help.
The Kaspersky tutorial is 4 months old: What to do if Kaspersky detects wpad | Kaspersky Community ; and my problem started only yesterday without any change on this PC ??? Now I got an alarm every 10 minutes !
The tutorial is very interesting but too complex for my basic knowledge.
Alas this problem is on my work PC and it is very problematic for me.
I think that the only solution for is to uninstall KSC on this PC

I agree that the guide here isn't helpful. Maybe Kaspersky shouldn't detect things like this if the product don't have an automated way to fix this. Looks like this is kind of a vulnerability on the OS or router (I'm confused). Kaspersky should give an option to ignore it like it does for things like its extension not installed, VPN not installed, update not installed etc instead of detecting it like a malware without giving any clue to the user.

 

[JB007]

The oldest thread in the Kaspersky community about this "wpad.dat" is 6 months old and I never got any alarm befor yesterday ???!!!

 

[Kongo]

Also blocked by NextDNS (OISD blocklist)

 

[Berny]

@JB007 Maybe you could contact your ISP who provided your Modem/Router and refer to the “DNS suffix” preset ?