Reproduction steps:

AVP do database update automaticlly --> crash suddenly.

Actual result:

Crash and restart itself. KIS convert to KFA and report License problem and ask for database updating.

Expected Result:

No crash.

Reproduction steps:

Create a folder in C:\new folder

right click it and select 'scan for virus.'

avp crash and reload it self.

Actual result:

avp crash

Expected Result:

scan can be done successful.

I am not sure that the reason for crash maybe is the same as #2342.

Congratulations!

Hi,

klhk.sys and klgse.sys located in C:\Program Files (x86)\Common Files\Kaspersky Lab folder is not signed, only use Kaspersky self signed certificate. Just link @xzz123 said, The driver loaded failed because of secure boot.

InstallDriversDeferred (38f4:2f60) [16:54:48:055]: A file copy 'C:\Program Files (x86)\Common Files\Kaspersky Lab\klgse\klgse_x64\klgse.sys'->'C:\Windows\system32\DRIVERS\klgse.sys' operation has started.

InstallDriversDeferred (38f4:2f60) [16:54:48:057]: A file copying 'C:\Program Files (x86)\Common Files\Kaspersky Lab\klgse\klgse_x64\klgse.sys'->'C:\Windows\system32\DRIVERS\klgse.sys' operation has ended.

InstallDriversDeferred (38f4:2f60) [16:54:48:058]: A subqueue 0 has ended.

InstallDriversDeferred (38f4:2f60) [16:54:48:059]: The queue has finished committing.

InstallDriversDeferred (38f4:2f60) [16:54:48:060]: StartService: 'klgse'

InstallDriversDeferred (38f4:2f60) [16:54:48:069]: Failed to execute driver package 'klgse.sys_x64'. Failed to start service: klgse Error 0x80070241.

InstallDriversDeferred (38f4:2860) [16:54:48:069]: Failed to start service: klgse Error 0x80070241.

MSI (s) (64!60) [16:56:15:416]: 应用程序: 卡巴斯基安全软件技术预览--错误27300。 安装驱动程序 klgse.sys_x64 时出错。错误码: -2147024319。<<29100>>

InstallDriversDeferred (38f4:2860) [16:56:15:417]: InstallDriversDeferred: finished. Return value 1603.

The download speed is the same as 56K moden from two mirror site. 

Small small speed.

Long Long time.

Let me shock.

Let me cry......

@ilya-zadonsky said in What's my post going on？:

Thank you, I'll analyze it.

I have solved the problem now. 

Let it go...

@dmitriy-pisarets said in Need some help with 2345SafeCenter:

@wesly-zhang, can you please check it with other antiviruses ? avast, nod, panda etc...

Hi,

Sure. Sorry for my delay. Some other its drivers are also been detected by microsoft.

2345Base.sys - Microsoft - PUA:Win32/2345Cn | SHA-256 3d9e93488d7ae760de63a13c4eba132b02236261e5512d7ee4a1ee7e7c761569

2345ExProtect.sys - Microsoft - PUA:Win32/2345Cn | SHA-256 66735892e6742efa89eb93363f06e220bf3c87626607f49b1908fba4ae6ecc22

2345Iron.sy - Microsoft - PUA:Win32/2345Cn | SHA-256 8d61e864702700ffa26e0621757fbee1f97359571a7710652f3dee9a3b992574

2345Misc.sys - Microsoft - PUA:Win32/2345Cn | SHA-256 c662e56c3dc2e9751bf0cff4c1bca61bd1c857de4317ef6da56b4c0b1d668737

2345NetMgr.sys - Microsoft - PUA:Win32/2345Cn | SHA-256 633e31ec8cd87c9bdbc563b9d9676c4b73eeffd9daa69fe84a1c5f2fce14d1fb

2345Prot.sys - Microsoft - PUA:Win32/2345Cn | SHA-256 987df613a7639cb64c823826b74832c5931f6ff02a7e1ff418040aa29389a42c

Now, Only Microsoft Defender detect its driver files as a adware. This is the result.

But its main executable file: 2345SafeTray.exe | SHA-256 92a26f8364f1b9ce1501941ce8b435cece7e40d6ce8131b1bf5a54a8e4a422e1 has been 8 AV solutions detected as adware.

Cylance Unsafe

Cyren W32/Trojan.LVBB-6338

ESET-NOD32 A Variant Of Win32/2345.H Potentially Unwanted

Fortinet Riskware/2345

K7AntiVirus Adware ( 0055ce2c1 )

K7GW Adware ( 0055ce2c1 )

Microsoft PUA:Win32/2345Cn

Sophos AV Generic PUA KH (PUA)

I use ESENT NOD32 Online scanner ( enable detect potential unwanted and unsafe applications ) to check all 2345 product folder. Here is the result:

Scan log: https://cloud.qainfo.ru/s/GKOLefB4xB9hhD7

I also use panda cloud cleaner and avast free antivirus. There is no any PUA detection, Maybe they don't know 2345 product.

@ilya-zadonsky said in What's my post going on？:

Thank you, I'll analyze it.

Now, I have a new post which has been flagged as spam by Akisment.com. What the hell? This post is in https://eap.kaspersky.com/topic/2001/need-some-help-with-2345safecenter.

@huang1111 said in KAV\\KIS\\KTS\\KFA\\KS\\KSOS: 21\.0\.37\.1270:

My download speed is only 3.2KB / s. Can you upload to https://send.firefox.com/ or https://cowtransfer.com/ for downloading in China?

Hello,

How about Mirror - 1 ？The download speed of this source is OK from my side "China telecom in Shanghai".

@dmitriy-pisarets said in Need some help with 2345SafeCenter:

Can also say, do other antivirus consider 2345 as malware or adware ?

I think Adware is more relevant. For this program, it has not reached the level of malicious programs.

You can ask your chinese colleagues about the evaluation of 2345 company.