KAV\KIS\KTS\KFA\KS\KSOS: 21.0.7.318 beta

[elquenunca]

in version 2019 I think I remember that the launch was in all languages at the same time and it was in the month of May I think

 

[harlan4096]

Yeah, but as I already said several times in this forum, probably and due to the W10 1903 delay, They had to deliver also Patch B, who is being delivered already but very slowly as I don't have it yet

 

[shmu26]

Screen-Shot of the rule

I had to restore a system image, because my legacy program connected to the internet and became disabled...
In application control, at the right end of the line, there is the network column. I set it to block, and it showed a red X. That is supposed to block internet, correct?

 

[harlan4096]

Yes: (x) Deny

Update: I have just tried to block Chrome in my KTS2021beta and it worked, Chrome could not access to InterNet... usually You have to close the application while creating the rule if it was running...

 

[shmu26]

I had to restore a system image, because my legacy program connected to the internet and became disabled...
In application control, at the right end of the line, there is the network column. I set it to block, and it showed a red X. That is supposed to block internet, correct?

I am having the exact same problem with KIS 20. In the screenshot you can see that Babylon is denied internet, but it is showing a high network traffic, and the program window is displaying results from Wikipedia, which is an online resource.

I made the rule, rebooted, waited a few minutes to make sure KIS was fully active, and then I opened Babylon.
The only explanation I have is that Babylon is inheriting the network setting of the Trusted category, to which it belongs, and this is overriding the specific deny rule.

The behavior is as follows: Babylon launches with no internet. Then after a minute it freezes. After a forced termination of the process, and relaunch, it gains network access. This seems to indicate that it is governed by two conflicting rules. It looks to me like a bug in Kaspersky HIPS.

Windows Firewall has no problem blocking Babylon.

 

[harlan4096]

@shmu26: do You get the same behavior/issue with other applications or only with Babylon?

 

[shmu26]

@shmu26: do You get the same behavior/issue with other applications or only with Babylon?

I didn't try other applications, so I don't know.

 

[harlan4096]

So this issue is in K2020 and also in K2021beta?

 

[shmu26]

So this issue is in K2020 and also in K2021beta?

right

 

[harlan4096]

Can you tell the installer of that Babylon, I will try to install and reproduce the issue, and collect traces to send a report to KL, thanks.

 

[shmu26]

Can you tell the installer of that Babylon, I will try to install and reproduce the issue, and collect traces to send a report to KL, thanks.

Here is the download link currently being offered:

Babylon Software Support Page

www.babylon-software.com

 

[harlan4096]

Thanks! FF blocked the download (malicious), I have to manually allow it

 

[shmu26]

Thanks! FF blocked the download (malicious), I have to manually allow it

Google Chrome, too, has decided that it is a malicious download, and blocks it, but I was able to download it in MS Edge, and it has a valid digital sig from the vendor. The link is from the official Babylon translation website, it is not third-party.

The file gets 2 hits on virustotal, that's not bad:

VirusTotal

VirusTotal

www.virustotal.com

 

[harlan4096]

@shmu26:

Hum... it seems I can't reproduce Your issue here (KTS2021beta)... check the rules I created:



The traffic in Babylon services/executables remains static, except that reflected there -> I ran a try to translate one or 2 words online without any blocking rule 1st...

After applying the rules, I constantly "Get to translate offline?..." and the traffic does not change in any Babylon service, I closed Babylon and re ran several times to repeat the test, the same result, no access to network

 

[shmu26]

@shmu26:

Hum... it seems I can't reproduce Your issue here (KTS2021beta)... check the rules I created:



The traffic in Babylon services/executables remains static, except that reflected there -> I ran a try to translate one or 2 words online without any blocking rule 1st...

After applying the rules, I constantly "Get to translate offline?..." and the traffic does not change in any Babylon service, I closed Babylon and re ran several times to repeat the test, the same result, no access to network

So it's working right for you. If you have any ideas what I am doing wrong, let me know...

 

[harlan4096]

Did you block the 3 networks as in my rule? also, did You block the access to all Babylon services in both groups in AC?

 

[shmu26]

Did you block the 3 networks as in my rule? also, did You block the access to all Babylon services in both groups in AC?

I did not block the 3 networks. I simply opened application control, and clicked on the network button at the right end of the line, setting it to block.

I did block all babyon services in both groups.

 

[harlan4096]

Try blocking the 3 networks

 

[shmu26]

Try blocking the 3 networks

Thanks. It looks like that fixed it. I don't understand why, but I think it worked... I am back on K21 now.

 

[ZeroDay]

Is the KIS 2021 Beta pretty stable? Well as stable as a Beta can be? I'm thinking about installing it and helping to find any bugs etc. Thanks for all the info you've provided in this thread @harlan4096