Advice Request Unknown system files found when trying to enable Trusted Application mode

[Al-Faqir]

Hello! I wanted to try Kaspersky's Trusted Application mode on one of my devices. After the requirements scan finished, I got a result referring to some "unknow system files".
All files seem to be scripts. Is this familiar, and should I allow these files and enable the Trusted Application mode? Thank you

 

[509322]

Hello! I wanted to try Kaspersky's Trusted Application mode on one of my devices. After the requirements scan finished, I got a result referring to some "unknow system files".
All files seem to be scripts. Is this familiar, and should I allow these files and enable the Trusted Application mode? Thank you

View attachment 197883

Those are Edge scripts. They are valid files.

Is your system properly querying KSN database ? Did you check networking ?

I just had KIS 2019 on a W10 system and enabled TAM and got 0 files identified as unknown.

The Kaspersky expert here is @harlan4096 .

 

[harlan4096]

As @Lockdown said check Your network connection and KSN settings, all those files are seem "legit scripts" (AMD driver for Edge browser) so You may tick them all as trusted before enabling TAM...

 

[509322]

Check out pubprn.vbs... it is a digitally signed script. The certificate is from Microsoft and the signature is valid.

I know about this file because someone told me that scripts cannot be signed. I replied "Oh really ? ... you sure about that ? Look at this... pubprn.vbs"

 

[Al-Faqir]

Those are Edge scripts. They are valid files.

Is your system properly querying KSN database ? Did you check networking ?

I just had KIS 2019 on a W10 system and enabled TAM and got 0 files identified as unknown.

The Kaspersky expert here is @harlan4096 .

As @Lockdown said check Your network connection and KSN settings, all those files are seem "legit scripts" (AMD driver for Edge browser) so You may tick them all as trusted before enabling TAM...

Check out pubprn.vbs... it is a digitally signed script. The certificate is from Microsoft and the signature is valid.

I know about this file because someone told me that scripts cannot be signed. I replied "Oh really ? ... you sure about that ? Look at this... pubprn.vbs"

Thank you very much @Lockdown and @harlan4096. KSN status always shows as “synchronized 10 hours ago!” I’m noticing a delay in browsers too!

 

[harlan4096]

Also KSN does not know all the files in the world, that's impossible but 10 hours ago probably is too long

 

[yitworths]

KSN status always shows as “synchronized 10 hours ago!”

it's not normal... try to ping some ksn servers if possible, to check whether those are blocked or not. if those are not blocked then you should re-install kaspersky.

 

[yitworths]

I just had KIS 2019 on a W10 system and enabled TAM and got 0 files identified as unknown.

did you run the full scan for TAM?

 

[Al-Faqir]

it's not normal... try to ping some ksn servers if possible, to check whether those are blocked or not. if those are not blocked then you should re-install kaspersky.

I’ll do once I get home. Thanks

 

[motox781]

Every-time I enable TAM, I get unknowns. I wouldn't worry about it unless the file looks out of place.

 

[509322]

did you run the full scan for TAM?

Yes

 

[yitworths]

Yes

I'm much more surprised by your result than Al-Faqir . As, TAM always finds something which still not in KSN databases. It's not about just known or unknown it's also about the reputation of that file. Hmmm....that's really interesting if KSN allows all files,scripts on your pc.

 

[harlan4096]

KSN 10 hours synchronizing is too long, usually 2 ~ 3 minutes... an issue with Your InterNet provider?

TAM always finds something which still not in KSN databases

There are 2 ways to enable TAM: fast one (only scan Windows system files), and slow one (scan ALL FILES/APPLICATIONS, even those who are in external devices plugged)...

 

[Al-Faqir]

@harlan4096 @yitworths Everything is working



I am just trying TAM because I am planning to installing KIS on the family's PC.

 

[Al-Faqir]

The only file that was placed on low-restricted group

 

[harlan4096]

Digital signature missing... but be careful: TAM under offline circunstances may move legit/trusted applications to restricted groups...