[Speccy is listing "Kaspersky Internet Security" as enabled Antivirus program]

Hey everyone,

My posting restriction has been lifted, so now I'm able to share an update on this issue.

19 hours ago, hazelnut said:

Interesting read that involves the role WMI plays.

https://stackoverflow.com/questions/13615203/check-for-third-party-firewalls-on-a-machine

I converted the C# script that had been posted there to an .exe File through PowerShell using the following command:

C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /t:exe /out:MyApplication.exe MyApplication.cs

Make sure to create a .cs file (using Editor) containing the C# script beforehand. Once I converted it to an .exe file, I was able to run it and it then gave me this result:

This means that Kaspersky Internet Security is still registered as a third-party firewall in Windows, even though it had been uninstalled a few months ago (incl. all registry entries and leftover files).
 

17 hours ago, hazelnut said:

Have you ever used Windows Repair by Tweaking.com?

I was just wondering if it would reset the WMI

I've also tried performing the WMI Repair through the Windows Repair by Tweaking.com application. Unfortunately, it did not change anything and Speccy still mentioned Kaspersky Internet Security in the firewall section.
 

16 hours ago, johnccleaner said:

Similar to what Hazel had you run for finding the AV in WMI, this command:

Quote

wmic /Node:localhost /Namespace:\\root\SecurityCenter2 Path FirewallProduct get * /value

should show the Kaspersky firewall.

From there, the instructions in: https://support.cloudradial.com/hc/en-us/articles/360049084271-Removing-Old-Antivirus-Listings-from-Security-Center altered to FirewallProduct instead of AntiVirusProduct may allow you to finally exorcise it. (It goes without saying to be very, very careful, of course.)

This actually resolved this issue and Speccy now no longer mentions Kaspersky Internet Security at all. 

I'm glad I was able to get rid of it and thanks again to every person who has participated in this thread 

[Speccy is listing "Kaspersky Internet Security" as enabled Antivirus program]

31 minutes ago, hazelnut said:

@MaximTV

Interesting read that involves the role WMI plays.

https://stackoverflow.com/questions/13615203/check-for-third-party-firewalls-on-a-machine

(just in case you haven't done enough reading lately !!)

It does seem interesting but also complicated at the same time haha. Unsure if the code provided there can help me in any way?

[Speccy is listing "Kaspersky Internet Security" as enabled Antivirus program]

1 hour ago, nukecad said:

Have you tried uninstalling Speccy and reinstalling it?

@nukecad Just tried that. Speccy's output is the same as before. Thanks for trying to help, though

[Speccy is listing "Kaspersky Internet Security" as enabled Antivirus program]

3 minutes ago, hazelnut said:

and expand the uninstall list, do you see anything in the list K related?

I've just gone through the entire list, but there is nothing related to Kaspersky.

[Speccy is listing "Kaspersky Internet Security" as enabled Antivirus program]

@hazelnut Yeah, I assumed so. When I deleted the Antivirus Listing for Kaspersky through cmd, CTRL+R refreshed Speccy and Kaspersky no longer appeared in the Antivirus section.

It should be the same for the Firewall display name in my opinion.

[Speccy is listing "Kaspersky Internet Security" as enabled Antivirus program]

6 minutes ago, hazelnut said:

Just checking that you have done a full Restart of your machine today (not shutdown) since doing some of the things above.

@hazelnut

Yes, I have, but I can do another restart in a few hours. 

But FYI, the security provider page in the Windows Security App never listed Kaspersky (since uninstalling it, of course).

[Speccy is listing "Kaspersky Internet Security" as enabled Antivirus program]

@hazelnut

38 minutes ago, hazelnut said:

Have a quick look in Settings..Network and Internet....Status (on left side of page)...Change Adapter options.

If you then right-click on your connection and select properties, nothing Kasper is listed there is it?

Nope, not seeing anything about Kaspersky there.

[Speccy is listing "Kaspersky Internet Security" as enabled Antivirus program]

@hazelnut

 

48 minutes ago, hazelnut said:

I understand you are having a problem posting at the moment on the forum.

Seems to be working again, at least for the moment.

 

48 minutes ago, hazelnut said:

Have a look here in the Firewall bit... what does it say?

 https://www.tenforums.com/tutorials/113091-view-security-providers-windows-security-app-windows-10-a.html

Just checked. There's no mention of Kaspersky there.

[Speccy is listing "Kaspersky Internet Security" as enabled Antivirus program]

@hazelnut  That did the trick, at least for the Antivirus section. After following the steps in the article you linked, it disappeared from the Antivirus section in Speccy.

Not sure why Speccy said it was up to date when the timestamp was 14 Aug 2021.

But it still says Kaspersky Internet Security in the Firewall section. Is there any way to remove this?

 

Thanks :)

[Speccy is listing "Kaspersky Internet Security" as enabled Antivirus program]

@hazelnut

1 hour ago, hazelnut said:

So running CCleaner registry Cleaner shows no results left for Kaspersky ?

Yep.

1 hour ago, hazelnut said:

No folder in Program Files or Program Files(86) or ProgramData ?

Yep.

1 hour ago, hazelnut said:

Any other users on the machine?

No, I'm the only user.

1 hour ago, hazelnut said:

Was the machine already on Win 10 when you installed Kaspersky ?

Yes.

1 hour ago, hazelnut said:

Perhaps use Everything from VoidTools which would show any Kaspersky files left over.

https://www.voidtools.com

Looks like there aren't any leftovers...

[Speccy is listing "Kaspersky Internet Security" as enabled Antivirus program]

Hey @hazelnut and @trium,

I've now restarted my PC to check. Unfortunately, nothing has changed. Speccy still lists Kaspersky Internet Security.
 

There are no more registry entries containing the term "Kaspersky". Searching the C: Disk also returns no relevant results.



Is there anything else I can try? Thanks 

[Speccy is listing "Kaspersky Internet Security" as enabled Antivirus program]

  

34 minutes ago, hazelnut said:

What about under HKEY_LOCAL _MACHINE /Software?

Nothing related to Kaspersky either.

 

35 minutes ago, hazelnut said:

Something KAV related exists on your machine that Speccy sees. I'm sure you looked under all the appdata stuff?

Yep, no results.

 

12 minutes ago, trium said:

There is a bit from kasper in your system, but ... perhaps a folder, file or a registry entry

I've just backed up my registry and then searched for "Kaspersky". A few results actually came up, which I've now deleted. Will restart my PC later and will then check if anything changed in Speccy.

 

Thanks for all the help so far!

[Speccy is listing "Kaspersky Internet Security" as enabled Antivirus program]

Hey again @hazelnut,

 

42 minutes ago, hazelnut said:

You could always try again running the latest KAV remover here (10th Feb)

https://support.kaspersky.com/common/uninstall/1464

I have already tried that several times in the past few days.

 

43 minutes ago, hazelnut said:

Also look in the registry as shown here (carefully !!)

https://www.technipages.com/how-do-i-completely-remove-kaspersky-from-pc

HKEY_CURRENT_USER\Software\KasperskyLab does not exist in my registry :/

[Speccy is listing "Kaspersky Internet Security" as enabled Antivirus program]

Hello @hazelnut,

 

14 minutes ago, hazelnut said:

If you open Windows Taskmanager and click on the Details tab along the top of the window, does it show  Kaspersky listed anywhere?

Unfortunately not.

 

14 minutes ago, hazelnut said:

Open Windows Security Centre  shield by clicking on it in your taskbar, and then click on Virus and Treat Protection. Who does it say is in charge?

Antivirus: Microsoft Defender Antivirus (activated), Malwarebytes (deactivated)
Firewall: Microsoft-Firewall

[Speccy is listing "Kaspersky Internet Security" as enabled Antivirus program]

Hello!

I've uninstalled Kaspersky Internet Security half a year ago, but Speccy is still listing it under the Antivirus section as well as the Firewall (Display name). It is also saying that it is enabled and that the Virus Signature Database is up to date.

So far I've tried using Revo Uninstaller Pro as well as kavremover, but to no success. Speccy continues listing it as an Antivirus program installed on my computer.

 

How can I fix this?

Thanks,
Maxim