Welcome, Guest. Please login or register.
May 23, 13, 02:53 AM

Login with username, password and session length
Gallery Pic
Sorry, you do not have permission to view pictures!
Todays Calendar
Birthdays:
There are no birthdays today.

Events:
There are no events today.
Members
Total Members: 80
Latest: garythegardener
Stats
Total Posts: 93079
Total Topics: 9517
Online Today: 11
Online Ever: 127
(Nov 02, 12, 06:30 AM)
Users Online
Users: 0
Guests: 6
Total: 6
adverts
RoboForm: Learn more...
Strimmer
Secunia
Recent
[Yesterday at 06:22 PM]

by Lyn
[Yesterday at 12:25 PM]

[Yesterday at 10:01 AM]

[Yesterday at 08:41 AM]

[Yesterday at 07:35 AM]

by Babs
[May 21, 13, 06:14 PM]

[May 21, 13, 05:49 PM]

[May 21, 13, 04:07 PM]

by Babs
[May 20, 13, 04:30 PM]

[May 20, 13, 11:44 AM]
Well Bogled
Baron 67
Derek 35
Yvonne 31
Welcome To Our Local





Pages: [1]   Go Down
  Print  
Author Topic: Kaspersky in a logic-loop...  (Read 664 times)
0 Members and 1 Guest are viewing this topic.
Richard
Landlord
***

Bogle Points: 0
Offline Offline

Posts: 47776


Let it snow :-)


« on: Jul 14, 12, 08:06 AM »

Have you met this one before, Old Spikey?

A few days Kaspersky quarantined a file for me - given the provenance of the file this came as no surprise, despite the fact it had been sitting in unused cold-storage for many months having been passed as clear at the time... as new things are discovered etc.

This morning Kaspersky popped up to inform me that the file in quarantine was not infected, offering to restore it to it's original location - again not unusual when a false-positive is discovered. I did so.

As soon as I did, another Kaspersky pop-up - suspicious file moved to quarantine... the same file it had just advised me could come out of quarantine.

"принять решение и придерживаться его" as a somewhat baffled Englishman might say with the assistance of Google...
Logged

Your other host, Genial Host...      richard@our-local.co.uk

ಇದನ್ನು ಫಕಿಂಗ್ ಕ್ವಿಟ್ Or something like that.
Derek
Being a nuisance
Landlord
***

Bogle Points: 35
Offline Offline

Gender: Male
Posts: 12310


The old git who sits in the corner moaning


WWW
« Reply #1 on: Jul 14, 12, 08:19 AM »

Kaspersky has a "scan quarantine" setting that sends files back to lab for checking by an analyst

the behaviour analysis element of KIS is what is detecting the suspicious file in its original location
what you neeed to do is add that file to the ignore list or the loop will continue


It is a problem and the behaviour module is prone to lots of false positives but it is a very handy module to catch 0 day malware or behaviour that is likely to cause problems
Logged

Old Spikey
Microsoft MVP/Windows - Security
For help with spyware or hijackers thespykiller

Richard
Landlord
***

Bogle Points: 0
Offline Offline

Posts: 47776


Let it snow :-)


« Reply #2 on: Jul 14, 12, 10:09 AM »


what you neeed to do is add that file to the ignore list or the loop will continue


I'll do that, thank you Smiley

Quote

It is a problem and the behaviour module is prone to lots of false positives but it is a very handy module to catch 0 day malware or behaviour that is likely to cause problems


Indeed... life is a lot safe with than without!
Logged

Your other host, Genial Host...      richard@our-local.co.uk

ಇದನ್ನು ಫಕಿಂಗ್ ಕ್ವಿಟ್ Or something like that.
Pages: [1]   Go Up
  Print  
Jump to: