AVP do database update automaticlly --> crash suddenly.
Crash and restart itself. KIS convert to KFA and report License problem and ask for database updating.
Create a folder in C:\new folder
right click it and select 'scan for virus.'
avp crash and reload it self.
scan can be done successful.
I am not sure that the reason for crash maybe is the same as #2342.
klhk.sys and klgse.sys located in C:\Program Files (x86)\Common Files\Kaspersky Lab folder is not signed, only use Kaspersky self signed certificate. Just link @xzz123 said, The driver loaded failed because of secure boot.
InstallDriversDeferred (38f4:2f60) [16:54:48:055]: A file copy 'C:\Program Files (x86)\Common Files\Kaspersky Lab\klgse\klgse_x64\klgse.sys'->'C:\Windows\system32\DRIVERS\klgse.sys' operation has started.
InstallDriversDeferred (38f4:2f60) [16:54:48:057]: A file copying 'C:\Program Files (x86)\Common Files\Kaspersky Lab\klgse\klgse_x64\klgse.sys'->'C:\Windows\system32\DRIVERS\klgse.sys' operation has ended.
InstallDriversDeferred (38f4:2f60) [16:54:48:058]: A subqueue 0 has ended.
InstallDriversDeferred (38f4:2f60) [16:54:48:059]: The queue has finished committing.
InstallDriversDeferred (38f4:2f60) [16:54:48:060]: StartService: 'klgse'
InstallDriversDeferred (38f4:2f60) [16:54:48:069]: Failed to execute driver package 'klgse.sys_x64'. Failed to start service: klgse Error 0x80070241.
InstallDriversDeferred (38f4:2860) [16:54:48:069]: Failed to start service: klgse Error 0x80070241.
MSI (s) (64!60) [16:56:15:416]: 应用程序: 卡巴斯基安全软件技术预览--错误27300。 安装驱动程序 klgse.sys_x64 时出错。错误码: -2147024319。<<29100>>
InstallDriversDeferred (38f4:2860) [16:56:15:417]: InstallDriversDeferred: finished. Return value 1603.
@wesly-zhang, can you please check it with other antiviruses ? avast, nod, panda etc...
Sure. Sorry for my delay. Some other its drivers are also been detected by microsoft.
2345Base.sys - Microsoft - PUA:Win32/2345Cn | SHA-256 3d9e93488d7ae760de63a13c4eba132b02236261e5512d7ee4a1ee7e7c761569
2345ExProtect.sys - Microsoft - PUA:Win32/2345Cn | SHA-256 66735892e6742efa89eb93363f06e220bf3c87626607f49b1908fba4ae6ecc22
2345Iron.sy - Microsoft - PUA:Win32/2345Cn | SHA-256 8d61e864702700ffa26e0621757fbee1f97359571a7710652f3dee9a3b992574
2345Misc.sys - Microsoft - PUA:Win32/2345Cn | SHA-256 c662e56c3dc2e9751bf0cff4c1bca61bd1c857de4317ef6da56b4c0b1d668737
2345NetMgr.sys - Microsoft - PUA:Win32/2345Cn | SHA-256 633e31ec8cd87c9bdbc563b9d9676c4b73eeffd9daa69fe84a1c5f2fce14d1fb
2345Prot.sys - Microsoft - PUA:Win32/2345Cn | SHA-256 987df613a7639cb64c823826b74832c5931f6ff02a7e1ff418040aa29389a42c
Now, Only Microsoft Defender detect its driver files as a adware. This is the result.
But its main executable file: 2345SafeTray.exe | SHA-256 92a26f8364f1b9ce1501941ce8b435cece7e40d6ce8131b1bf5a54a8e4a422e1 has been 8 AV solutions detected as adware.
ESET-NOD32 A Variant Of Win32/2345.H Potentially Unwanted
K7AntiVirus Adware ( 0055ce2c1 )
K7GW Adware ( 0055ce2c1 )
Sophos AV Generic PUA KH (PUA)
I use ESENT NOD32 Online scanner ( enable detect potential unwanted and unsafe applications ) to check all 2345 product folder. Here is the result:
Scan log: https://cloud.qainfo.ru/s/GKOLefB4xB9hhD7
I also use panda cloud cleaner and avast free antivirus. There is no any PUA detection, Maybe they don't know 2345 product.
Thank you, I'll analyze it.
Now, I have a new post which has been flagged as spam by Akisment.com. What the hell? This post is in https://eap.kaspersky.com/topic/2001/need-some-help-with-2345safecenter.
My download speed is only 3.2KB / s. Can you upload to https://send.firefox.com/ or https://cowtransfer.com/ for downloading in China?
How about Mirror - 1 ？The download speed of this source is OK from my side "China telecom in Shanghai".
Can also say, do other antivirus consider 2345 as malware or adware ?
I think Adware is more relevant. For this program, it has not reached the level of malicious programs.
You can ask your chinese colleagues about the evaluation of 2345 company.
Looks like your connection to Beta Testing was lost, please wait while we try to reconnect.