Rootkit Scanning: Has the display in the Red K icon of KIS 20.0.14.1085(d) of Rootkit Scanning been removed/disabled?

Hello  @wgcuser, 

Welcome again!

If I understand the issue, you switched from Green KIS icon (in the Taskbar) to the Red KIS icon, and now the Red K icon has reverted to Green? 

If that is the issue, to revert to Red KIS icon, rightclick on the KIS icon (in the Taskbar), select About, with the About popup open, press (on the keyboard) IDDQD, the icon should make the switch.

If this is not the problem, please post back and clarify please?

Thank you . 

Hello @wgcuser,

Thank you for the clarification. 

• Rootkit Scan is not available if the software is in limited functionality mode. 
• Also, patch(E) has been rolling out over the last few weeks, I notice your KIS is patch(D)
• Do you use Sleep or Hibernate Mode for the PC?
• Is Fast Boot enabled? 

Please follow these steps:

1. KIS application: select  , in Settings window, select Manage Settings, select Export Settings, save KIS Configuration file, select Restore Settings, select Security Level, select Maximum Security Level. 
2. KIS application: select  , in Settings window, select Additional, select Reports & Quarantine, select Clear.
3. Shutdown device using FULL shutdown, not Restart.
4. Power device on, login, start KIS.
5. Run manual KIS Database Update.
6. Run manual FullScan.
7. Monitor for 24hrs, at the end of 24hrs, export KIS ALL Events Report and attach to your post please?

Thank you

Running three machines Win 8.1 and 10 on KIS 20 (D). I've never changed the icon like the OP did, but I haven't seen the rookit scan in logs for approximately one month. My neighbor runs Win 10 and says the same thing. Unless a user checks the logs, they wouldn't know if the rootkit scan has run so who knows how many people are experiencing this.

I'll see if the (E) update changes anything when I get it.

Hello  @wgcuser,

Thank you for posting back and the report. 

1. Regarding the Red/Black/Green Kaspersky application icon, initially I didn’t understand the reason it was mentioned, however, I do now, your explanation is perfectly logical. (imo), enabling/disabling R/B/G will not impact RootKit Scans. 
2. Windows “scheduled” tasks are not involved, in any way, in KIS RootKit Scans.
3. RootKit Scans, are initiated only by (KIS) pre-programmed “background” schedule. 
4. (Just for information), when you raised your topic I began to monitor RKS’s in my systems, the RK scans appear to run each evening between 22:00 & 23:45. 

• May I have a screen print of KIS (application) Settings, Performance window please? 

Thank you

Hello@wgcuser,

Thank you for the image and the information.

• Re: Search for software that is intended to conceal traces of a malicious program in the system (rootkits) is the setting I asked about originally.

• If Idle Scan is enabled, scan tasks and update tasks run while the computer is locked or the screensaver is on, not at other times. 
• Re: Perform Idle Scan, can you clarify “any scan would be nice”, implies issues with “other: scans (additional to the existing RootKit Scan issue), is that what you mean?
• What’s “strange” about the issue is, (you’re) reporting the same issue for 2 devices; thinking back to when the issue began “several weeks ago”, in the 24hours preceeding the issue, were there any hardware, software, network and or environmental changes at all?
• On both devices, are Windows updates occuring automatically and are all updates applied successfully? 
• Before doing this, for all browsers, export Bookmarks, then run Privacy Cleaner Wizard, please tick every box, at PCWizard completion, select Reboot. 
• Also, please read post by Yury N, Anti-Rootkit Technologies Group Manager, you’ll (possibly) need to use a translator.
• It might also be worth asking Kaspersky Technical Support to investigate

Please post back.

Thank you

@FLOOD  No sign of any returning Rk scan. So today removed (but kept licence data) and reinstalled KIS, as suggested by an auto-response email following contact with KLab Support.

Presently running v20.0.14.1085c (expect it will go up to e in due course) and have seen a Rk scan taking place!!

Will resist temptation to “adjust” my settings.

@FLOOD 

Kind of you to ask. I’m currently just completing a quick scan and database update on the win7 Netbook. No Rk scan - except the one I initiated a few days ago.

Later I’ll reset it to the Defaults via the Export/Restore Settings and see how that goes.

@FLOOD 

Indeed the Rk Scan should be automatically managed by KIS, except due to reasons unknown it doesn’t happen for me! Research shows that the cmd line avp.exe start scan_qscan   will deliver a Rk scan.

Batch file to C:\ program files\kaspersky lab\kaspersky internet security 20.0\avp.exe start scan_qscan

Or tacking    start scan_qscan onto a short cut to avp.exe seemed to do the trick.

Yes I’ll take up the problem with the Lab.

@FLOOD 

Since my last post the ‘new copy’ of KIS 20.0.14.1085 has updated from patch c to patch e.

I’ve been turning the PC on at about 09:00 and leaving it on for about 12 hours with the screen saver cutting in after about 4 minutes inactivity. The Detailed Reports show a Quick Scan at the scheduled time of 11:00 and a daily Rootkit Scan at between 14:51 and 15:58. - So I guess this is progress.