Kaspersky
Question

Suspicious activity that Kaspersky doesn't notice [Moved]

  • 23 April 2021
  • 6 replies
  • 93 views

Everytime I start my PC the proxy settings change automatically with the script enabled and the address http://127.0.0.1:86/ added.

This details are also updated on the registry and keeps resetting back to this 127. 0.0.1:86 after deleting them in the registry. My Kaspersky is running and have done a full scan but can detect any malware or virus on the computer. Anyone who has an idea of what's this?


6 replies

Userlevel 7
Badge +4

Welcome. If the issue is not readily resolvable, please contact Tech Support, link is located at top of this web page.

Userlevel 7
Badge +9

Hello @MartinMM

Additional to @richbuff:

  1. Is the software KAV or KES11
  2. IF the Kaspersky software protection is paused & Kaspersky application exited, the machine powered OFF & on, do the settings change? 
  3. Which “script” is enabled? 
  4. What programs are enabled to start at Startup? 

Please let us know? 

Thank you:pray_tone3:

Flood:whale:+:whale2:

Resource: 

Read before you create a new topic! tutorial by @Danila T. 

Hello @Flood and Flood's wife

Thank you for your feedback. To answer your questions:

  1.  It's KES 11
  2. Kaspersky is not paused and working well without any issues
  3. The Script is shown in the image below on windows Proxy settings:
  4. Programs enabled at startup are: Google Drive, Skype, OneDrive, CCleaner, Waves MaxxAudio and Realtek HD Audio manager

 

Userlevel 7
Badge +9

Hello @MartinMM

Thank you:ok_hand_tone3:

If there’s no answer from the Community, please raise a request with Kaspersky, via your Kaspersky Company account.

Thank you:pray_tone3:

Flood:whale:+:whale2:

Userlevel 3
Badge +1

you could start procmon (sysinternals)to see which process is doing that change

Thanks @Flood and Flood's wife  and @ak01  for your responses. I will raise it via the account as well as do more research on this

Reply