Not-A-Virus_Should_Be_Alert_and_auto_processed_by_OAS

[xzz123]

<p><strong>Reproduction steps:</strong></p>
<p><span></span>1 use avp 2019 default settings: Perform actions auto and delete adwares.</p>
<p>2 visit an Adware</p>
<p></p>
<p><strong>Actual result:</strong></p>
<p><span></span>Avp do not alert me the detection and do not process the Adware, as the result the user is suffering from unwanted Ads and banners.</p>
<p><strong>Expected Result:</strong></p>
<p><span></span>Avp pop up balloon to notify user that an adware was detected. User will take actions before he really use the bad program.</p>
<p></p>
<p>Traces and a screen record video are provided. https://cloud.qainfo.ru/s/4pPIaZcasuItOxH</p>
<p>Please, change your unwise method.</p>
<p></p>
<p>It is <span style="text-decoration: underline;"><strong>default settings</strong></span> that malicious tools and adwares are deteled!!!!!!!!!!!</p>
<p>Why somehow in latest patch for 2018 and build 2019, avp totally ignore Adwares???????</p>
<p>I consider a big prograss in 2019 that there is  default settings to detect and fight adwares, but now such settings become useless. Without consulting your users' opinion, and without letting your users knowing it, such changes are made. </p>
<p></p>
<p>Also contact tech tech support to express my complain about this matter.</p>
<p>INC000009199654</p>
<p>INC000009186101</p>

[Wesly.Zhang]

<p>Yes, At least, AVP needs to prompt the user to detect pup programs, whether they are automatically processed or not.</p>

[xzz123]

<p>@wesly-zhang</p>
<p>That's it!</p>
<p>The worst situation is that users should be notified anyway! There should be balloon pop up.</p>
<p>For so long time, kaspersky is blamed for not tough enough fighting Potentially unwanted/Dangerous programs.</p>
<p>If avp ignore Not A Virus type, than what is the purpose of <strong>Delete malicious tools,Adwares</strong>,......being default checked?????</p>
<p>If I manual choose OAS settings as Actions on threat detection:disinfect, if not possible-delete, Avp will have another reason to automaticly process the object.</p>

[Jarvis]

Attach a file to which there is no detect.

[xzz123]

<p>@jarvis</p>
<p>Hello</p>
<p>I managed restored all avp settings and reConfiguration.</p>
<p>Rught now those are my findings:</p>
<p>I have 10 Not A Virus type of malwares, part of them are automaticly processed and being deleted, those samples has the very similarity of having exact detection mask as <strong>Not A Virus</strong> & <strong>Adware</strong>.</p>
<p>Other samples however, with masks only Not A Virus, are not processed, and even, as I already indicated in the previous post, There is NO alert balloon pop up.</p>
<p>Here are smaples and detection logs: <a href="https://cloud.qainfo.ru/s/i2cH1rW1jBZtpSU" target="_blank" rel="noopener">https://cloud.qainfo.ru/s/i2cH1rW1jBZtpSU</a></p>
<p></p>
<p>What I expected:</p>
<p>All detetcions with mask Not A Virus, should be notified to user. Avp should alert and prompt actions about the event, regardless whether the objects are auto processed(deleted) or not.</p>
<p>If possible, sicne the <strong>Delete malicious tools,Adwares</strong><span>,......being default checked, I believe all Not A Virus should be auto processed.</span></p>

[xzz123]

<p>oh~I forgot</p>
<p>The password of the sample is <strong>infected</strong></p>

[xzz123]

<p>Hello</p>
<p><span>Please Let me to clearly state my expectations agian about this issue.</span></p>
<p><span>That is:</span></p>
<p><span>Whether a detected object is automaticly processed or not, Kaspersky must ALWAYS pop up alert balloon to notify user.  Now I know only Not A Virus & Adware are deleted, other kind of Not A Virus detected but there is no message pop up to notify user about the event.</span></p>
<p><span>Also, Once I click the alert message ' There are unprocessed objects', Kapserksy's notification center is opened and I am able to deal with those Not A Virus.</span></p>

[Jarvis]

As Designed

[Jarvis]

In the product requirements (in the table with balloons and associated SR) is not described.

Adware and Riskware with the importance of "low" - there should not be a balloon.

Therefore - by designed.

Proposals for implementation, and the corresponding new requirements, are no higher than 3rd priority.