App Review Kaspersky Virus Removal Tool Fun Fact

[cruelsister]

Content source

https://youtu.be/ztDB3lkad38

Noting the difference between malware form and malware location

 

[upnorth]

Thanks for the share, but any particular reason why the previous very sound and fair setting advice from member @harlan4096 was not used/tested?

This specific settings in KVRT was after years of testing in the Malware Hub found to actually work, and one of the only second opinion scanner ( SOS ) that I ever seen being able to find and remedy actual memory infections. The rest was blind as a bat. About the note how " Extreme " amount of time this tool takes, seems a bit awkward as it shouldn't be a major factor/issue. This is after all a SOS tool and those should be used to investigate and hopefully become aware and learn of what happened. Otherwise I see very little point into use any SOS tool to begin with.

 

[ErzCrz]

Nice video. This file size seems to be an issue with a lot of products. Thankfully, most of the default deny solutions like CF prevent it from infecting the system in the first place

 

[cruelsister]

Thanks for the share, but any particular reason why the previous very sound and fair setting advice from member @harlan4096 was not used/tested?

Actually it was. Notice that K detected one of the malware files in Program Data but did not detect the other. So its not about the location but instead about what form the malware takes.

 

[harlan4096]

So, why the scanning only shows 1 / 3 tasks in the video? It should show 1 / 5 (3 default + 2 supposed added folders C:\ProgramData + C:\Users\)...

 

[B-boy/StyLe/]

Nice video. This file size seems to be an issue with a lot of products. Thankfully, most of the default deny solutions like CF prevent it from infecting the system in the first place

I am wondering if these settings will have some effects in terms of detection (but I am not sure if they exist in KVRT thought). Should check it out.

https://i.ibb.co/BT4p8Bs/Image-695.png

https://i.ibb.co/C9s8Rvj/Image-696.png

 

[harlan4096]

Those settings are for paid product, KVRT is just a second opinion scanner (without all those custom scan settings)

 

[B-boy/StyLe/]

Those settings are for paid product, KVRT is just a second opinion scanner (without all those custom scan settings)

I don't think so. These screenshots are from my Kaspersky Free?

 

[ZeroDay]

Thank you for the video CS.

 

[cruelsister]

So, why the scanning only shows 1 / 3 tasks in the video? It should show 1 / 5 (3 default + 2 supposed added folders C:\ProgramData + C:\Users\)...

I guess I should have been clear (for a change). You are correct that the Task number would have been 4. However if KVRT actually finds some malware (which it did), it will reboot and auto-start a verification scan which will scan ALL areas of the system. You can notice that time it took from the video- Start time of the initial scan was 3:29PM, Start time of the verification scan was 3:51PM, finish time was 5:29PM.

So as in this case the entire system was to be scanned anyway there was no need to add any special scan targets as it would be redundant (also further text explanations would make the video length not match that of the song).

 

[cruelsister]

I don't think so. These screenshots are from my Kaspersky Free?

These settings don't exist in KVRT, just in the real-time scanners, and nonetheless wouldn't aid in any way for this particular malware.

Also note that if K real time (paid or free) was being used, it would be superfluous to also use KVRT for a 2nd opinion as that databases are shared (actually the real time products would have more up to data definitions). If K real time is used perhaps a better 2nd opinion option would be preferred (next week for the final video).

 

[harlan4096]

Still, it should show 1/5, or when ended 5/5 adding the 2 folders I pointed in my previous post...

Adding those 2 folders, agree and probably there are some redundant folders, but not all, and in our testing in Malware Hub, We were able to verify that some risky folders are not scanned in default settings, and active malware in dynamic tests were missed to detect in default settings...

 

[B-boy/StyLe/]

Adding those 2 folders, agree and probably there are some redundant folders, but not all, and in our testing in Malware Hub, We were able to verify that some risky folders are not scanned in default settings, and active malware in dynamic tests were missed to detect in default settings...

Perhaps it's time for a new version after KVRT 2015 and KVRT 2020 maybe a new build should be released with some bug fixes. But seeing the numeration, probably they will release it next year.