Skip to content
kaspersky beta

beta

  • Register

  • Login

  • Categories
  • KForum
  • KClub
  1. Home
  2. ENGLISH USER FORUM
  3. Home
  4. Kaspersky
  5. Archive
  6. 2021 MR7
  7. Application Control (HIPS, SW, Firewall, IDS, TAM)
  8. Clicking Ignore after discovering risky behavior has no effect.

Clicking Ignore after discovering risky behavior has no effect.

Scheduled Pinned Locked Moved Application Control (HIPS, SW, Firewall, IDS, TAM)
5 Posts 3 Posters 1.6k Views 3 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • huang1111H Offline
    huang1111H Offline
    huang1111
    [2021] Diamond BT
    wrote on last edited by Jarvis
    #1

    <p><strong>Reproduction steps:</strong></p>
    <p><span>The reproduced video and trace are placed in the network disk.</span></p>
    <p><strong>Actual result:</strong></p>
    <p><span>The "Ignore" button doesn't work.</span></p>
    <p><strong>Expected Result:</strong></p>
    <p><span>The "Ignore" button works.</span></p>

    1 Reply Last reply
    0
    • huang1111H Offline
      huang1111H Offline
      huang1111
      [2021] Diamond BT
      wrote on last edited by
      #2

      <p>Behavior description:</p>
      <p>This is a game accelerator, but it will modify the hosts file to set the resolution of some specific addresses to fixed IPs, and then redirect these IPs through the game accelerator. It is modified in a special way. It will first rename the hosts file to hostvk. Then add a hosts file, this behavior will be recognized as dangerous behavior by Kaspersky.</p>
      <p><span style="text-decoration: underline;"><em>This behavior can be ignored by clicking the "Ignore" button in 21MR3, which should be a bug in the Beta version.</em></span></p>

      1 Reply Last reply
      0
      • JarvisJ Offline
        JarvisJ Offline
        Jarvis
        wrote on last edited by
        #3

        Hello! text in notification center will be shown till alert (at the right-bottom corner will be closed)

        1 Reply Last reply
        0
        • D Offline
          D Offline
          Dmitriy.Pisarets
          Kaspersky Lab
          wrote on last edited by
          #4

          <p>Hello! Let me explain. It's particularity of our "curing" process: when a threat is founded, two parallel process start: 1) AV starts to "cure" threat, it locks file and has highest priority 2) notification is shown in notification center. Its a "backup" action to solve minor threats (like an official apps, which can be used to harm you), or if first auto-AV process has failed. Our release-state app should do both process "almost simultaneously", so user won't see a notification and can click several times button without effect. </p>
          <p></p>

          huang1111H 1 Reply Last reply
          0
          • D Dmitriy.Pisarets

            <p>Hello! Let me explain. It's particularity of our "curing" process: when a threat is founded, two parallel process start: 1) AV starts to "cure" threat, it locks file and has highest priority 2) notification is shown in notification center. Its a "backup" action to solve minor threats (like an official apps, which can be used to harm you), or if first auto-AV process has failed. Our release-state app should do both process "almost simultaneously", so user won't see a notification and can click several times button without effect. </p>
            <p></p>

            huang1111H Offline
            huang1111H Offline
            huang1111
            [2021] Diamond BT
            wrote on last edited by
            #5

            <p>@dmitriy-pisarets</p>
            <p>I think the choice of how to handle this threat should be left to the user, as it could be a false positive by the program.</p>

            1 Reply Last reply
            0
            Reply
            • Reply as topic
            Log in to reply
            • Oldest to Newest
            • Newest to Oldest
            • Most Votes


            • First post
              Last post
            0
            • Categories
            • KForum
            • KClub