Help - Search - Members
Full Version: Antivirus application not installed
Kaspersky Lab Forum > English User Forum > Protection for Small and Medium Businesses
MrRAlan
If I install KAV on a computer first and THEN install the Network Agent on the computer, the computer is not managable from the Admin Kit. I can see it in the Admin Kit but the Computer status description reads "Antivirus application not installed". A klnagchk reports...

Starting utility 'klnagchk'...
Checking command line options...OK
Initializing basic libraries...OK
Current host is HOST\DL-D630-533


Reading the settings...OK
Settings verification...OK
Network Agent settings:
Administration Server address: '192.168.168.100'
Use SSL connection: 1
Numbers of the Administration server SSL ports: '13000'
Numbers of the Administration server ports: '14000'
Administration Server certificate: available
Use proxy server: 0
Open UDP port: 1
Numbers of UDP ports: '15000'
Synchronization period, min.: 15
Connection timeout, sec.: 30
Send/receive timeout, sec.: 180

Attempt to connect to the Administration server...OK
Attempt to connect to the Network Agent...OK
Administration Agent is running
Receiving the Network Agent's statistical data...OK
Network Agent's statistical data:
Total number of synchronization requests: 16
The number of successful synchronization requests: 16
Total number of synchronizations: 2
The number of successful syncrhonizations: 2
Date/time of the last request for synchronization:6/2/2008 3:42:54 PM GMT (6/2/2008 11:42:54 AM)


"Syncronize" does NOT error but the Admin Kit still does not recognize the installed KAV. The only way I can get it to recogize it is to re-deploy KAV from the Admin Kit. How can I fix this? I am using Net Agent 6.0.1591 and KAV 6.0.3.837.
Helmut
Is the client cloned? If yes you can fix it with klmover -dupfix
MrRAlan
QUOTE(Helmut @ 3.06.2008 01:03) *
Is the client cloned? If yes you can fix it with klmover -dupfix

No, it's not cloned.
Tybilly
Hello,

Check locally on the affected computer values of registry key where Administration Agent store information about the current client antivirus protection status, like described on this FAQ.

If the status defined is correct, then it's a communication issue. In this case check that you are synchronizing and viewing the right computer. Have a look in the network groups and perhaps you will find a similar hot named HOST\DL-D630-533~1

If the status is not correct, try to reboot the computer to reinitialize KL Network Agent or reintall this application.

MrRAlan
Ok. The registry key HKEY_LOCAL_MACHINE\SOFTWARE\KasperskyLab\ Components\34\1103\1.0.0.0\Statistics\AVState\Protection_AvInstalled is set to 0. This should be a 1. I change it to a 1 but then a sync resets it to 0. ?????

I do not have any similar host names in the database and the computer has been re-booted many times. This happens every time I install the agent on a device which already has the AV.
andkaz
QUOTE(MrRAlan @ 3.06.2008 17:49) *
Ok. The registry key HKEY_LOCAL_MACHINE\SOFTWARE\KasperskyLab\ Components\34\1103\1.0.0.0\Statistics\AVState\Protection_AvInstalled is set to 0. This should be a 1. I change it to a 1 but then a sync resets it to 0. ?????

I do not have any similar host names in the database and the computer has been re-booted many times. This happens every time I install the agent on a device which already has the AV.



What is contents of Protection_BasesDate value ?
MrRAlan
QUOTE(andkaz @ 3.06.2008 11:21) *
What is contents of Protection_BasesDate value ?

There is nothing in this value.
andkaz
QUOTE(MrRAlan @ 3.06.2008 19:44) *
There is nothing in this value.



That's the reason. Ant-virus without anti-virus bases is not considered to be an antivirus application. Try to update anti-virus bases.
MrRAlan
QUOTE(andkaz @ 3.06.2008 11:54) *
That's the reason. Ant-virus without anti-virus bases is not considered to be an antivirus application. Try to update anti-virus bases.

How do I do that? The client just did an update. Why did the bases not get updated? I have Update Application Modules checked.
andkaz
QUOTE(MrRAlan @ 3.06.2008 20:01) *
How do I do that? The client just did an update. Why did the bases not get updated? I have Update Application Modules checked.



Are there any errors in the Kasperaky Event Log on the problem computer ?
MrRAlan
I have this warning...



Event Type: Warning
Event Source: klnagent
Event Category: None
Event ID: 1
Date: 6/3/2008
Time: 10:16:41 AM
User: NT AUTHORITY\SYSTEM
Computer: DL-D630-533
Description:
Failed to connect to the administration server

Transport level error communicating with 'http://192.168.168.100:13000': timeout expired.

Error information: 1255/0 (Error was occured in trasnport layer. Error code - '0'.), O:\CS AdminKit\development2\transport\trf\socket\transfersocket.cpp, 435



But this is not at the time when an update occurs. This happens when I start my laptop without a network connection to the admin kit.
andkaz
QUOTE(MrRAlan @ 3.06.2008 20:27) *
I have this warning...
Event Type: Warning
Event Source: klnagent
Event Category: None
Event ID: 1
Date: 6/3/2008
Time: 10:16:41 AM
User: NT AUTHORITY\SYSTEM
Computer: DL-D630-533
Description:
Failed to connect to the administration server

Transport level error communicating with 'http://192.168.168.100:13000': timeout expired.

Error information: 1255/0 (Error was occured in trasnport layer. Error code - '0'.), O:\CS AdminKit\development2\transport\trf\socket\transfersocket.cpp, 435
But this is not at the time when an update occurs. This happens when I start my laptop without a network connection to the admin kit.


And what about errors ?
MrRAlan
QUOTE(andkaz @ 3.06.2008 12:30) *
And what about errors ?

None. Just that warning.
Tybilly
What about the real protection state of KAV WKS on this computer? Is it running without any errors ?
Is it a default installation of the product ? Are you sure the product has been deployed ?

Sometimes it can be so simple... wink.gif
andkaz
QUOTE(MrRAlan @ 3.06.2008 20:34) *
None. Just that warning.


Please, send to me contents of directory "Program Files\Common Files\Kaspersky Lab\SETTINGS" from the problem computer. And what is state of anti-virus, is it running ?
MrRAlan
QUOTE(andkaz @ 4.06.2008 03:14) *
Please, send to me contents of directory "Program Files\Common Files\Kaspersky Lab\SETTINGS" from the problem computer. And what is state of anti-virus, is it running ?

The requested folder has been sent to you in a PM. Anti-virus is running without errors. It reads "All protection components are running".
andkaz
QUOTE(MrRAlan @ 4.06.2008 15:54) *
The requested folder has been sent to you in a PM. Anti-virus is running without errors. It reads "All protection components are running".


It seems that you didn't install Administration KIt integration module as a part of Anti-virus application.
MrRAlan
QUOTE(andkaz @ 4.06.2008 09:00) *
It seems that you didn't install Administration KIt integration module as a part of Anti-virus application.


Do mean the highlighted option in the attached photo?

I always thought that this component WAS the Network Agent so we never installed it. We figured we would install the network agent later when needed.
andkaz
QUOTE(MrRAlan @ 4.06.2008 17:12) *
Do mean the highlighted option in the attached photo?

I always thought that this component WAS the Network Agent so we never installed it. We figured we would install the network agent later when needed.


This component is intergration module for Network Agent. Network Agent can interact with Ant-virus via this component.
MrRAlan
Ok. I'm glad I know that. Thanks for solving this for us. smile.gif
Dan Hulme
I am running into a similar problem. The network agent is listed as installed, but antivirus is not (even though it IS running on client).

However, I am installing from the administration kit, but still no dice. I did install once locally, but I uninstalled completely, removed all folders and registry entries, and tried to install again (about 5 times now), and it still does not work. The anti-virus is indeed installed, but not with my policy settings, and the administration kit claims it is not installed.

Because I installed remotely, I know no way to verify the "integration module" is installed. However, it should install automatically if deployed from the admin kit, correct?

I have tried everything in this thread, but no luck. I have 60 computers working, and one (the one I happened to install on manually at the beginning) that isn't. I just upgraded to kasp6.0.1710_adminkiten.exe, but it didn't help.

Firewall is off. Output of klnagchk:

QUOTE
Starting utility 'klnagchk'...
Checking command line options...OK
Initializing basic libraries...OK
Current host is IEM\IEM-BILLP


Reading the settings...OK
Settings verification...OK
Network Agent settings:
Administration Server address: '192.168.3.17'
Use SSL connection: 1
Numbers of the Administration server SSL ports: '13000'
Numbers of the Administration server ports: '14000'
Administration Server certificate: available
Use proxy server: 0
Open UDP port: 1
Numbers of UDP ports: '15000'
Synchronization period, min.: 15
Connection timeout, sec.: 30
Send/receive timeout, sec.: 180

Attempt to connect to the Administration server...OK
Attempt to connect to the Network Agent...OK
Administration Agent is running
Receiving the Network Agent's statistical data...OK
Network Agent's statistical data:
Total number of synchronization requests: 1
The number of successful synchronization requests: 1
Total number of synchronizations: 3
The number of successful syncrhonizations: 3
Date/time of the last request for synchronization:10/15/2008 12:50:16 AM GMT (10/14/2008 5:50:16 PM)


Deinitializing basic libraries...OK


The registry on the client is as follows:

QUOTE
Protection_AvInstalled: 0
Protection_AvRunning: 0
Protection_BasesDate: <blank>
Protection_HasRtp: 1
Protection_LastConnected: 15-10-2008 01-05-17
Protection_LastFscan: <blank>
Protection_RtpState: 1


I'm very frustrated with this, it seems something persists on the client, but I have uninstalled everything and still no luck!

Thanks,

Dan
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.