I'm working with a machine running Windows Server 2003 SP2, and KAV for Windows Server 6.0.3.837. I've been having all sorts of problems and I finally tracked the issue to KAV, and specifically klif.sys.

Here's what's going on:


1. Files transferred from client to server are extremely slow, the network activity at some point stops, the server's hard drive continues to work furiously, the whole time the server is non-responsive, and eventually, the copy fails because the server is non-responsive long enough that it looks like it dissappears from the network. Small files can get through, but the HDD still works harder than it should, and the server is still non-responsive during the copy and for about 30 seconds afterwards.

2. Local file copies take much longer than they should as well, with the same non-responsive result during and for a short while after the copy.

3. Booting in Safe Mode does not help anything.

4. Disabling both KAV as well as klif.sys completely resolves the issue.


In short, KAV is completely unuseable in its current state. Does anyone know what's causing this and whether there's a fix?

Hello,
Do you have "Update application modules" enabled?? Disable it.
Perhaps changing "klif.sys" to an older one could fix your problem.
Kind regards!

I'm always reluctant to roll back to an earlier version - as I don't know what other fixes I'm giving up on in order to do so.

For what it's worth, the current version of klif.sys on the server is 6.12.10.320.

Hi,
you said that by disabling both, it works...have you tried to disable them selectively?
Did you have another AV on that server before installing Kaspersky solution?
M

I tried disabling KAV without disabling klif.sys - in fact, that's what Safe Mode does. And the problem still existed, which is why I feel relatively certain that the issue is related to klif.sys.

And no, this is a fresh build, which was installed from scratch only a couple of weeks ago - this version of KAV was the first and only AV app ever installed on this build.