Skip to content
kaspersky beta
  • Register

  • Login

  • Categories
  • KForum
  • KClub
  • kaspersky
  1. Home
  2. Kaspersky Beta Testing – English User Community
  3. Kaspersky Home Products
  4. Kaspersky
  5. Archive
  6. 2020
  7. [2020] File Scan (ODS/OAS, qScan/vScan, Quarantine)
  8. Exceptions are buggy

Exceptions are buggy

Scheduled Pinned Locked Moved [2020] File Scan (ODS/OAS, qScan/vScan, Quarantine)
7 Posts 2 Posters 5.0k Views 3 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • H Offline
    H Offline
    Helios_07
    wrote on last edited by Jarvis
    #1

    <p><strong>Windows 10 64-bit, Version 1809</strong></p>
    <p><strong>KIS 20.0.0.713 de app + drv verifier disabled</strong></p>
    <p><strong>Reproduction steps:</strong></p>
    <p><span>I noticed that exceptions are a little buggy. I use the program Process Hacker 2 (https://processhacker.sourceforge.io/), that gets detected by KIS as not a virus...</span></p>
    <p><span>Starting with .713 KIS keeps detecting Process hacker files, even when i created  exceptions for those files.</span></p>
    <p><span>Also some other files get detected with exceptions configured, like an eicar.com file when i try to open that.</span></p>
    <p><span>But many times exceptions work well, so i am not sure which part is buggy.</span></p>
    <p><span>If you need traces tell me from which situation and i try to provide them.</span><strong></strong></p>
    <p><span></span></p>
    <p><span>EDIT: I added some traces where KIS detects an eicar file ,i added to exceptions, as soon i try to run it .</span></p>

    PC:
    Windows 10 64-bit Version 20H2
    Build 19042.985
    Intel Core i10-10900K @ 3,7GHZ
    32,0 GB-RAM
    NVIDIA Geforce RTX 2080 TI 11GB
    KIS 21.4.8.292
    KPM 9.0.2.15298(o)
    Forum Signature from 25.May.2021

    1 Reply Last reply
    0
    • D Offline
      D Offline
      Dmitriy.Pisarets
      Kaspersky Lab
      wrote on last edited by
      #2

      <p>@helios_07, hello! </p>
      <p>As I can understand  </p>
      <ul>
      <li>you run check first time </li>
      <li><span>Process Hacker files are founded and marked as a threat</span></li>
      <li><span>you add Process Hacker files to exceptions</span></li>
      <li><span>run check for second time</span></li>
      <li><span>Process Hacker files are founded and marked as a threat for second time ? </span><span></span></li>
      </ul>
      <p><span>I had installed Process Hacker from your link, then ran check, add to exceptions and open this program. It opens normally. While new checks  KTS doesn't mark Process Hacker as a threat. </span></p>
      <p><span></span></p>
      <p> </p>

      H 2 Replies Last reply
      0
      • D Dmitriy.Pisarets

        <p>@helios_07, hello! </p>
        <p>As I can understand  </p>
        <ul>
        <li>you run check first time </li>
        <li><span>Process Hacker files are founded and marked as a threat</span></li>
        <li><span>you add Process Hacker files to exceptions</span></li>
        <li><span>run check for second time</span></li>
        <li><span>Process Hacker files are founded and marked as a threat for second time ? </span><span></span></li>
        </ul>
        <p><span>I had installed Process Hacker from your link, then ran check, add to exceptions and open this program. It opens normally. While new checks  KTS doesn't mark Process Hacker as a threat. </span></p>
        <p><span></span></p>
        <p> </p>

        H Offline
        H Offline
        Helios_07
        wrote on last edited by
        #3

        <p>@dmitriy-pisarets</p>
        <p>Basicly as you described. Process Hacker 2 gets detected everytime, i never had this problem during the Beta.</p>
        <p>Also works with an eicar.com file like i wrote, but with many other example Malware the exception works fine and KIS wont detect them if i added them to exceptions.</p>

        PC:
        Windows 10 64-bit Version 20H2
        Build 19042.985
        Intel Core i10-10900K @ 3,7GHZ
        32,0 GB-RAM
        NVIDIA Geforce RTX 2080 TI 11GB
        KIS 21.4.8.292
        KPM 9.0.2.15298(o)
        Forum Signature from 25.May.2021

        1 Reply Last reply
        0
        • D Dmitriy.Pisarets

          <p>@helios_07, hello! </p>
          <p>As I can understand  </p>
          <ul>
          <li>you run check first time </li>
          <li><span>Process Hacker files are founded and marked as a threat</span></li>
          <li><span>you add Process Hacker files to exceptions</span></li>
          <li><span>run check for second time</span></li>
          <li><span>Process Hacker files are founded and marked as a threat for second time ? </span><span></span></li>
          </ul>
          <p><span>I had installed Process Hacker from your link, then ran check, add to exceptions and open this program. It opens normally. While new checks  KTS doesn't mark Process Hacker as a threat. </span></p>
          <p><span></span></p>
          <p> </p>

          H Offline
          H Offline
          Helios_07
          wrote on last edited by
          #4

          <p>@dmitriy-pisarets</p>
          <p>Those are traces where i scanned the folder where process hacker is installed/where all the files that get detected are in, with exceptions for all those files.</p>
          <p>https://cloud.qainfo.ru/s/1Wwctg8HFIFLFyT</p>

          PC:
          Windows 10 64-bit Version 20H2
          Build 19042.985
          Intel Core i10-10900K @ 3,7GHZ
          32,0 GB-RAM
          NVIDIA Geforce RTX 2080 TI 11GB
          KIS 21.4.8.292
          KPM 9.0.2.15298(o)
          Forum Signature from 25.May.2021

          1 Reply Last reply
          0
          • D Offline
            D Offline
            Dmitriy.Pisarets
            Kaspersky Lab
            wrote on last edited by
            #5

            <p>@helios_07, hello!</p>
            <p>Developers say they cannot find in last traces moment when you had added <span>Process Hacker to exceptions.   Can you try  reproduce it from very begging (including adding files to exceptions) with "full"  traces? </span></p>

            H 1 Reply Last reply
            0
            • D Dmitriy.Pisarets

              <p>@helios_07, hello!</p>
              <p>Developers say they cannot find in last traces moment when you had added <span>Process Hacker to exceptions.   Can you try  reproduce it from very begging (including adding files to exceptions) with "full"  traces? </span></p>

              H Offline
              H Offline
              Helios_07
              wrote on last edited by
              #6

              <p>@dmitriy-pisarets</p>
              <p>Scan of the Process Hacker folder without exceptions to detect the files, added to exceptions then scanned again, ignored them, scanned again, added to exceptins again.</p>
              <p>https://cloud.qainfo.ru/s/jmQzxbnIv7S3cOo</p>

              PC:
              Windows 10 64-bit Version 20H2
              Build 19042.985
              Intel Core i10-10900K @ 3,7GHZ
              32,0 GB-RAM
              NVIDIA Geforce RTX 2080 TI 11GB
              KIS 21.4.8.292
              KPM 9.0.2.15298(o)
              Forum Signature from 25.May.2021

              D 1 Reply Last reply
              0
              • H Helios_07

                <p>@dmitriy-pisarets</p>
                <p>Scan of the Process Hacker folder without exceptions to detect the files, added to exceptions then scanned again, ignored them, scanned again, added to exceptins again.</p>
                <p>https://cloud.qainfo.ru/s/jmQzxbnIv7S3cOo</p>

                D Offline
                D Offline
                Dmitriy.Pisarets
                Kaspersky Lab
                wrote on last edited by
                #7

                <p>@helios_07, thank you!</p>

                1 Reply Last reply
                0

                Hello! It looks like you're interested in this conversation, but you don't have an account yet.

                Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

                With your input, this post could be even better 💗

                Register Login
                Reply
                • Reply as topic
                Log in to reply
                • Oldest to Newest
                • Newest to Oldest
                • Most Votes


                © 2026 АО «Лаборатория Касперского»

                • First post
                  Last post
                0
                • Categories
                • KForum
                • KClub
                • kaspersky