hello everyone.

We're in the process of deploying kas6.0. We noticed on our test users that IE8 slowed down to a crawl when opening IE for the first time, opening a new tab or once a page is loaded clicking through links. At times it can take up to 15 mins for IE to go

We've boiled it down to the Java Add-on. When we disable the "Java™ Plug-In 2 SSV Helper" followed by a reboot IE8 performs normally.

I checked the information of the plug in and the file in use is jp2ssv.dll under C:\program files\java\jre6\bin\. Would it be safe to disable scanning of this file? Attaching a screenshot of the add-on info.

I had the same problem in IE7 with KAdminKit 8.0.2040, KAV 6.0.4.1212 for our new installation We were also having problems with multiple programs (Visual studio, SolidWorks, etc) maxing out a processor for 10-20 seconds but appear to not be doing anything, no network, thread IO, just a lot of processor. Network shares where slow to appear, especially when you get around a 100 files. I finally went back to KAV 6.0.3.837 and EVERYTHING started working as expected. I highly recommend you do the same.

I am in the process of upgrading from AV 6 to AV 6 MP4. With machines XP and vista, if IE8 is installed the machine slows to a crawl. 100% CPU utiliation for about 10-20 Seconds. Disabling the java plugin made no difference. I have removed the MP4 from my machine and it runs beautifully. I have a vista sp2 ultimate running on a intel core2 duo with 4 gig of ram. The antivirus software effected every part of the system even when the service was stopped. Visual studio crawled , outlook, crystal, IE8... I was a very unpleasant experience , i am glad i did not push the upgrade to more machine then the few i have done already. We are upgrading as we will be running win server 2008 r2. I do not dare put that on this machine yet!

We have tested AV 6 MP4 on Vista x86/x64, XP x86/x64 and it seemed to run very well UNTIL we deployed enterprise wide. Needless to say I am running from the mobs of people wanting to lynch me.

Not only has the machines with IE8 come to a crawl, but we are experiencing company wide CPU's spiking to 100% with no rhyme or reason. Needless to say I am removing MP4 and installing MP3 which seems to fix the issues.

From what I can see and experienced so far, MP4 is not ready for production - it should be in BETA still.

We moved the entire enterprise from Avast to Kaspersky and so far I am really regretting it - only had one issue with Avast in the 7 years of running it, but can't look back now.

so it seems to be mp4 causing issues. we are new to kasp so i am going to ask, can we simply download the mp3 version of admin kit which comes with the workstation software bundled in the install OR do we keep our admin kit, download workstation mp3 and tell the admin kit where the mp3 setup files reside?

glad to hear what others are going through before we decide to deploy to everyone. running from lynch mobs is never fun!

thanks for the help.

You can run admin kit 8, network agent 8, and MP3, that is what I changed to. Download the MP3 exes from the Kaspersky website. In the admin kit, go to Repositories > Installation packages and make a new package. Make a task to remove MP4 from specific computers. You can then make the Task for specific computers to deploy MP3 or make a standalone exe with you lic file and settings.

You will need to set up MP3 policies, task, etc in addition to the existing MP4 versions. The clients with MP4 will be managed by the MP4 policies and the clients with MP3 will be managed by the MP3 policies. I just finished getting everyone to MP3, had a few small issues with 4/38 installs. All of the issues were fixed with an extra reboot or install over the top with MP3. The only thing I miss from MP4 is there is more fine grained lock control of the settings but MP3 still works fine.

You can add a new report about what versions are installed on what clients to help keep track of the change.

I opened a support ticket. They had me do this.

Within the Workstation policy settings, please try disabling Self Defense temporarily.
Open the WKS policy’s properties, Select Settings tab.
Drop down to Options.
Uncheck the Enable Self Defense option.
Apply the change and enforce to the clients.


This seems to work. Still need to do more testing , but what a difference!

thanks br.admin for that tip. I'll see if we decide to downgrade to mp3 or stick with mp4. We only have a few deployments so we'll see.

hunger mountain, did they tell you what does that "self defense" option do? I pressed F1 on that window but dont get any help info, even searched on their help file and nothing comes up for this?!?!? What differense do you see exactly? Improvement in all the apps mentioned in your previous post?

thanks again.


ps- as a side note, I was able to disable the java helper from ie8. In GP go to either computer or user (I chose computer) Administrative Templates - Windows Components - Internet Explorer - Security Features - Add-on Management and open the "Add-on List" policy.

There I entered the CLSID of java helper (I am runnning 1.6.0_16) which is {DBC80044-A445-435B-BC74-9C25C1C588A9} and entered a "0" (zero) to disable it from starting. Tested and it works. Disables the helper add-on and IE8 works correctly now.

This worked perfectly - thanks Hunger Mountain!!!

Upgrade and deployment of MP4 has really been a hassle, and it definitely seems buggy. I'm too far along to turn back now, so hopefully they will work out some of these bugs quickly. If you haven't upgraded yet I would highly recommend waiting a month or two for them to work out the issues.

-Brad G

It seems as though you can re-enable the feature after IE8 has been launched. This is on a per user basis, for us it is not practical as we have many roaming users.

The other big issue i am finding with MP4 is that you must be logged into the machine when the push install happens so you can answer yes to the prompts. So much for automated installs.

This version is very buggy.

My understanding of Self Defense is that this just protects the kaspersky program from being altered by virus, malware, etc. I could be wrong though. I just sent this same question to the Kaspersky tech.

With the option disabled i mentioned before, the computer and all programs returned to normal. Of course the machine performs best with no antivirus, however i am now able to use programs without waiting 10-20 seconds and i am not seeing CPU utilization take 100% of both cores for that time. Before i found this fix, machines with MP4 were almost unusable.

In conversation with tech support, he confirmed i was correct in the role of self defense. He says that the software developers are aware of this issue.
Needless to say im scratching my head as to why this was released from beta!

hunger mountain, thanks for keeping us up to date with your findings.

leaning towards mp3 deployment...

Hunger Mountain thanks for the help. I upgraded from Admin Kit 6 to Admin Kit 8 about two weeks ago and started seeing speed problems with our SQL server. I ruled out the AV as if I disabled it the problem was still there and then on Sat. I found this thread and downgraded to MP3 which helped but I still had some hit or miss problems. Yesterday I opened a case with support and was given this as a fix.

After initial upgrade of the Administration kit, ghost or orphaned tasks can cause the Administration Kit console to lock up.
They can run this utility klrifix2.exe to clean the old tasks from the AK 8.0

You can do the following:

1. Decompress the attached files to some folder on your AdminKit server computer
2. Run klrifix2.exe.
3. Save the file "result.txt" which will be created by klrifix2.exe in the current folder.
4. Check if your AK server service is started and try to connect to AdminKit server by AdminKit console.

When that is done running, review the results.txt (this will create itself in the same folder as the tool)
Everything should read OK.

I was also sent the file klrfix2.exe and followed these instructions and then upgraded all clients back to MP4. Most seemed ok mut again some hit or miss with the speed issue. I just did as you said and turned of the self defense and all seems happy now.

I am also supprised that this was released from beta with this many issues, and issues that cause major problems.

Hopefully this is a one time slip on their part.

We are seeing extreme slowdowns on a particular (important) internal web app whenever javascript tries to open a popup. it does not appear unless the javascript tries to do a popup. I have exclusions for the internal webserver in the web antivirus portion of the policy.

I have dozens of machines running XP with IE7 and IE8 seeing the issue, but all three of our Windows 7 machines (all IE8 of course) are not seeing the slowness. Until I found this thread I had not considered KAV to be the culprit, and I'm still skeptical since I have some machines that are still fine even though they are running the same version (1212) with the same policy enforced (from KAK8).

Is there any positive way to eliminate all javascript activity from this single internal (apache) webserver from KAV's concern?

Is the site excluded in Web AntiVirus module?

Additional information. This slowness on javascript initiated popups was happening with 11 different version of java, from 1.5.6 to 1.6.17. I disabled the "self defense" feature in KAV and all my clients are fine, but of course my AV protection is handicapped.

But until there's a new version of MP4 there should be a way to exclude these command from KAV's scanner. I'd still like to know how.

Yes, but one of the things that made me think my issue was not related to KAV (one of many) was that I disabled web antivirus completely via policy in a test group and it did not help. The component that 'fixed" the issue was the "self defense" as others discovered.

You can 'exclude' things from Self-Defense now if you add a Trusted application and check the option for 'Allow interaction with application interface' - perhaps try that to see if that works?

Thanks for the advice and info but...

What application should I choose for "javascript", and how would I exempt it when called from our internal (Apache/AIX) webserver without exempting all javascript from the intardnet?

Are there any updates on these performance issues. For us, IE8 is running like a dog but I have not had time to look into why. Should we disable self defence or add the JAVA exe to the trusted application? I don't like the idea of doing either but the users are complaining.

Hi Hunger Mountain,

Turning off 'Self defense' solved my PC's performance problems. Runs fine now!
Hope they fix the issue though, Self Defense is an option I'd rather have on.

ive just installed KAV 6.0.4.1212 but i dont have any problem with IE8(with Java enabled) or other application.... i use Win XP SP3

We ended up turning off Self Defence and IE is now working. The users slowed down on the complaints.