KIS frequent warning

Discussion in 'other firewalls' started by aigle, Apr 19, 2006.

Thread Status:
Not open for further replies.
  1. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    I installed trial of Kaspersky internet security few days back. I am getting one popup very often even browsing safe sites. I never got this type of pop up before with NIS, ZAP and Kerio. Is something lacking in my OS patching etc.
     

    Attached Files:

    • k.JPG
      k.JPG
      File size:
      19.9 KB
      Views:
      415
  2. SSK

    SSK Registered Member

    Joined:
    Nov 28, 2004
    Posts:
    976
    Location:
    Amsterdam
    No this is the Protection against network attacks from KAV 5 telling you that it detected something knocking on the door :D
     
  3. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan

    Ya, I know that but I mean to say I am getting frequent notification that I am attacked using Win.LSAAS.exoploit. So what is this exploit and is it not patched my OS update?
    Also no other firewalls( Kerio, NIS, ZA Pro) gave me so frquent notifications. This pop up is very common. I wonder so many attacks! Or it may be a false positive. I am using dial up with proxy server.

    Another pop up I just now received.
     

    Attached Files:

    • k2.JPG
      k2.JPG
      File size:
      21.3 KB
      Views:
      414
    Last edited: Apr 19, 2006
  4. Eldar

    Eldar Registered Member

    Joined:
    Jul 12, 2004
    Posts:
    2,126
    Location:
    Vilvoorde (Belgium)
    No need to wonder about it, I get those several times a day.
    It's normal you get attacks from outside, normally mine come from China. :D

    Previous topics on the subject can be found here, here, here and here.
     
  5. SSK

    SSK Registered Member

    Joined:
    Nov 28, 2004
    Posts:
    976
    Location:
    Amsterdam
    Hey, most of mine come from China too! It must be an anti-Wilders Security Forum complot to overtake our PC's :D
     
  6. Mem

    Mem Registered Member

    Joined:
    Mar 7, 2005
    Posts:
    292
    You can always turn off the notifications and it will silently protect you. That's what the other firewalls are doing (you have to enable these types of notifications on them).
     
  7. Alphalutra1

    Alphalutra1 Registered Member

    Joined:
    Dec 17, 2005
    Posts:
    1,160
    Location:
    127.0.0.0/255.0.0.0
    It is possible that the KAV internet protection built into the av is filtering your connection before your firewall, which accounts for it sending the warning message and stopping it before Kerio.

    However, I believe that it is recommended to disable this component of KAV 5 if you have another firewall, no?

    Alphalutra1
     
  8. Baldrick

    Baldrick Registered Member

    Joined:
    May 11, 2002
    Posts:
    2,301
    Location:
    South Wales, UK
    Aigle

    Sorry to state the obvious but you have not installed KIS (Kaspersky Internet Security) but most probably KPSS (Kaspersky Personal Security Suite) which is about I believe to be superceded by KIS 6.0 which I understand is due for release in mid May.

    You may want to uninstall KPSS and try the KIS beta. I am running it and it is IMHO superb.:D
     
  9. Alphalutra1

    Alphalutra1 Registered Member

    Joined:
    Dec 17, 2005
    Posts:
    1,160
    Location:
    127.0.0.0/255.0.0.0
    No, he is running KAV 5 which has a built in network attack module similar to avast's network attack. It is a type of IDS(intrusion detection system).

    Alphalutra1
     
  10. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    I used Kerio inthe past but at the moment only Kaspersky is there-- infact different Rollback snapshots!
     
  11. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Sorry, you are right, I was mistaken.
    I will try beta later but what is new in it? When it will be final?
    Thanks.
     
  12. Baldrick

    Baldrick Registered Member

    Joined:
    May 11, 2002
    Posts:
    2,301
    Location:
    South Wales, UK
    Sorry for the delay in replying. The main new features are the very tight integration of all the elements, ie, Anti Hacker, KAV, Anti Spam, etc. when compared to KPSS, and the Proactive Defense module.

    The 299 build (available now as a technical release) will be the commercial release version which, I understand, will be officially available for sale on 15th May. The next version after that, or MP1, is already on beta release.

    Have included the 'What's new' from the release notes, and hope that helps?:

    "1. Anti-virus features
    - Network traffic scanning (SMTP, POP3, IMAP4, NNTP)
    - Scan new and modified files option
    - iSwift(TM) and iChecker(TM) virus scan acceleration technologies
    - Streaming scan technology (Web Anti-Virus)
    - Advanced Disinfection technology (treats active infections and
    eliminates virus traces in the system)
    - Update size significantly reduced
    - Rescue disk creation tools
    - New virus scan option (Scan Critical Areas task)
    - Plug-ins for Microsoft Internet Explorer, Microsoft Outlook
    Express, Microsoft Office Outlook, and The Bat!
    - E-mail attachment filter
    - Optimized feature for postponing scans of frequently used files
    and archives
    2. Proactive Defense
    - Application activity analysis (detects undiscovered threats by
    their behavior)
    - System rollback feature for after virus attacks
    - Anti-Rootkit technology (Anti-Rootkit)
    - Registry Guard with preinstalled and updatable database
    - Application Integrity Control
    3. Anti-Spy
    - Anti-Phishing module
    - Anti-Dialer module
    - Anti-Popup module
    - Anti-Banner module
    4. Anti-Hacker
    - Stateful Packet Inspection
    - Preinstalled rule sets for known network applications (>250)
    - Templates for various network application types
    - A schedule can be created for every rule
    - Rules can be created for applications started with certain
    command line parameters
    - Security zones (LAN, trusted network, Internet)
    - Protection from network attacks, updates for attack signatures
    - Network activity monitoring
    5. Anti-Spam
    - iBayes(TM) self-teaching spam detection algorithm
    - GSG technology (image recognition)
    - PDB technology (header recognition)
    - Advanced filters (allowed/blocked users, keywords, background
    colored text, hidden elements, etc.) Weighting system.
    - Mail Dispatcher (detects spam on your mail server before
    downloading it)
    - SMTP, POP3, IMAP4, NNTP protocol support
    - Plugins for MS Outlook and The Bat!
    6. Advanced options
    - Component selection options during installation
    - Flexible password protection
    - Improved self-defense
    - Setup Wizard
    - Options for managing protection globally or by individual
    component
    - Option to exclude files from scans by mask, verdict, or a
    combination of questions, trusted applications
    - Enhanced compound file processing settings
    - Export/import settings options
    - Tooltips
    - Options for sorting, grouping, and searching in reports and lists of
    rules
    - Flexible notification settings (sounds, e-mail notifications, etc.)"

    Baldrick:D
     
  13. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Thanks for info. I will sure try it. Can u give a link to download page.
    Any security product must be strong enough against antispyware also and I did not find much emphasis on it in this info.
    Decrease in update size is good as I was alreading feeling it as an issue( minor though) on dial up. Reg Guard is good but I don,t know how easy/ difficult it can eb for beginnesr like me.
    Anyhow I will give it a try
    Thanks.
     
  14. Don Pelotas

    Don Pelotas Registered Member

    Joined:
    Jun 29, 2004
    Posts:
    2,257
    You can download the technical release here. Adware/spyware is already in the bases. :)
     

    Attached Files:

    • 1.png
      1.png
      File size:
      28.6 KB
      Views:
      165
  15. Baldrick

    Baldrick Registered Member

    Joined:
    May 11, 2002
    Posts:
    2,301
    Location:
    South Wales, UK
    KAV, the antivirus component, has always been very strong on spyware/malware detection even when compared to some of the specific applications out there. If in doubt you could try reviewing this topic at the Kasperky Labs Forum; use the following link to access:

    http://forum.kaspersky.com/index.php?showforum=16).

    The Registry Guard feature is rather good but you should not need to get involved with it or any of the other default setting as they are set at a pretty optimal level IMHO. The only setting that I would recommend changing from the 'basic' settings is in ANti Hacker that should be set to 'Training' mode.....but that can be done in the Settings option immediately after the installation has completed.

    In terms of a download link use the following:

    ftp://downloads1.kaspersky-labs.com/beta/kis6.0/

    and then select the directory that matches the language that you require. The trial activitation codes (that run until 15th May) can also be picked up from the text file available via the above link or you can select a 30 day trial by making the relevant selection during the install.

    Hope that helps?


    Baldrick:D
     
Thread Status:
Not open for further replies.