Yes, it's supposed to be the whitelisting default-deny module Kaspersky.
The problem is Kaspersky's whitelisting and ;the way that Application Control works.
Anyway, it is not an anti-executable.
Trusted Applications mode in Kaspersky
- Thread starter hamo
- Start date
Please provide comments and solutions that are helpful to the author of this topic.
- Status
The problem is Kaspersky's whitelisting and ;the way that Application Control works.
Anyway, it is not an anti-executable.
- Mar 30, 2014
- 468
64 bit but I check "Load rules for application from KSN (Kaspersky security network)
So applications move from group to another automatically by KSN .
Attachments
Interesting.
In the past that setting made no difference. Perhaps some kind of fix\improvement was added in V 2018.
- Mar 30, 2014
- 468
In fact I use this setting since V 2017, If you remember, my reply on your post in Wilders.
It would come as no surprise if Kaspersky eventually removes "Trust digitally signed programs" setting - because it causes problems for so many people that disable it. There are many, many complaints about that setting. For years.
- Jul 3, 2015
- 8,153
It makes a big difference what settings you have for "low restricted". My experience is that the programs will drift into "low restricted" (although I did not see this behavior with KIS 2018).
So if you kept "low restricted" at its default settings, your system will not get smashed. Practically anything can run at those default settings, they are pretty permissive.
"Practically anything can run at those default settings" is the reason that Kaspersky itself can be targeted and smashed pretty easily. After that, the malc0der can take over the entire system.
The Application Control policy module is full of serious bugs - and a typical user would never be aware of them.
- Sep 5, 2017
- 149
Is something interesting because it works as it should? That's in itself is interesting.
Yes, it is interesting due to things that no one on this forum, except for one other regular member here at MT and a handful of Kaspersky staff, know about.
- May 3, 2015
- 1,797
Hi @Lockdown.
Could you expand about these bugs a little or point to a thread in any forum we can read about them? As a Kaspersky user myself that made me quite worried.
No. It won't be discussed. The issue has been submitted.
- Jul 3, 2015
- 8,153
Guys, you have to take @Lockdown's comments in context. He is a pro, he can find the faults in anything, even in the best software. Give him a software, and he will give you a list of improvements to be made.
Last edited:
- Mar 30, 2014
- 468
I think the bug on 64 bit system may occurs for who made a big change in Kaspersky application setting ...
I do not made any change in advanced setting in application control setting.
KSN move some basic windows file from group to another automatically (see photo)
If any one made an advanced setting in Kaspersky application control ( like unknown program move to untrusted ...) windows file will move to untrusted and the system will die.
I do not made any change in advanced setting in application control setting.
KSN move some basic windows file from group to another automatically (see photo)
If any one made an advanced setting in Kaspersky application control ( like unknown program move to untrusted ...) windows file will move to untrusted and the system will die.
Attachments
- Mar 30, 2014
- 468
You and @harlan4096 are the only two that I know of for whom it works.
Two years ago Kaspersky U.S.A. said it is not a bug, but expected behavior. Moscow didn't say. So flip a coin.
Ask any user that has their entire Trusted Group moved to Untrusted and I think you will find that, universally, it is a WT... ? moment. Most would say: terrible bug or horrendous expected behavior.
- Mar 30, 2014
- 468
I hope it is fixed. I will have to try it at some point when I next probe Kaspersky.
- Jul 3, 2015
- 8,153
I never had my whole group moved from trusted to untrusted.
When I disabled trust sigs, I did see a recurring migration of some apps from trusted to low restricted. I didn't notice that happening anymore in KIS 2018.
When I disabled trust sigs, I did see a recurring migration of some apps from trusted to low restricted. I didn't notice that happening anymore in KIS 2018.
- Status
Similar threads
