Reply to thread

Message

<blockquote data-quote="RoboMan" data-source="post: 968447" data-attributes="member: 53544">Never test malware on your live system. If you want to test a product&#039;s capabilities, set up a virtual machine and install the product there. Be sure to configure it conrrectly to not let anything escape. Search on Youtube &quot;how to set up a Windows VM&quot;.As for your question, just apply a &quot;block action&quot;, then head to the path where the file is located (Downloads folder, as I can see), and delete it. The firewall&#039;s message regarding an outgoing connection is consequence of the execution of the aforementioned file. As long as it didn&#039;t fully execute it, no child process should have been created and no system interaction should&#039;ve started. Deleting the file should do it.Also, if this is real unsigned malware, and you made it this far, it means you haven&#039;t correctly configured Kaspersky&#039;s Application Control. You might wanna check that out, there are several threads on that module.</blockquote>

[QUOTE="RoboMan, post: 968447, member: 53544"] Never test malware on your live system. If you want to test a product's capabilities, set up a virtual machine and install the product there. Be sure to configure it conrrectly to not let anything escape. Search on Youtube "how to set up a Windows VM". As for your question, just apply a "block action", then head to the path where the file is located (Downloads folder, as I can see), and delete it. The firewall's message regarding an outgoing connection is consequence of the execution of the aforementioned file. As long as it didn't fully execute it, no child process should have been created and no system interaction should've started. Deleting the file should do it. Also, if this is real unsigned malware, and you made it this far, it means you haven't correctly configured Kaspersky's Application Control. You might wanna check that out, there are several threads on that module. [/QUOTE]

Verification