Kingsoft Antivirus 2012 [Cloud]

[KingsoftSecurity]

Originally Posted by jdd58

I took the time to try KAV yesterday and I have to say I'm impressed so far.

I do have one problem. It is detecting the switches on my Google Chrome shortcut as a suspicious startup. That in itself is no problem but there is no way to permanently ignore or trust the detection.

Could you try to trust the shortcut like shown below: http://www.wilderssecurity.com/showp...&postcount=138

[Brocke]

when a file gets trusted does it get sent to kingsoft to be looked at and add into your database as safe?

[KingsoftSecurity]

Originally Posted by Habakuck

Kingsoft, how do you handle signed files if they are executed?

We'll check the signature first, if it's from a trusted vendor, like MS, it will not be blocked.

[Brocke]

Does KAV auto update the program? when can we see a fix for bugs? like the GUI alert bugs

[jdd58]

Originally Posted by KingsoftSecurity

Could you try to trust the shortcut like shown below: http://www.wilderssecurity.com/showp...&postcount=138

That did not work, but I think I found the problem.

I had a command line switch added to the Google Chrome shortcut, ( --disk-cache-dir="R:/" --disk-cache-size=524200000 --no-referrers). Chrome overwrote the shortcut during the last update I think, and KAV found the registry discrepancy. I allowed KAV to clean the entry, I added the command-line switch back to the Chrome shortcut and all is fine.

I hope that makes sense and thanks.

[KingsoftSecurity]

Originally Posted by DBone

Kingsoft: As a USA user, I have a quick question. Since KAV is a Chinese product how does its protection compare in what the average Chinese user might encounter compared to the average USA user? I would have to guess that what malware is currently popular in China is not in the US and viceversa.............I know it's the "World Wide Web", but I as an average user never navigate to a Chinese web site. I hope I explained my question thoroughly enough.

Yes, the virus environment is different between China and USA. But what we can know is that, the virus, which is used to damage user's computer, is not that popular now. Because virus producers cannot profit from this kind of viruses. So, the target would be clear, trojan, backdoor, spyware and online phishing which can profit more. And then, the techniques they used can be centralized.

I agree that we're new in USA, we need more efforts to learn, to analyze, and exchange virus samples with other security vendors like Kaspersky, BD, Panda and many others.

[KingsoftSecurity]

Originally Posted by jdd58

That did not work, but I think I found the problem.

I had a command line switch added to the Google Chrome shortcut, ( --disk-cache-dir="R:/" --disk-cache-size=524200000 --no-referrers). Chrome overwrote the shortcut during the last update I think, and KAV found the registry discrepancy. I allowed KAV to clean the entry, I added the command-line switch back to the Chrome shortcut and all is fine.

I hope that makes sense and thanks.

Yes, I got it, incorrect shortcut association and registry discrepancy. When Chrome update next time, please remember to add it again.

[KingsoftSecurity]

Originally Posted by Brocke

Does KAV auto update the program? when can we see a fix for bugs? like the GUI alert bugs

Yes, it does. Build-in updater updates sp3.5 beta to sp3.5 final, many GUI alert bugs fixed. Other new update will also works like this.

[Amit]

Originally Posted by KingsoftSecurity

Yes, the virus environment is different between China and USA. But what we can know is that, the virus, which is used to damage user's computer, is not that popular now. Because virus producers cannot profit from this kind of viruses. So, the target would be clear, trojan, backdoor, spyware and online phishing which can profit more. And then, the techniques they used can be centralized.

I agree completely.

[DBone]

Originally Posted by KingsoftSecurity

Yes, the virus environment is different between China and USA. But what we can know is that, the virus, which is used to damage user's computer, is not that popular now. Because virus producers cannot profit from this kind of viruses. So, the target would be clear, trojan, backdoor, spyware and online phishing which can profit more. And then, the techniques they used can be centralized.

I agree that we're new in USA, we need more efforts to learn, to analyze, and exchange virus samples with other security vendors like Kaspersky, BD, Panda and many others.

Makes sense, thanks for the reply!

[moonriver]

Originally Posted by narenbisht

...2. It would be good if there is an option for manual/auto action for realtime protection, wot say?...

I'll second that!

[Brocke]

I read in the kingsoft forums that kingsoft is going to be adding some options from their PC Doctor,

What options are you thinking of adding maybe? I really dont need or what a AV that cleans my computer. only security features.

[gery]

i installed due to a notification i had from the PCDOCTOR and it went really well smooth and clean till the first scan. It falsely alarmed me about 2 pretty clean files which i double checked and uploaded to Virus Total and were clean .
Uninstalled it right away
One question though...... where and how to send these detections as FP-s?

[clocks]

Originally Posted by Brocke

I read in the kingsoft forums that kingsoft is going to be adding some options from their PC Doctor,

What options are you thinking of adding maybe? I really dont need or what a AV that cleans my computer. only security features.

I agree. I would like to see them keep KAV as lean as possible. If I want the PC Doc feature, I will install that program separately. Or make a third program, which combines the two into a suite.

[taleblou]

It will be good to add some features of pc doctors to the antivirus. Like optimizing startup ms windows update and cleaning of junks. Also a firewall addition to it would be great.

[Esse]

What about if you could choose to enable certain features from PC Doctor during install of the AV?
Then it will be up to the users if they want to use it lean or with extras of their choice?
I for one would miss the floating bar (in PC Doctor) showing my cpu and net usage. Very useful and easy to see what is using up resources.

/E

[KingsoftSecurity]

Originally Posted by gery

i installed due to a notification i had from the PCDOCTOR and it went really well smooth and clean till the first scan. It falsely alarmed me about 2 pretty clean files which i double checked and uploaded to Virus Total and were clean .
Uninstalled it right away
One question though...... where and how to send these detections as FP-s?

You can post the fps on our forum: http://www.kingsoftsecurity.com/forum/viewforum.php?f=2, or email me with the information. My email is huangruimin(at)kingsoft(dot)com

[KingsoftSecurity]

There are some members posted a question about anti-hacker on our forum, maybe others here also have that question.

Anti-Hacker is different with firewall, which do not need complicated configuration.

Anti-Hacker has its rules to filter the outgoing connections. The rules doesn't simply block outgoing data from known/unknown apps. It focus on blocking the remote control from hackers.

There are several ways hackers can remotely control your computer. For example, 1. use your system exploits/vulnerabilities after scanning ports . 2. crack your password. 3. use a trojan client to connect remotely, and a lot more. Anti-Hacker does scan some known exploits/vulnerabilities, check the weak password, and also, block the apps which want to start a remote connection and match the rules. This is not the same as a firewall. Anti-Hacker is port based, protocol based, package based and IP based.

[RejZoR]

How can i install Chrome extension at a later time? As far as i know there is some kind of KAV extension that goes into Chrome, but since i've installed Chrome later (after KAV was already installed) i don't seem to get it on my extensions list...

[KingsoftSecurity]

There is no need to use extensions to enable web defense for Chrome now, so we've removed the extension installation.

[RejZoR]

Oh, so everything works straight away? I did see green popups yesterday while i was downloading Adobe Flash installers (which i never got before). And i wasn't even using Chrome yesterday (wasn't even installed). Is this what you're describing?

[selina1]

Originally Posted by Brocke

When i run a scan with KAV I get these 3 items

[2012-07-07 23:51:12] Manual Scan Virus:"C:\PROGRA~1\Yahoo!\MESSEN~1\YahooMessenger.exe" -quiet Messenger (Yahoo!) Unhandled
[2012-07-07 23:51:12] Manual Scan Virus:C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot WinPatrol Unhandled
[2012-07-07 23:51:12] Manual Scan Virus:%windir%\system32\conime.exe Conime Unhandled

now the last one if you report it as a FP using KAV the program crashes and im not sure why

but those are FP. the last one is a Microsoft file.

@Brocke
Does the issues still repro?

[KingsoftSecurity]

Originally Posted by RejZoR

Oh, so everything works straight away? I did see green popups yesterday while i was downloading Adobe Flash installers (which i never got before). And i wasn't even using Chrome yesterday (wasn't even installed). Is this what you're describing?

Yes, that extention is used for anti-phishing, but he feature we can not provided now.

[RejZoR]

Some user reported that his task manager was quarantined on WinXP SP3 when he tried opening it.

[Brocke]

Originally Posted by selina1

@Brocke
Does the issues still repro?

those top two programs are startup entries, which i dont have installed so i cant send the file

the other is a windows files on my windows 7 pro 32bit laptop.