Skip to content
kaspersky beta

beta

  • Register

  • Login

  • Categories
  • KForum
  • KClub
  1. Home
  2. ENGLISH USER FORUM
  3. Patches
  4. Archive
  5. Patch B for KAVKISKTSKFA 2019 / KS 2.0 / VPN 3.0 / KSOS 6.0 / KFP 6.5
  6. Not-A-Virus_Should_Be_Alert_and_auto_processed_by_OAS

Not-A-Virus_Should_Be_Alert_and_auto_processed_by_OAS

Scheduled Pinned Locked Moved Patch B for KAVKISKTSKFA 2019 / KS 2.0 / VPN 3.0 / KSOS 6.0 / KFP 6.5
9 Posts 3 Posters 9.5k Views 4 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • xzz123X Offline
    xzz123X Offline
    xzz123
    Moderators
    wrote on last edited by Jarvis
    #1

    <p><strong>Reproduction steps:</strong></p>
    <p><span></span>1 use avp 2019 default settings: Perform actions auto and delete adwares.</p>
    <p>2 visit an Adware</p>
    <p></p>
    <p><strong>Actual result:</strong></p>
    <p><span></span>Avp do not alert me the detection and do not process the Adware, as the result the user is suffering from unwanted Ads and banners.</p>
    <p><strong>Expected Result:</strong></p>
    <p><span></span>Avp pop up balloon to notify user that an adware was detected. User will take actions before he really use the bad program.</p>
    <p></p>
    <p>Traces and a screen record video are provided. https://cloud.qainfo.ru/s/4pPIaZcasuItOxH</p>
    <p>Please, change your unwise method.</p>
    <p></p>
    <p>It is <span style="text-decoration: underline;"><strong>default settings</strong></span> that malicious tools and adwares are deteled!!!!!!!!!!!</p>
    <p>Why somehow in latest patch for 2018 and build 2019, avp totally ignore Adwares???????</p>
    <p>I consider a big prograss in 2019 that there is  default settings to detect and fight adwares, but now such settings become useless. Without consulting your users' opinion, and without letting your users knowing it, such changes are made. </p>
    <p></p>
    <p>Also contact tech tech support to express my complain about this matter.</p>
    <p>INC000009199654</p>
    <p>INC000009186101</p>

    1 Reply Last reply
    0
    • Wesly.ZhangW Offline
      Wesly.ZhangW Offline
      Wesly.Zhang
      Moderators
      wrote on last edited by
      #2

      <p>Yes, At least, AVP needs to prompt the user to detect pup programs, whether they are automatically processed or not.</p>

      Go! The world ! 💪 Our CD8/CD4 T lymphocytes are on their way to destroy the new tubular virus.😠
      If I don't reply your post here, Please send a PM in KL Community forum or post a E-Mail ( wesly.zhang@qq.com ) to notice me.

      xzz123X 1 Reply Last reply
      0
      • Wesly.ZhangW Wesly.Zhang

        <p>Yes, At least, AVP needs to prompt the user to detect pup programs, whether they are automatically processed or not.</p>

        xzz123X Offline
        xzz123X Offline
        xzz123
        Moderators
        wrote on last edited by
        #3

        <p>@wesly-zhang</p>
        <p>That's it!</p>
        <p>The worst situation is that users should be notified anyway! There should be balloon pop up.</p>
        <p>For so long time, kaspersky is blamed for not tough enough fighting Potentially unwanted/Dangerous programs.</p>
        <p>If avp ignore Not A Virus type, than what is the purpose of <strong>Delete malicious tools,Adwares</strong>,......being default checked?????</p>
        <p>If I manual choose OAS settings as Actions on threat detection:disinfect, if not possible-delete, Avp will have another reason to automaticly process the object.</p>

        1 Reply Last reply
        0
        • JarvisJ Offline
          JarvisJ Offline
          Jarvis
          wrote on last edited by
          #4

          Attach a file to which there is no detect.

          xzz123X 1 Reply Last reply
          0
          • JarvisJ Jarvis

            Attach a file to which there is no detect.

            xzz123X Offline
            xzz123X Offline
            xzz123
            Moderators
            wrote on last edited by xzz123
            #5

            <p>@jarvis</p>
            <p>Hello</p>
            <p>I managed restored all avp settings and reConfiguration.</p>
            <p>Rught now those are my findings:</p>
            <p>I have 10 Not A Virus type of malwares, part of them are automaticly processed and being deleted, those samples has the very similarity of having exact detection mask as <strong>Not A Virus</strong> & <strong>Adware</strong>.</p>
            <p>Other samples however, with masks only Not A Virus, are not processed, and even, as I already indicated in the previous post, There is NO alert balloon pop up.</p>
            <p>Here are smaples and detection logs: <a href="https://cloud.qainfo.ru/s/i2cH1rW1jBZtpSU" target="_blank" rel="noopener">https://cloud.qainfo.ru/s/i2cH1rW1jBZtpSU</a></p>
            <p></p>
            <p>What I expected:</p>
            <p>All detetcions with mask Not A Virus, should be notified to user. Avp should alert and prompt actions about the event, regardless whether the objects are auto processed(deleted) or not.</p>
            <p>If possible, sicne the <strong>Delete malicious tools,Adwares</strong><span>,......being default checked, I believe all Not A Virus should be auto processed.</span></p>

            1 Reply Last reply
            0
            • xzz123X Offline
              xzz123X Offline
              xzz123
              Moderators
              wrote on last edited by
              #6

              <p>oh~I forgot</p>
              <p>The password of the sample is <strong>infected</strong></p>

              1 Reply Last reply
              0
              • xzz123X Offline
                xzz123X Offline
                xzz123
                Moderators
                wrote on last edited by
                #7

                <p>Hello</p>
                <p><span>Please Let me to clearly state my expectations agian about this issue.</span></p>
                <p><span>That is:</span></p>
                <p><span>Whether a detected object is automaticly processed or not, Kaspersky must ALWAYS pop up alert balloon to notify user.  Now I know only Not A Virus & Adware are deleted, other kind of Not A Virus detected but there is no message pop up to notify user about the event.</span></p>
                <p><span>Also, Once I click the alert message ' There are unprocessed objects', Kapserksy's notification center is opened and I am able to deal with those Not A Virus.</span></p>

                1 Reply Last reply
                0
                • JarvisJ Offline
                  JarvisJ Offline
                  Jarvis
                  wrote on last edited by
                  #8

                  As Designed

                  1 Reply Last reply
                  0
                  • JarvisJ Offline
                    JarvisJ Offline
                    Jarvis
                    wrote on last edited by
                    #9

                    In the product requirements (in the table with balloons and associated SR) is not described.

                    Adware and Riskware with the importance of "low" - there should not be a balloon.

                    Therefore - by designed.

                    Proposals for implementation, and the corresponding new requirements, are no higher than 3rd priority.

                    1 Reply Last reply
                    0
                    Reply
                    • Reply as topic
                    Log in to reply
                    • Oldest to Newest
                    • Newest to Oldest
                    • Most Votes


                    • First post
                      Last post
                    0
                    • Categories
                    • KForum
                    • KClub