Hi,

i have some strange Problems since of the deploy of KAV 6.0.4 and AdminKit 8/Agent 8:

On Windows 7 Machines with SBS 2008 in the back i had on troubles at all.
But with Windows XP SP3 and SBS 2003 R2 i have similar problems at all locations.

- Application speed is slow, especialy opening Documents from the Server with Word, Excel, Adobe Reader.
- Printing speed is very slow form Office (Networkprinter RAW/LPR with SNMP Monitoring).
- Printing speed is very very slow from Adobe Reader 9 (same Printer)
- Problems with Nero and RZL (solved with trustable zone/application)

If i turn off the proactive Protection, than application speed is normal again, expect from printing from adobe reader or acrobat. If i turn of the whole kaspersky, printing speed from acrobat is slow too. If i uninstall Kaspersky and Agent, than printing speed is back to normal again.

Any Ideas?

thx,
Thomas

Another nice feature: If Firewall is enabled and set to minimum security, microsoft active sync 4.5 won't find the connected smartphone...
If set to allow all: it works...

If XP, I would suggest uninstalling/reinstalling mp4 without the NDIS5 filter, that gave me stronger performance in the printing department.

and see http://forum.kaspersky.com/index.php?showt...p;#entry1131828

Marty

I am having the same type of problem with printing. I can't get my machines to print unless I remove Kaspersky completely.

I think i have a result now:

I didn´t uninstall KAV 6.0.4.
I modified the package so that NDIS driver is skipped.
I did a database update with the package.
I modified the install job to do the install job, even if the appliction is installed on the client.
I pushed the image to the clients.

Some Clients had been tesed after the install, and had a better performance.
I did the update on 10 servers with about 70 Clients. Tomorrow i will know if that has worked for all clients.
I had install troubles on about 20 Clients. There i had to do a second push install after a restat. Worked fine.
About 30 Clients will be updated automaticaly tomorrow at 10am GMT+1 (CET).

I will report around 12 am GMT+1 (CET)..

Even now i have disabled proactive protection and set the firewall to no limitation for normal domain rule.

I wonder if uninstalling the NDIS drive has any effect on some kaspersky services....


regards,
Thomas

Another Customer noticed slow printing speed and dialog. Pushing the client without the NDIS driver did work here.
All other (Which i have updated yesterday) seem to work too...

Under trusted applications, can I just put in spoolsv.exe or do I need the entire path the file?

Example: %SystemRoot%\system32\spoolsv.exe



Printing is still crawling. I completely removed KAV from the server and it made no difference. It's the client.

Any more ideas? This is crazy.

Push the Client without NDIS, this did work for me on about 70 clients. On XP 32 this should make no difference. And on Win7 x64 the NDIS seems to make no problem...

I did that. I created a new package without NDIS, uninstalled KAV completely, then installed the package. Still have slow printing. I will try turning off all of KAV accept email AV.

Probably not going to work. The only solution I've found is to disable the KAV filter driver, which breaks the whole thing anyway. Performance problems will remain even if you exit KAV and no avp.exe processes are running.

File scan speed doesn't seem to be the issue, registry access does.

I've just moved 300 odd client back to MP3.

So you went back to Version 6.0.3.837 and everything is fine? I am new to KAV, so of course I installed Version 6.0.4.1212.

Great thread, I've been really stressing about this. Having only used Kaspersky for about a month, can anyone guide me to update the install package ?

I can see my package under Administration Server -> Repositories -> Installation Packages but looking at the properties, I couldnt find anything to switch off NDIS.

I have a similar issue.

The machines used to have trend on them and was very poorly patched.

It seems like every processor intensive task is now magnified, e.g. Opening IE takes 10-5 seconds instead of 3-5 and the cpu hits 100% during this time where before it would take 20-30% cpu for the duration.

Other processes like explorer.exe, winvnc.exe, taskmanager.exe also take up far more cpu cycles than before - (which results in a laggy pc.)

Originally we removed MP4 and installed XP SP3 will all of the hotfixes and re-installed, this seemed to help quite a lot but some machines were still playing up with the above symptoms.

The answer seems to be to not install the NDIS filter, which obviously is a step back in protection.

I have one guinee pig machine out there currently without NDIS, I will report back once it has been running for a few days with feedback

Install without the NDIS driver only helped slightly.

I had to switch three machines back to NOD32. So far KAV is a total disaster because of slow printing. No problems with NOD32 - printing is full speed again.

Right now, as a new KAV customer I am very disappointed with this product for corp use. I though Symantec Corp AV was a pain.

I found it!
Right Click the install package, select Properties, then select the Properties tab then hit Compatibility and there's a tick box to skip the NDIS install.

My problem now is manually installing it from all the desktops. I cant find any automated way to do this, what a nightmare! I feel the pain chriskurn has. We cut over from McAfee, did all our testing with Admin console 6 then when we went live found version 8. I though it was a dream to roll out, and now I've got weeks of pain because of this problem.

I would have thought someone at Kaspersky would have realised and released a patch or a fix of some kind already ?!?!

If we hadnt paid for it, I probably wouldnt be re-installing it after I manually remove it from all the desktops.

Yes since i upgraded my clients system to MP4 it has just been a total disaster...applications crashing slow everything i'm going to go back to MP3...DO NOT USE MP4
I used to love KAV because it had such a small footprint now its worst than norton...

+1 for that..

Does anyone from Kaspersky Labs reads this thread?
Can we get an official answer for this problem?

No-one seems to reply/help from Kaspersky, it's a little dissapointing

I have some problems in all customer with MP4 .

I disabled Self Defense , performance is better. What is the problem with Self Defense in KAV MP4?

Kaspersky Team any solution???

I think Kaspersky has been bought out by a diffrent company...hence the poor service and terrible software lately, they used to be very good...too bad.
When my license is up i'm taking my business somewhere else...

Hi Exie,

You could create deinstallation taks, to uninstall Workstation/Server MP4. Run it. Once done, reisntalled with the modified package.

As for the support, if i may, I would suggest that anyone still having performance problem to either report to your local distributor, or email to the official kaspersky helpdesk.

how do you make a uninstall task? What modifications need to be made to make it run properly without compromising security?

Hi Chan GG,



Sounds great! I cant find how to make a deinstallation task though ? I was actually thinking about changing to an MSI package and using GPO to deploy it, then I might be able to remove the group to force an un-install when the GPO is out of scope. But this looks like a daunting project in itself.

I've spent most of today walking around the local site doing these PC's and they're all coming good. But it's going to take a LONG time to do 4 other sites remotely.



I did actually try this, Kaspersky helpdesk told me to call "Microbe" so I called the 1300 number for them and they said to call Kaspersky. So that really went nowhere for me.

I havent tried emailling the helpdesk though, if I can get it un-installed and re-deployed then hopefully we'll be fine.

Hi,

Creating a deinstallation task
1) Create a new task
2) Give it a name
3) Task Type: Kaspersky Administration Kit -> Advanced -> Product deinstallation task
4) Select KAV 6.0 Workstation or Server MP4 according to your need
5) Use Network Agent
6) Restart: Prompt
7) If creating for specific computers: Select your machines here
8) Account: Add the necessary account
9) Schedule up to you

Then run this task to uninstall. Once finish, run a new deployment task with package without NDIS
You might want to try a few machine first. If successful, deploy in batches
During the period when the product is uninstall and before it is re-deployed, those machines will not be protected...


An alternative (I heard from someone that it work, I never tried it. Use at your own risk)
1) Create a new package without the NDIS driver (Goto Properties of the package -> Properties -> Compatibility -> check "Do not install the NDIS5 driver)
2) Deploy this package to existing machine with NDIS driver
I don't think will work though...

Can one not just unbind the NDIS driver from the NIC?

I keep getting a common denominator turning up on my clients systems.

All the one where I am seeing issues use the ISA Firewall client on the workstations, I was wondering if this was just a coincidence?

Does anyone else run ISA Firewall Client??

After 5 Days of work my users notice that the system slows down, even if the ndis driver isn´t installed....
Not all of my users, but some...
Trying to push the clients only with the file scanning engine on sites which have UTM Firewalls...

After redistributing the client with or without the advanced features, the users report fast usability. Seems like KAV is getting slow over time. Interesting, that this happens not on all machines. Some stay fast longer than other...

@ John: i don´t have any Firewall Client on all machines, expect the standard Win XP Sp3 Client Firewall. I use Fortigate UTM Firewalls as gateway.

I agree with this assessment. I'm receiving complaints from users about performance again today, about a week after I removed the NDIS filter.


All of my users run ISA Firewall Client.

Thanks to Jeremiah @ Kaspersky Support, we have a resolution to the performance issues seen with the MP4 release. Follow the steps outlined in the PDF I uploaded to Scribd. ** You also have to disable Self Defense for 8 hours - you can push this change through the Workstation Policy **

http://www.scribd.com/doc/22417910

Resolves the Following Issues
System Slowdowns
Print Slowdowns
Office Document and PDF Slowdowns
Slow Network Access
Hanging IE and Office Apps
Decreased Internet upload speed

FYI - My client had 10 PCs affected by performance issues, and this resolved the problem

I hope you're right with this solution. We try it .....

THX for the Info!

I´ll test it today and tomorrow....
We´ll see...

Is this a temporary workaround before a patch ? Will there be a patch / update to address this issue ?

I think there will be a patch. The question is, when will the patch be released.
I have no time to wait for the patch.

I did a phonecall to kaspersky, and they toled me, that it would be better to user MP3..

I will test the scenario today, and have a look if the solution from brightedge works..
If not, i have to go back to MP3.

First Report for today:

Tried with NDIS Driver, which caused different Results: Some Clients reported Printing Issues again. Some said it´s fast.
I am now trying the solution without NDIS Driver.

I can´t find any difference on Windows 7. Again, only Windows XP is slowed down.

seems like brightedges solution is working (only without NDIS)....

We'll see in a few days if its stable...

One day after the solution published by brightedge, so far, so good. I have nine workstations testing this solution, and no one has yet complained. These same workstations had the NDIS filter removed a week ago, so I can't claim for certain whether one solution or the other has been successful. However, all of these clients are happy, so I am happy.

I have been running a pilot with 40+ users, one user did notice performance problems in IE and using the computer overall, the KAV tech's solution is what we have in place for the most part, save the sav.dll exception, we have placed this on the machine policy for mp4 and I have asked the user to notify me at the end of the day what performance issues are present now.

Just got word from my client that the fix still appears to be working. No one has noticed any performance problems since it was implemented.

same here...
adapted nealy 80 clients.. we'll see..

For us the fix seems to be working at 6 sites - however we have put on hold upgrading another 50+ sites until this is resolved. It would be better if a permanent fix was delivered (and i would hope promptly by Kaspersky).

Too many unknowns & erratic behaviour with MP4. We have even found random behaviour with Vista (SP1) clients however when upgrading the workstation to SP2 it seems to stabalise the behavior. Yet it all worked fine in MP3. The other stange aspect is that whilst performance of workstations are severely effected CPU & memory usuage seems to be fine...it all seems to be I/O.

Strange Stuff!

Please try to deactivate iChecker and iSwift in the settings of File Anti-Virus and Virus scan task and reboot the machine. Is I/O performance ok after changing the settings?

it works for us too...

i am happy that all my realy big customers use terminal server and have KAV EE working...

Even IS2010 makes many troubles. We downgraded most single users back to 2009...

hi, I've just read the whole topic and I've same issue on my lan (250 pc's). It' s a randomic issue, not all the client (xp 32bit sp2 and sp3) are affected by the slow down.
My actual workaround was to repackage Mp4 WITOHUT the Access Control module, disinstalled mp4, reinstalled mp4.
All seems to go well.

Notice:
I've never user the Access Control, it was disable by policy. Btw, only the reinstallation without the Access Control module resolved the issue. Imho, disabling ndis filter is a "last chance" choice, because you lose a lot of security. It preferable to switch back to MP3.

Hi having the same problems! slow network logins, slow propgram opening. I have done the above and it has made a small about of differants we have a 700 user network!

My answer corresponded to the problem of adamrippon.

Did you already followed the steps mentioned here: http://forum.kaspersky.com/index.php?showt...t&p=1160868 ?

i have taken off the iSwift in the settings of File Anti-Virus and Virus scan task and does not appear to have made much off a differance. We have removed KAV off a workstation and things go back to normal!

Please follow the steps mentioned here: http://forum.kaspersky.com/index.php?showt...t&p=1160868 ?

yeah done all that and still the same!

Interesting! For me this solution did work... let´s see for how long....

Even with W7 i notice printing much faster than bevore....