Forums

Kaspersky Endpoint Security 10 for Windows

Scott Edwards, User (Posts: 1)

Apr 08, 2016 5:39:09 am EDT

Hi There,

I am getting alerts from Endpoint Security 10 that Remote Utilities Viewer is being blocked by the Web AV portion of endpoint, this is the message I get!

Notifications:
Critical event: 08/04/2016 10:11:20:
Event type: Blocked
Application\Name: Remote Utilities
Application\Path: c:\program files\remote utilities - viewer\
Application\Process ID: 2540
User: ComputerNAME (Active user)
Component: Web Anti-Virus
Result\Description: Blocked
Result\Type: Malicious link
Result\Name: http://rmansys.ru/utils/bl/bl.dat
Result\Threat level: High
Result\Precision: Exactly
Object: http://rmansys.ru/utils/bl/bl.dat
Object\Type: Web page
Object\Path: http://rmansys.ru/utils/bl/
Object\Name: bl.dat

Looking at the first portion of this site it looks like a provider of remote assistance! But why is remote utilities viewer trying to get access to this site and download a DAT file?!

Kind Regards,

Scott

Conrad Sallian, Administrator (Posts: 1083)

Apr 08, 2016 7:42:30 am EDT

Hello Scott,

The site rmansys.ru is the Russian site of the software. It is branded under the name RMS in Russia and CIS.

In both programs/versions, the URL in question used to be accessed by the Viewer to check the license key. Since we no longer use it, we'll remove it from the program altogether in the upcoming version 6.5.

As for Kaspersky detection, we sent a false positive request to them so hopefully they'll fix this issue soon.

Let me know if you have other questions.
Submit a reply

* Website time zone: America/New_York (UTC -4)