New Update Kaspersky\VPN\KSOS 21.18 & KES 12.6 betas

harlan4096

Super Moderator
Thread author
Verified
Staff Member
Malware Hunter
Well-known
Apr 28, 2015
8,948

 

jamey910111

Level 2
Jun 7, 2024
97
i have updated the beta and firefox vvpn is fixed here too - but an issue i have been having is not fixed: when an application is added to a restricted group by kaspersky, i see the on-screen notifcation, but I don't see it get added to the report..so essentially..i don't know what program it was, any suggestions?
 

jamey910111

Level 2
Jun 7, 2024
97
As a test I enabled every single thing for the Save in Local Report - then I ran one of the affected programs again, I receive on-screen message that it was added to restricted group, but I still see no mention of anythign added to the restricted group in the reports.

Also one follow-up, even though I add this application to the trusted group manually myself, Kaspersky over-rides it and adds it to restricted group after I executed it again - I Remember you saying this was an outstanding bug, correct?
 
Last edited:
  • Like
Reactions: harlan4096

harlan4096

Super Moderator
Thread author
Verified
Staff Member
Malware Hunter
Well-known
Apr 28, 2015
8,948
Having this setting enabled:

1719056297875.png


It should appear in Reports -> Intrusion Prevention:

1719056418816.png
 

jamey910111

Level 2
Jun 7, 2024
97
I tested with current 21.17, but maybe a bug with beta 🤔

i had this issue with 21.17 just prior to updating to 21.18 beta yesterday....any final/other advice?

Also - whitelisting the app (i.e. adding it to trusted group) fails cause kasperskpy adds it back to restricted group - this is also a bug, correct?
 
  • Like
Reactions: harlan4096

jamey910111

Level 2
Jun 7, 2024
97
Settings -> Manage Settings

To be honest the situation is even worse now. I reset. Then after re-setting I enabled every single notification both on screen and for the report page.

I then even hardened settings further to get even more programs to get added to the restricted group.

Guess what now I don't even receive the on-screen notifcations for intrusion prevention/added to restricted group (nor do I see it in the report page).

It's not that I don't get any notifcations on-screen, I get these two when my computer boots up now (after I restart - "Task started" / and I get quiet a bit of "self-defense blocked access to protected resources" - but I don't get the "added to restricted group" on-screen notification that I used to before resettings configs . again to be clear I enabled every single ons-creen and report page in the Interface settigns after having done the reset.

Any further ideas?
 
  • Wow
Reactions: harlan4096

jamey910111

Level 2
Jun 7, 2024
97
Did You export the previous config? re-install?

I can confirm that a 'clean' install of kaspersky has resolved this issue and i hope it stays this way. Thank you four your help.
One follow up: After white-listing (i.e. manually putting the app that kapserksy adds to restricted to TRUSTED), kaspersky then adds the app(s) back to restricted once I re-launch apps - this is a bug, correct? not an expected behavior?
 
  • Like
Reactions: harlan4096

jamey910111

Level 2
Jun 7, 2024
97
Hum 🤔 weird...

No ok, maybe I should make myself clearer.

I have maunally created two rules. These two manually created rules:

#1 GENERAL rule - add all unknown application to Hard restricted group. Kaserpsky uses this rule to add said application to restricted group <-- This is expected/correct.

#2 Specific App - I have whitelisted an unknown app (set level to Trusted) - yet Kaspersky seems to be using Rule # 1 as a precedence over Rule # 2 (I think for this app it should ignore Rule #1 and apply rule #2 though right?)
 
  • Like
Reactions: harlan4096

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top