Kaspersky: FraudTool.Win32.Spylocked.ds

[impro]

Originally Posted by Fuzzy

Meh, yet another reason I don't waste my CPU resources with anti-virus software.. I mean, why NOT run every single IO process through 2 or 3 extra checks, that ultimately, will get defeated at some point.

I do not care for the antivirus part .
The kaspersky firewall is the best.

[Fuzzy]

Originally Posted by impro

I do not care for the antivirus part .
The kaspersky firewall is the best.

In my eyes, a hardware firewall is the best. I have no need to protect my computer from my other computer.

[impro]

Originally Posted by Fuzzy

In my eyes, a hardware firewall is the best. I have no need to protect my computer from my other computer.

Yes but when you have 2 mac idiots in your house the situation changes.
You router firewall will not block block 80 remote connections.
If an attacker gains access to the apple he can very easily attack the LocalAN.

[Fuzzy]

Originally Posted by impro

Yes but when you have 2 mac idiots in your house the situation changes.
You router firewall will not block block 80 remote connections.
If an attacker gains access to the apple he can very easily attack the LocalAN.

My firewall can block anything i configure it to block. DD-WRT can do, really pretty much anything.. I'm not sure how a Mac would have anything to do with it... though I won't allow them in my house on principle... :-)

[Joe Mac]

I appreciate SageTV working with ZoneAlarm to get a fix for this issue. I cannot install the 7 Client on my computer because of this. Well, actually I can by turning ZoneAlarm off, but as soon as I turn ZA back on it finds and quarantines instantly. Frustrating! I've even went to the ZA quarantine area and told it to "let it go". It does, then instantly quarantines it again.

[voidpt]

Originally Posted by Joe Mac

... then instantly quarantines it again.

Long time since I used ZoneAlarm. But are the options described in this thread possible on your ZoneAlarm ?

[impro]

Originally Posted by Joe Mac

I appreciate SageTV working with ZoneAlarm to get a fix for this issue. I cannot install the 7 Client on my computer because of this. Well, actually I can by turning ZoneAlarm off, but as soon as I turn ZA back on it finds and quarantines instantly. Frustrating! I've even went to the ZA quarantine area and told it to "let it go". It does, then instantly quarantines it again.

Same with Kaspersky. even if I do exception or trusted app.
It cleans immediately.
Please correct.

[impro]

Originally Posted by Fuzzy

My firewall can block anything i configure it to block. DD-WRT can do, really pretty much anything.. I'm not sure how a Mac would have anything to do with it... though I won't allow them in my house on principle... :-)

I have used DDWRT from the very beginning. The firewall is not bad.
A the moment I use Sonicwall.

Now the macs come Out of the Box with their simple firewall disabled.
Easier to exploit then windows 7 and even Vista
And most Mac users do not use 3rd party firewall like little snitch.

If somebody gains access to the apple on port 80 which the DDWRT firewall does not block as well as java script and other applets, he will have a clear door inside your internal network.
Ones he is inside your Lan if you do not protect your computer on the LAN you are careless. WIth a proper setup kaspersky can be a very good firewall.

[Fuzzy]

dd-wrt, by default (as well as every other hardware firewall ever created) blocks EVERY incoming port by default. The only way to have any incoming traffic make it to a PC is to set it to direct it to that PC. Otherwise, it would have no idea where to send that incoming port 80 traffic TO, and it gets thrown out. The only way to set it to redirect the traffic to an internal PC is either manually, though the router's web interface, or via UPnP from an internal PC.

[impro]

Originally Posted by Fuzzy

dd-wrt, by default (as well as every other hardware firewall ever created) blocks EVERY incoming port by default. The only way to have any incoming traffic make it to a PC is to set it to direct it to that PC. Otherwise, it would have no idea where to send that incoming port 80 traffic TO, and it gets thrown out. The only way to set it to redirect the traffic to an internal PC is either manually, though the router's web interface, or via UPnP from an internal PC.

Yes. Do not see your point???

BTW I know for a fact that uPNP can be hacked. I saw it with my own eyes.

I am not saying redirect trough the routing.
I am saying a retarded Mac getting his computer exposed.
Hacker taking over and seeing the LAN/internal network. In this case if you do not protect yourself on the LAN your computer is exposed as well.
When the internal IP request to another internal IP the firewall is not in use


I was filming exclusively or McAfee Fusion convention here in Las Vegas.
And this was one of the topics in one of the discussions.
Having a corporate firewall only is not a good solution.
Even a compromised Iphone that will connect to the WLan is dangerous enough.
That is why protecting internally is a MUST.

[Serra]

Originally Posted by impro

Same with Kaspersky. even if I do exception or trusted app.
It cleans immediately.
Please correct.

One PC running Kaspersky 2010 has that issue, I can't keep it on it, but my other PC, with what looks like the same settings, has no issue with it!

I've looked at both setting several times, can't for the life of me see any difference, but each time I install it, it gets deleted. I can use it on the other PC without an issue.

On a side note, I installed Kaspersky 2011 on my server to scan it make sure it wasn't infected, it was clean, but Kaspersky kept popping up a pop up asking me to register and reminding me I was on a 30 day trial. It quickly got uninstalled. I have a bunch of Kaspersky licenses, I've never had an issue with the 30 day trial being painful. If they have switched to nag-ware, I may just move to a new vendor. I was planning to purchase an additional set of licenses, but not now.

[TechBill]

Are you using your HTPC for other purposes ?

I never had an antivirus installed on my HTPC because I don't use it for anything but SageTV and didn't see the need of having anti-virus installed on it since it would just scan every recording made and use up CPU resources scanning it.


Bill

[impro]

I use my laptop in the garage and in the hammock in the yard.
The place shifter does not work as well as the client/

Originally Posted by TechBill

Are you using your HTPC for other purposes ?

I never had an antivirus installed on my HTPC because I don't use it for anything but SageTV and didn't see the need of having anti-virus installed on it since it would just scan every recording made and use up CPU resources scanning it.


Bill

[impro]

See if you have ot enabled updates on the working machine.
Before a few days ago I had no problems with Kaspersky and sageclient

Originally Posted by Serra

One PC running Kaspersky 2010 has that issue, I can't keep it on it, but my other PC, with what looks like the same settings, has no issue with it!

I've looked at both setting several times, can't for the life of me see any difference, but each time I install it, it gets deleted. I can use it on the other PC without an issue.

On a side note, I installed Kaspersky 2011 on my server to scan it make sure it wasn't infected, it was clean, but Kaspersky kept popping up a pop up asking me to register and reminding me I was on a 30 day trial. It quickly got uninstalled. I have a bunch of Kaspersky licenses, I've never had an issue with the 30 day trial being painful. If they have switched to nag-ware, I may just move to a new vendor. I was planning to purchase an additional set of licenses, but not now.

[Serra]

Originally Posted by TechBill

Are you using your HTPC for other purposes ?

I never had an antivirus installed on my HTPC because I don't use it for anything but SageTV and didn't see the need of having anti-virus installed on it since it would just scan every recording made and use up CPU resources scanning it.

Not using it for anything but sage, playon and as a file store. So, no need for an antivirus... except when something wacky happened, like Sage getting flagged. Then I wanted to scan it just in case.

[impro]

Originally Posted by Serra

Not using it for anything but sage, playon and as a file store. So, no need for an antivirus... except when something wacky happened, like Sage getting flagged. Then I wanted to scan it just in case.

Should I contact SageTV directly?
Are they aware of the Issue?
I would like to be able to use client again!

[UgaData]

This is not a Sage problem, although it effects SageTV.

To resolve this the Anti-Virus Vendor needs to be contacted (I did read the post where someone from Sage indicated they would contact some of the vendors)

It has been a few years now, but I used to use Avast! and after an update it started "keying" on some components of SageTV. I contacted (e-mailed) Avast! about the false positive. Later that day Avast! had a new update that no longer had issues with SageTV.

Point being it is not SageTV's responsibility to fix some other Vendors program.

This isn't the first time this has happened nor is it the first post about an Anti-Virus program throwing alerts about some components of SageTV that it found suspicious. And it probably isn't the last.

Grouse about it all you want in the forum. It is helpful in alerting other users that are experiencing the same issue. But, if you want it resolved you need to contact the anti-virus/anti-malware vendor to get it resolved.

[Serra]

Originally Posted by impro

Should I contact SageTV directly?
Are they aware of the Issue?
I would like to be able to use client again!

You can contact Kaspersky directly and report the issue. Same with ZA if you are using that.

I was able to get around the issue by doing the following:

1. Disable Kaspersky using "Pause Protection" "Until Reboot".
2. Download the client.
3. Install with the 'REPAIR' option.
4. Open Kaspersky, set and exclusion for your sage directory.
5. As sagetvclient.exe as a trusted application.
6. Reboot.

[b-morgan]

Kaspersky Anti-Virus 2011 (and an earlier version) detects:

not-a-virus:FraudTool.Win32.SpyLocked.ds

in SageTVClient.exe version 7.0.23.

I'm assuming this is a false positive but I'm having a hard time getting Kaspersky to leave SageTVClient.exe alone. Has anyone else seen this and figured out how to get everybody to "play nice"?

Regards,

Brad

* merged *

[impro]

I did exactly that but a second after I open Kaspersky it detects and gives me 2 options:
Delete or recommended clean.
I do not think now that it is a false positive.
It asks to restart the computer every time.

Originally Posted by Serra

You can contact Kaspersky directly and report the issue. Same with ZA if you are using that.

I was able to get around the issue by doing the following:

1. Disable Kaspersky using "Pause Protection" "Until Reboot".
2. Download the client.
3. Install with the 'REPAIR' option.
4. Open Kaspersky, set and exclusion for your sage directory.
5. As sagetvclient.exe as a trusted application.
6. Reboot.