Using the Admin kit, in combination with the 6.0.3.837 version of the anti-virus on the workstations. All Windows XP with Office 2007, and all relevant fixes from Microsoft installed.

This seems to have come up during this week. The computer seems to briefly hang itself when switching between programs, when working in one program, opening files (word documents and such) or just cause. This takes some 3 to 5 seconds before it responds again. Programs that are swapped between include Excel 2007, Outlook 2007, Word 2007 and Internet Explorer 7.

I've started Process Explorer, and found the I/O for AVP.EXE to spike during the periods of slow response. So I'm guessing it might be KAV causing some issue. It's an intermittant issue so it's kind of hard to reproduce or troubleshoot. I know the PC has 1 GB of RAM, of which Task Manager reports some 390 MB of physical memory to still be available. Looking at the AVP.EXE process there, tells me the memory used is 4.076 kB, while the Virtual Memory being used clocks in at 4.628 kB. Not anything I'd expect to cause trouble.

Now I have enabled the anti-spam module last week (eventho it doesn't add much other then a bit of text to the subject), but that's about all I did. Removing it from the config seems to have no direct impact on the problem.

I've created a separate subgroup, and placed one test machine in there, and reloaded the exported policy and task files from 2 weeks ago (prior to any changes on my behalf). This will tell me if the anti-spam settings are to blame or not. If they're not (which based on the non-results I got from my above statement I find likely), I'm wondering if something changed either to KAV itself, or the definition files that could cause this behavior.

Anyone else seen this kind of behavior, or willing to hazard a guess what's going on?

Seems that removing anti-spam and moving back to the original config prior to changing the anti-spam settings solved the issue. Well, that and adding *.NK2 (outlook address cache files) and pagefile.sys (the virtual memory) as objects Kaspersky should leave alone...

We're seeing the same problems even without Anti-Spam activated. I've just followed your lead and added pagefile.sys to the Exlusion Rules to see if that helps.

Curious to see if this helps you out as well...

It's going to be difficult to tell. So many problems... slow printing, slow browser, slow startup... I'm making changes and turning things off left right and center in an attempt to return a decent level of usability to our people, so it will take a while to identify what actually works. I rolled this "Business Space" product out company wide based upon our positive experiences with KAV 7.0 in stand-alone machines, and am now regretting it big time. What a turd this has turned out to be.

If all else fails, kill off all modules, and start with the basic AV with the default settings... Then slowly enable stuff beyond that.

I can't say that it's really affecting performance noticably here anymore...

How did you specify your Exclusion Rule for the NK2 files? The reside independently in Documents And Settings under each user's own profile, and the rule seems to require an explicit path.

I've done that now. Everything is turned off except for File Anti-Virus. I've just tested the browser speed on two workstations, and it's as bad as it was with everything running. It takes IE8 25 seconds to bring up a Google home page with KAV installed, and 2 seconds when it's not installed.

I have the same problem for IE and the solution is

Try to reset IE in the option , advanced , restore advanced parameters and delete temp file.

Thanks, but it didn't help.

Hello,

Try to enable the "Compatibility mode" option which is in the "Settings" > "Services" menu.
If it does not help, you can try to upgrade KAV to the latest build (6.0.4.1212) which has been released recently.

KAV is current, and compatibility mode makes no difference.

You can use environment variables like %userprofile% to match with user profiles in the exclusion rule.

I just added the *.nk2 to the trusted file list. That should exclude scanning of the files no matter where they're located on HDD...

same problems here

Same situation here...I've been trying everything I can think of to return my machines to where they should be performance wise.

IE8 has been a dog BUT I've had a few machines at my home drag without KAV installed so I was trying to see if there was an issue with IE out of the box (other than IE being IE).

Guys,

Go into the IE Add-On's (Tools | Manage Add-Ons) and check to see if you have the following add-in: SSVHelper Class v6.0.50.13, in the "Sun Microsystems" section. You'll see the "Load Time" in the right-most column. Mine was taking in excess of 20 seconds to load. Disabling it made IE run well again.

as neko already said, not only IE8 is slow but the hole computer, specially working with office and slow printing.
all this happend after installing version 6.0.4.1212

I understand that, and am experiencing the same problems. My purpose in posting the IE8 work around was to share information and possibly help someone else who is having the same issue - with IE8.

Perhaps in future I shouldn't bother posting anything that might be helpful unless I can address everything that is a problem.

Same problem here ,
Kaspersky please !!!

All protections are minimum. Users complain a lot. I added exclusions, etc..

On my return to the original settings (which hold the AV and most anything on default) the problem disappeared from my end... The SSVHelper process in IE also seems to have further improved my performace in IE BTW. Thanks for that

For someone willing to create a new group and adding in a policy similar to the one I currently have for testing purposes (using the 6.0.3.387 client):

http://img200.imageshack.us/img200/5059/36483073.jpg
http://img200.imageshack.us/img200/9190/66786530.jpg
http://img7.imageshack.us/img7/3199/02an.jpg
http://img32.imageshack.us/img32/1371/02bb.jpg
http://img200.imageshack.us/img200/9468/02ch.jpg
http://img132.imageshack.us/img132/322/28970008.jpg
http://img18.imageshack.us/img18/3995/55087056.jpg
http://img44.imageshack.us/img44/7963/12749251.jpg
http://img202.imageshack.us/img202/1469/05at.jpg
http://img32.imageshack.us/img32/47/89457941.jpg
http://img132.imageshack.us/img132/6409/56712106.jpg
http://img32.imageshack.us/img32/3122/32163679.jpg
http://img202.imageshack.us/img202/8660/10642003.jpg
http://img18.imageshack.us/img18/1160/09aa.jpg
http://img202.imageshack.us/img202/7687/09b.jpg
http://img38.imageshack.us/img38/3605/69578170.jpg
http://img44.imageshack.us/img44/6482/23138066.jpg
http://img32.imageshack.us/img32/3962/21687744.jpg
http://img32.imageshack.us/img32/2352/53634071.jpg
http://img44.imageshack.us/img44/2540/13av.jpg
http://img32.imageshack.us/img32/483/90919406.jpg

Might help in incidental cases. Then again, my config is still pretty basic

I've noticed significant improvement by reinstalling KAV 6.04.1212 without the NDIS filter (on XP clients).

How did you perform the install to exclude NDIS? I don't see an option within the Deployment Wizard to omit it.

Under Repositories/Installation Packages of the admin kit, goto the properties of your 6.0.4.1212 workstation installation package, and click on compatibility, choose to "do not install the NDIS5 driver". My user was quite happy with the performance improvement today.

Marty

What does the NDIS filter do specifically?

See the below forum post (Tybilly 10-19-2009 @ 15:40):

http://forum.kaspersky.com/index.php?showtopic=139854

and this support article (above explanation is a bit clearer than the support article):

http://usa.kaspersky.com/support/corporate...17/?search=ndis

Marty

Getting the same problems... As users say "from the begging of this week". Extremly slow printing (up to 5 minutes to start printing), slow documents opening (doc, xls etc. all ms office suite programs, takes up to 2 minutes to open document).

Latest update installed an updated filter drivers.
After update & reboot problem seems to be resolved (tested on just a few workstations because I've reverted to MP3) .
Can anyone confirm that?

where did you see the update the drivers?

Can you post some version numbers so that we can compare?

This is helping considerably!

Is there a way to uninstall the drivers with adminkit?

Per the support document about the NDIS driver, the safest practice is to uninstall the entire AV package, then just reinstall without the NDIS5 driver.

I haven't tried it, but you can run a product deinstallation task for a product supported by the AK.

Click to view attachment

I've tried that on 20 machines so far this morning, and KAV will not uninstall via task on any of them. The Admin Kit claims the task was successful, but there is no indication on the workstation that an uninstall was even attempted. The only way I've been able to remove it is by doing it manually at each machine.

Most of my uninstalls have been manually also. I just tested it on a workstation, and it worked as I expected. (app uninstalled, removal from add/remove programs, ect...)

Anything odd in the windows event logs that equate to uninstall failure, or details of the AK log?

I'm hoping that they release an updated NDIS driver to fix these issues before I have to uninstall it throughout my office.

I hope that Kaspersky will fix the problem, I do not really want to make the 500 computers and my supervisor would not like either.

That's the strange part... nothing in any of the event logs to suggest that an uninstall was even attempted.




You and I both. My users are running out of patience.

I logged events for successful removal, and installation via deployment from the AK in the windows event logs. Maybe a permissions issue with the task (though, you would think it should have logged an event notifying as such)?

The issue isn't completely resolved but I can say there a REAL improvement since the last update (& reboot)

How does that improvement manifest itself? Instead of 10 seconds, it now takes 5? (Curious to see how much better it is).

For exemple I've a problem with the application to manage my Netasq Firewall
There is screen where it was taking 15sec to appear. Now it appears in something like 1sec where it should be immediate.
So it came back usable, but it's slower than it should.