IPB

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> KAV 6 Server EE - Console
GriffGB
post 29.06.2009 17:43
Post #1


Advanced Member
***

Group: Members
Posts: 98
Joined: 19.03.2009




After installing the KAVEE package onto a 2003 server from the admin kit, (which went fine), I decided to roll out the console mmc via the admin kit too.
I want to do this so I can control the settings from the server too.

Going from the documentation;
* I created a package using "make installation package for specified executable file" as it suggested.
* Pointed it at the "setup.exe" from the client folder of the uncompressed installation files. It doesn't mention whether I was meant to tick "copy entire folder to the package" or not. As it never mentioned anything about it in the guide, I choose not to.
* The package seemed to create fine, bt when I roll it to the server I just installed KAVEE on, it didn't seem to install.

The deployment task seems to stick at 85% complete. Looking in task manager it shows two instances of setup.exe running, which looks a little odd to me. Stopping and re-running the task from the Admin Kit, just gives me a message popup box on the target server saying "files not found".

So, I rolled my server back using the snapshot I took before trying to install it. I tried creating the package with ticking the "copy entire folder to the package", but get the same results.

Anyone ever rolled out the console mmc to a server with KAVEE on it, and can offer any clues as to where I'm going wrong?

Thanks

Carl
Go to the top of the page
 
+Quote Post
phr3n1c
post 29.06.2009 17:49
Post #2


Support specialist
*******

Group: KL Germany
Posts: 1024
Joined: 8.07.2008
From: Ingolstadt, Germany




Please try it with parameter "/S" (without the "").


--------------------
Feldstudie.net

Malware-Honeypot: 147852@feldstudie.net - Feel free to fill with malware ;)

Multiple exclamation marks are a sure sign of a diseased mind...

Go to the top of the page
 
+Quote Post
GriffGB
post 29.06.2009 19:27
Post #3


Advanced Member
***

Group: Members
Posts: 98
Joined: 19.03.2009




In case anyone else gets stuck with this one;

I deleted the current install package.
Added the path to the client exe file.
Ticked the box to include all the files
In the "Executable file command line (optional)" added in /s
Then packaged it up, and rolled it to the server.


That seems to have done the trick. Thanks very much for the help phr3n1c. biggrin.gif
Go to the top of the page
 
+Quote Post
Reload
post 29.06.2009 21:25
Post #4


Advanced Member
******

Group: Gold beta testers
Posts: 998
Joined: 11.07.2005
From: ::::: Dronten ::::: The Netherlands




QUOTE(GriffGB @ 29.06.2009 18:27) *
In case anyone else gets stuck with this one;

I deleted the current install package.
Added the path to the client exe file.
Ticked the box to include all the files
In the "Executable file command line (optional)" added in /s
Then packaged it up, and rolled it to the server.
That seems to have done the trick. Thanks very much for the help phr3n1c. biggrin.gif


I will give it a try... Strange that KL Germany knows what the options is, and that a
KL Support member told me it was imposible to install the MMC with the Admin Kit... ai.gif


UPDATE 30/06/2009:

It works! tnx phr3n1c. b_punk.gif

This post has been edited by Reload: 30.06.2009 11:10


--------------------
Go to the top of the page
 
+Quote Post
GriffGB
post 30.06.2009 11:52
Post #5


Advanced Member
***

Group: Members
Posts: 98
Joined: 19.03.2009




Instructions on installing the MMC via admin kit are in the documentation, so in theory it should have been fine, it just didn't seem to install for me, until I added the switch.

Now, the next "query".

I've installed KAVEE on a second server, rolled out fine via the admin kit, the same way as the first.

After installing, it seemed to take an age for me to get logged into the server.

This machine is a Virtual Windows Server 2003, running in Vmware ESX 3.5. Hardware is two 3.5 Xeon processors, and the VM has 1gb of RAM configured.
The only thing this server runs is HP Insight Manager. After checking Task Manager I found that Kaspersky seems to be hitting high CPU and RAM useage. When I used Trend on it, I saw nothing like this kind of useage, and never had any alerts from VMware re CPU/RAM useage

Surely this isn't normal?

QUOTE


Target: HPInsight
Old Status: Green
New Status: Red

Current value:
Virtual Machine CPU Usage - (Metric CPU Usage (Average) = 92%)

Alarm: Virtual Machine CPU Usage
([Yellow Metric Is Above 75%; Red Metric Is Above 90%])

Description:
Alarm Virtual Machine CPU Usage on HPInsight changed from Green to Red



I'm just a little nervous if this is going to be high cpu useage. Particularly since I'm seeing high hosr processor useage. The plan is to install it on the 7 other virtual servers on this host. Naturally lots of virtual servers with that high cpu useage isn't going to be great.

I wonder if it's something to do with the way Insight/SQL runs.

This post has been edited by GriffGB: 30.06.2009 12:11
Go to the top of the page
 
+Quote Post
GriffGB
post 30.06.2009 14:11
Post #6


Advanced Member
***

Group: Members
Posts: 98
Joined: 19.03.2009




I removed HP SIM, the instance of SQL MSDE, rebooted, and I still have two instances of kavfswp, with the processor useage on one of them up around 90-100%. Maybe it's the startup scan that seems to run on every startup, as it eventually settled down. When a full scan is set away, it sends the processor useage to 100%, so maybe it uses a lot when scanning.
Go to the top of the page
 
+Quote Post
dawinci
post 30.06.2009 14:20
Post #7


Support specialist
****

Group: KL Germany
Posts: 294
Joined: 4.06.2008
From: Ingolstadt




Install latest Critical Fix and check results. For high kavfswp.exe usage (quicky check your eventlogs for event id 6080), check out this article at our knowledge DB.

<snip>
Furthermore try:
1. stopping all running tasks of Kaspersky for WSEE, including Real Time Protection
2. make sure that all kavfswp.exe processes have ended. If the tasks will not stop and kavfswp.exe are still in the memory, kill these processes in Task Manager
3. Start Anti-virus bases update task and make sure that it worked well (the databases date must get changed)
4. Start all stopped tasks
<snip>

Post results here. Thanks in advance.
Go to the top of the page
 
+Quote Post
Reload
post 30.06.2009 15:15
Post #8


Advanced Member
******

Group: Gold beta testers
Posts: 998
Joined: 11.07.2005
From: ::::: Dronten ::::: The Netherlands




Open a ticket a Kaspersky Lab and ask for CriticalFix 8 (beta) for test purpose....


--------------------
Go to the top of the page
 
+Quote Post
GriffGB
post 30.06.2009 18:53
Post #9


Advanced Member
***

Group: Members
Posts: 98
Joined: 19.03.2009




QUOTE(dawinci @ 30.06.2009 12:20) *
Install latest Critical Fix and check results. For high kavfswp.exe usage (quicky check your eventlogs for event id 6080), check out this article at our knowledge DB.

<snip>
Furthermore try:
1. stopping all running tasks of Kaspersky for WSEE, including Real Time Protection
2. make sure that all kavfswp.exe processes have ended. If the tasks will not stop and kavfswp.exe are still in the memory, kill these processes in Task Manager
3. Start Anti-virus bases update task and make sure that it worked well (the databases date must get changed)
4. Start all stopped tasks
<snip>

Post results here. Thanks in advance.


I installed critical fix 7 from that link. Thought that had fixed it, but as soon as I did anything on the server, it spike the CPU again.
I switched off any scan, including the one that scans on application start. Set any tasks I could find to "execute in background", still the same.

I then tried your steps above.

I opened the console, stopped the real time protection and script monitoring, and left the update tasks as they weren't running. The tasks showed as stopped, but had no effect on the kavfswp.exe process. So I tried to kill the process, but it kept on starting itself straight away.
I looked back in the console, and the real time protection and script monitoring had restarted themselves somehow. I stopped them again, and now the process kavfswp.exe has finally gone.

I ran than the update tasks in the console (which created a kavfswp.exe process again, but seemed to close itself a little while after the update finished), and got a 100% completion result.

I've now started the Real Time Protection, and Script Monitoring tasks, get two kavfswp.exe processes, which is hit around 40% cpu useage, then gone down to 0%.

Now i'm going to try uncompressing the Insight Manager installer, simply by double clicking on it and we'll see what KAV does.
Immediately on opening the file, the kavfswp.exe process hits 99% CPU and 158504k ram useage.

I don't know what else I can do. An empty 2003 server, with KAVEE installed, critical fix 7, and opening a file causes the processor to max out.
Ok, it's a 600mb setup file, but if KAV is hitting 99% cpu, that doesn't leave much for the OS to actually uncompress the file and makes the server unresponsive until it's finished doing what it's doing.. At the moment, it's taking ages to uncompress the setup file.

I'm tempted to try KAV for Windows Server instead and see what that's like.


edit:- I've set in the policy to exclude any files bigger than 15mb, and that lasts over 60 seconds to scan. At least now I can uncompress the HP SIM setup files.

This post has been edited by GriffGB: 30.06.2009 19:12
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



Lo-Fi Version Time is now: 22.11.2009 01:47