Kaspersky KAV/KIS/KTS/KS 2018

Discussion in 'other anti-virus software' started by 3x0gR13N, Jan 31, 2017.

  1. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,174
    Location:
    Denmark
    I'm shocked by the lack of screenshots in this thread :D Would love to see if it looks any different compared to 2016/2017.
     
  2. xxJackxx

    xxJackxx Registered Member

    Joined:
    Oct 23, 2008
    Posts:
    8,623
    Location:
    USA
    It looks no different than 2017. There are a couple of extra settings in the settings screens, but otherwise nothing.
     
  3. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,174
    Location:
    Denmark
    Aww, well it's not too bad - I like how it looks now anyway so that's good. Thanks!
     
  4. shmu26

    shmu26 Registered Member

    Joined:
    Jul 9, 2015
    Posts:
    1,549
    Not sure if this question is specifically about KIS 2018, or just generally about Trusted Applications Mode:

    I put KIS 2018 in TAM, and tested the following unsigned file (details from VT):
    SHA256: 5e8fc46e30dac6470aae8c3689cdacec9078c6a6132c01f8cdf64820f4cfc56a
    File name: Patch 64 Bit.exe
    Detection ratio: 42 / 60
    Analysis date: 2017-05-31 09:20:40 UTC ( 18 hours, 25 minutes ago )

    This Macrium Reflect crack file is not detected by Kaspersky as malicious, but on the other hand, it is not on the KSN whitelist either, for obvious reasons.

    I tested it, and Kaspersky did not block it. It was categorized as "low restricted", and was able to perform its intended purpose, of "patching" Macrium Reflect.

    Why didn't TAM block it?
     
  5. Lockdown

    Lockdown Registered Member

    Joined:
    Oct 28, 2016
    Posts:
    772
    Location:
    Wilders Security
    KSN will list as "Unknown," but TAM will still allow. Could be deliberate rating in KSN or mis-rating (should be rated as malicious).

    One of those quirks in KIS that causes a lot of confusion.
     
  6. shmu26

    shmu26 Registered Member

    Joined:
    Jul 9, 2015
    Posts:
    1,549
    I deleted the rule from Application Control
    I disabled "load rules from applications from KSN"

    Then I ran the crack again, and I got the same results. So it seems that KSN is not the problem.
     
  7. 3x0gR13N

    3x0gR13N Registered Member

    Joined:
    May 1, 2008
    Posts:
    849
    The file appeared 9 months ago. Kaspersky usually leave grayware applications that they've analyzed in the Low restricted category. TAM is designed to block newly emerging threats that haven't been seen by KSN, not any application that's in Low restricted category.
    There's a local cache of KSN rules on your machine that's being used when you disable "Load rules from KSN", effectively meaning you've only disabled new data from KSN to be applied from that point.
     
  8. shmu26

    shmu26 Registered Member

    Joined:
    Jul 9, 2015
    Posts:
    1,549
    Thanks for explanation. That makes sense. It is in line with what @Lockdown said, too.
     
  9. harlan4096

    harlan4096 Registered Member

    Joined:
    May 6, 2008
    Posts:
    234
    Location:
    Almería (Spain)
    Also, I would like to add that Kaspersky usually (or rarely) does not add to their signatures cracks of user applications (as other avs firms do) ... unless They harm the system or using some malicious methods to do so...
     
  10. shmu26

    shmu26 Registered Member

    Joined:
    Jul 9, 2015
    Posts:
    1,549
    Indeed, this particular crack was not malicious.
     
  11. Lockdown

    Lockdown Registered Member

    Joined:
    Oct 28, 2016
    Posts:
    772
    Location:
    Wilders Security
    An object can be in KSN database and have an unexpected rating, no rating, rules can exist for it, etc.

    The borderline stuff - you learn from experience and asking others because sometimes Kaspersky makes exceptions without explanation. A file lookup does not always indicate the exception nor the basis for it.

    Play with Process Hacker and you will see it is listed as Unknown, but it will load with TAM enabled in the Low Restricted - because there are rules for it in KSN.

    Most users expect black-and-white so that they know what to expect and how things work - so the above creates a lot of confusion.
     
  12. xxJackxx

    xxJackxx Registered Member

    Joined:
    Oct 23, 2008
    Posts:
    8,623
    Location:
    USA
    Kaspersky and another suite I use that I won't name (since this is a Kaspersky thread) will only detect something that will actually harm your system. Some products detect any crack as malware. I do not support the idea of cracking software, but even more than that I do not support misrepresenting files as dangerous to my system when they are not. Points to them for being honest and doing the job I am paying them to do.
     
  13. Trooper

    Trooper Registered Member

    Joined:
    Jan 26, 2005
    Posts:
    5,507
    Have there been any recent updates to KIS 2018 by chance? Thanks.
     
  14. Trooper

    Trooper Registered Member

    Joined:
    Jan 26, 2005
    Posts:
    5,507
    Does anyone know if you can combine licenses with KIS?
     
  15. shmu26

    shmu26 Registered Member

    Joined:
    Jul 9, 2015
    Posts:
    1,549
    Not sure exactly what you meant by combining licenses, but if you have, for instance, a license for KIS 2017, it will be good for KIS 2016, 2017, 2018, and 2019. The rule of thumb is that you can go back one, and go forward two.
     
  16. Trooper

    Trooper Registered Member

    Joined:
    Jan 26, 2005
    Posts:
    5,507
    I have two licences for KIS. One has never been activated and the other has some time left on it. Was wondering if Kasperksy would combine or add the never activated one into my existing one. Like what Norton does.
     
  17. ABaird3

    ABaird3 Registered Member

    Joined:
    Jan 27, 2016
    Posts:
    101
    In my experience, it will let the old licence run out, then enable the new licence, so you don't lose any duration. So you can put the new one in, and it won't initiate until the current one expires.
     
  18. xxJackxx

    xxJackxx Registered Member

    Joined:
    Oct 23, 2008
    Posts:
    8,623
    Location:
    USA
    Patch 'b' for 2018 has been released today. They usually don't roll it out to everyone at once, so you may or may not see it today.
     
  19. Trooper

    Trooper Registered Member

    Joined:
    Jan 26, 2005
    Posts:
    5,507
    Thanks man will check it out when I get home. :thumb:
     
  20. JohnBurns

    JohnBurns Registered Member

    Joined:
    Jul 4, 2004
    Posts:
    778
    Location:
    Oklahoma City
    How long does it usually take? Is it automatic or do I have to manually download it?
     
  21. Trooper

    Trooper Registered Member

    Joined:
    Jan 26, 2005
    Posts:
    5,507
    Try running an update and then reboot. I did not get it today either. Like Jack said, you may or may not see it today.
     
  22. xxJackxx

    xxJackxx Registered Member

    Joined:
    Oct 23, 2008
    Posts:
    8,623
    Location:
    USA
    I only got it on 1 PC out of 2. Keep an eye on the reports for updates. I think it was about 7 MB where the others were much smaller. Don't bother to reboot unless you see something about that size.
     
  23. Trooper

    Trooper Registered Member

    Joined:
    Jan 26, 2005
    Posts:
    5,507
    Still did not get it today.
     
  24. shmu26

    shmu26 Registered Member

    Joined:
    Jul 9, 2015
    Posts:
    1,549
    It depends a lot where you live. The Kaspersky servers don't dish it out to the whole world at the same time. I did not get it either, although my country usually gets pretty early.
     
  25. shadek

    shadek Registered Member

    Joined:
    Feb 26, 2008
    Posts:
    2,538
    Location:
    Sweden
    When is 2018 rolled out to the 2017 users via automatic update?
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.