Please help us test a new feature on the release version of Kaspersky MR20.
-
Ok, I added that key in my main system with KES 12.8 here:
\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\KasperskyLab\protected\KES.21.20\environment
And it seems it is working, now in my FF, when I check every secure connection info in every site, it shows the certifying entity, and not: Verified by AO Kaspersky Lab... BUT! still in some specific sites, such as all belonging to Google and others, it is showing the generic message: Verified by AO Kaspersky Lab... is this a normal behavior? 🤔
I tested also with KPremium 21.20, and same behavior...
@harlan4096 said in Please help us test a new feature on the release version of Kaspersky MR20.:
is this a normal behavior?
Hello!
No. But we got such reports and will inspect this issue.Register branch is OK.
-
@xzz123 said in Please help us test a new feature on the release version of Kaspersky MR20.:
I have tested this function and it looks alright.
I have run more sofisticated test
which I download malicious file via chrome.
The result is that the original certificate not replaced and the malicious file is blocked by web-av.
"
事件: 检测到恶意对象
用户:？？？？
用户类型: 发起者
应用程序名称: chrome.exe
应用程序路径: C:\Program Files\Google\Chrome\Application
组件: 安全浏览 safe broswering
结果描述: 检测到
类型: 木马
名称: HEUR:Backdoor.MSIL.XWorm.gen
精确度: 启发式分析 Heuristic
威胁级别: 高
对象类型: 文件
对象名称: 2.exe
对象路径: https://bbs.kafan.cn/forum.php?mod=attachment&aid=MzQ0ODEwNnwzZGFmMWNkNXwxNzQwMTI4MjAwfDk3NTc3MnwyMjc5MzY3//
对象的 MD5: D32B2CDCCEACD71FFA5039A0DC8E2D45
原因: 机器学习→reason: machine learnning
数据库发布日期: 今天，2025/2/21 下午3:03:00you can see from the log that https scanning without repalce certificate is accomplished. the malicious file with https was blocked.
@xzz123 said in Please help us test a new feature on the release version of Kaspersky MR20.:
The result is that the original certificate not replaced and the malicious file is blocked by web-av.
Hello! Blocking is OK. We should still check malicious files.
Is your post "everything ok, I had checked"
or there is question I had missed? -
Hello Dmitriy~~
I have tested this function and it looks alright.
my test machine:
ThinkPad T490 with 64bit windows 10 Pro 22H2 19045.2965 (will test win11 later)
K Standard zh-cnbut why Edge not supported?
and also there are many third party not-well-known chrome-based broswers, K do not support them with MITM and https traffic scanning from the beginnig. I wish all https traffic could be scanned by this technology in the near future. After that there will be no broswer limitations. All broswer and all https traffic will be scanned.@xzz123 said in Please help us test a new feature on the release version of Kaspersky MR20.:
but why Edge not supported?
Edge support is in progress, it should be already added to MR21 beta builds.
-
I'm getting this random error :
::::::::::::::::::::::::::::::
An error has occurred while connecting to www.speedtest.net. PR_END_OF_FILE_ERRORError code: PR_END_OF_FILE_ERROR
The page you are trying to view cannot be displayed because the authenticity of the data received could not be verified.
Please contact the website owners to inform them of this problem.
::::::::::::::::::::::::::::::In KES 12.8 + FF since I add that registry key, and using at the same time Kaspersky VPN 21.20, if I click in Retry, then site loads... I get this issue randomly and not always on the same page 🤔
-
@xzz123 said in Please help us test a new feature on the release version of Kaspersky MR20.:
The result is that the original certificate not replaced and the malicious file is blocked by web-av.
Hello! Blocking is OK. We should still check malicious files.
Is your post "everything ok, I had checked"
or there is question I had missed?@Dmitriy.Pisarets said in Please help us test a new feature on the release version of Kaspersky MR20.:
or there is question I had missed?
no more problem, sir
except those I already reported in MR21 traffic checking section. -
I'm getting this random error :
::::::::::::::::::::::::::::::
An error has occurred while connecting to www.speedtest.net. PR_END_OF_FILE_ERRORError code: PR_END_OF_FILE_ERROR
The page you are trying to view cannot be displayed because the authenticity of the data received could not be verified.
Please contact the website owners to inform them of this problem.
::::::::::::::::::::::::::::::In KES 12.8 + FF since I add that registry key, and using at the same time Kaspersky VPN 21.20, if I click in Retry, then site loads... I get this issue randomly and not always on the same page 🤔
@harlan4096 said in Please help us test a new feature on the release version of Kaspersky MR20.:
Error code: PR_END_OF_FILE_ERROR
Hello!
Can you please try to reproduce it with traces and make a report? -
@harlan4096 said in Please help us test a new feature on the release version of Kaspersky MR20.:
Error code: PR_END_OF_FILE_ERROR
Hello!
Can you please try to reproduce it with traces and make a report?The problem is that it is a random issue, and I never know when I will get it and with what URL 🤔
For example, today I did not still get it in any URL so far...
-
@Darking said in Please help us test a new feature on the release version of Kaspersky MR20.:
In addition to what @harlan4096 mentioned about not changing the status of the certificate check in some sites, such as Google products, I got many server errors in many sites.
I also felt some slowdown in internet speed and ping rateHello!
-
Can you please choose 1 website with problem and collect traces from application start. And create a report?
-
About ping, can you please make video with proofs and examples? We will double check it in lab, but it shouldn't affect speed at all.
@Dmitriy.Pisarets
I apologize for the delay in responding. I am a basic user and have no experience in sending and troubleshooting bug reports. I just wanted to share my experience with this wonderful feature -
-
Chrome got an update and the new function works fine.
-
I just updated to KES 12.9, and I had manually enabled SuperM previously with KES 12.8, but now I see KES 12.9 disabled or removed the tweak 🤔
-
I just updated to KES 12.9, and I had manually enabled SuperM previously with KES 12.8, but now I see KES 12.9 disabled or removed the tweak 🤔
@harlan4096 said in Please help us test a new feature on the release version of Kaspersky MR20.:
KES 12.9 disabled
Hello! Feature is disabled as far as I know, but have no info about any plans for official releasing it.
-
@harlan4096 said in Please help us test a new feature on the release version of Kaspersky MR20.:
KES 12.9 disabled
Hello! Feature is disabled as far as I know, but have no info about any plans for official releasing it.
I tried to enable manually again with new KES 12.9, but looks not working with this new version 🤔
This is a trick to check it:
"You can check using Process Explorer. Open Firefox/Edge/Chrome, open Process Explorer. Now in process explorer right click on the main firefox.exe (not any of the child process) and click on Properties, now go to the Environment section. Now look for SSLKEYLOGFILE. If you see it then it's doing what Avast does. If not then Kaspersky is using some other method.
Example: https://textslashplain.com/wp-content/uploads/2019/08/sslkeylogfileeb.png"
And KES 12.8 I got that Environment key in my Mozilla FireFox: https://malwaretips.com/attachments/1744304648433-png.288064/
But not now with KES 12.9 🤔
-
I'm testing SuperMITM with the last beta build of KPrem. 21.23, and with the current official release of KES 12.10:
https://malwaretips.com/threads/kaspersky-vpn-ksos-21-23-kes-12-11-betas.137071/post-1140870
-
Is the testing still ongoing? I'm currently using KIS 21.24. The Kaspersky certificate issue persists in Firefox, but Edge browser functions normally.
-
Is the testing still ongoing? I'm currently using KIS 21.24. The Kaspersky certificate issue persists in Firefox, but Edge browser functions normally.
@wbywby456456 said in Please help us test a new feature on the release version of Kaspersky MR20.:
Is the testing still ongoing?
Hello! Are you talking about MITM feature or common beta testing?
If you have issues, you can report them with traces (or with screen recording, if it possible) here https://eap.kaspersky.com/category/1291/traffic-checking-av-web-mail -
@wbywby456456 said in Please help us test a new feature on the release version of Kaspersky MR20.:
Is the testing still ongoing?
Hello! Are you talking about MITM feature or common beta testing?
If you have issues, you can report them with traces (or with screen recording, if it possible) here https://eap.kaspersky.com/category/1291/traffic-checking-av-web-mail@Dmitriy.Pisarets It is the SuperMITM feature in this post.
-
@Dmitriy.Pisarets It is the SuperMITM feature in this post.
The testing continues, but You have to enable the SuperMITM in every beta manually, modifying the Windows Registry.
-
The testing continues, but You have to enable the SuperMITM in every beta manually, modifying the Windows Registry.
@harlan4096
I enabled this feature through the registry, but after restarting my computer several times, I noticed that both Edge and Firefox browsers reverted to using Kaspersky's local certificate to detect encrypted traffic. My Kaspersky version is 21.24.8.522. -
@harlan4096
I enabled this feature through the registry, but after restarting my computer several times, I noticed that both Edge and Firefox browsers reverted to using Kaspersky's local certificate to detect encrypted traffic. My Kaspersky version is 21.24.8.522.I have it enabled in official KES 12.12.0.522, to do so, I added the key here:
And the proof in Process Explorer -> FireFox (Environment tab in main process):
Try also re-enabling Self-Defense, after rebooting.
P.S.: another proof, the cert. of this site:
-
@harlan4096
I enabled this feature through the registry, but after restarting my computer several times, I noticed that both Edge and Firefox browsers reverted to using Kaspersky's local certificate to detect encrypted traffic. My Kaspersky version is 21.24.8.522.@dmitriy.pisarets I followed the instructions in this post, but after restarting my computer several times, everything reverted back to the way it was before.I noticed that both Edge and Firefox browsers reverted to using Kaspersky's local certificate to detect encrypted traffic. My Kaspersky version is 21.24.8.522.
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login© 2026 АО «Лаборатория Касперского»