nefarius / HidHide

Gaming Input Peripherals Device Firewall for Windows.
https://docs.nefarius.at/projects/HidHide/
MIT License
941 stars 80 forks source link

Wrong whitelist checks due to Kaspersky Security Cloud #14

Closed jdubus closed 3 years ago

jdubus commented 3 years ago

I'm using Kaspersky Security Cloud as an anti-virus software, but due to that, all whitelisted programs (in my case Joystick Gremlin) in HidHide somehow get redirected to \Device\HarddiskVolume4\Program Files (x86)\Common Files\Kaspersky Lab\klhk\klhk_x64\klhkum.dll during whitelist checks.

Meaning that the whitelist is completly non functional as the path never match.

The only time the whitelist actually work is if i deactivate Kaspersky, clear the whitelist and redo it and then launch any of the whitelisted applications while Kaspersky remain deactivated. Those applications are then properly recognized as whitelisted, but then if i reactivate Kaspersky they all once again get redirected permanently to the above dll no matter the actual state of Kaspersky until i once again deactivate Kaspersky and redo the whitelist.

Since i can't really play while keeping the anti-virus deactivated for lengthy periods of time i'm unable to make proper use of HidHide.

nefarius commented 3 years ago

Sounds like a case for the Kaspersky support to me 😁 AV ruins it? AV has to fix it 😜

triscan commented 3 years ago

quick fix: Turn off Kaspersky Self-Defense and rename klhkum.dll to whateveryouwant. Turn on Kaspersky Self-Defense and reboot.

nefarius commented 3 years ago

Closed as nothing came of it.