I have this installation running smoothly for many months:

Kaspersky Admin Server on 2003.
Kaspersky for file servers on 4 different servers (2000 and 2003 version)
Kaspersky for workstation on almost 50 client PCs.

I have set the Admin server to send me an email whenever there is a problem.

Starting about 4 hours ago, I keep getting the following email every hour or so for all the servers:

Event Erreur lors de la mise à jour du logiciel happened on computer BACKUPSRV in the domain MYCLIENTDOMAIN at Thu Aug 21 14:14:14 2008
Erreur de mise à jour : Privilèges insuffisants pour l'exécution de l'opération sur le fichier.

Event Update error happened on computer DATASRV in the domain MYCLIENTDOMAIN at Thu Aug 21 14:14:08 2008
Update error: Not enough rights for file operation.

Event Update error happened on computer INGSERVER in the domain MYCLIENTDOMAIN at Thu Aug 21 14:13:30 2008
Update error: Not enough rights for file operation.

Event Update error happened on computer MAINSRV in the domain MYCLIENTDOMAIN at Thu Aug 21 14:04:04 2008
Update error: Not enough rights for file operation.

Nothing has been changed on the servers recently (I'm not even at my client's office but at another client).

Is there something wrong in a recent virus definition update????????????
The first message I received like that was at 11:16am today.

Thanks in advance

US Support states the developers are working on the issue.

Where did you get this information? Do you have a link to wherever they say this so that I had this to my bookmarks (if appropriate) and check the status?

Thanks.

Wow I certainly hope this is it. I've been getting non stop emails from the KAK saying that the update fails because of rights. The error is only happening on my servers and is for Updater.dll...

I was doing some other network stuff after this happened and got scared that it was something I did (completly unrelated to Windows at all).

I'd be interested in seeing if this is documented anywhere, either -- I'm going to go jump on chat quick.

Just got off the phone with a Kaspersky Tech and they acknowledged it was a problem with Windows Server patch. They've got it up to developers now and it's supposed to come out in the next signature update.

This isn't just a Windows Server thing, is it? I have 600 workstations that have been doing the same thing since 11:13am est.

Sorry, that should've said "Update Server". It is localized to my servers (workstations are not reporting this problem).

Our workstations have started crashing, the servers are waiting for a reboot and they may start also.

Workstation errors are:
Error Signature;

szAppName : avp.exe szAppVer : 6.0.3.844 szModName : PrUpdate.ppl
szModVer : 6.0.3.852 offset : 0000c71c

My servers are doing this as well. In addition, my workstations are doing it also. I hope this gets fixed soon.

It looks like they put out a module update. I found the sigs get updated and the updater works if you don't download the binary updates. At least you can get the sigs.

Deja Vu 8 months later.

Recently I migrated to KAV and today I have problems with servers and 1000 workstations.
No answer from KAV to this issue, I dont see a solution for this problem, I tried rollback of updates and the problem persists
And the time of response for this issue is very long.
Jorge

I am in the midst of converting from McAfee to KAV. The one thing I was worried about is that KAV automatically updates the system components of program. This is a case that Kaspersky should only provide auto updates to the sigs and not to the program. They should be downloaded separately and tested before deploying to 1000 workstations automatically.

This last weekend we migrate from Symantec to KAV, but today we have many problems!!!! one update corrupted everything.
Now I know that the best idea is to test the sign before deploy it.

You can also just download the sigs and not update the application modules.

Is anyone else still having update problems? I'm still getting update does not have permission errors... I'm away from the site now (2 hours away) and if something physically goes down I'm going to be in a rut. Hopefully this gets fixed fast...

The problem persists for my servers and workstation, KAV does not release a final patch for this problem.

Yesterday I was getting "Not enough rights for file operation" errors but this morning I'm just getting errors with no description!

*Twiddles Thumbs*

Come on Guys, surely there is a workaround or fix for this by this stage.

I think the problem update was released about 20 hours ago.

Still no fix for this? Would someone from Kaspersky please comment?

Alan, KAV has this article http://support.kaspersky.com/wks6mp3/error?qid=208279891
But there is no fix! there is a workaround and is manually for everyone PC or server.
It's incredible, almost 24 hours of problems, and Kaspersky doesnt give us a formal response neither a final solution.

They have to be joking about this fix.

I have 127 computers to do that on. Spread over 29 locations.

Who do i send that bill to.

Anyone got anything to automate this using Admin server?

Today an update/fix for Adminkit will be released. This update makes remote "fixing" possible. None of you must install/uninstall locally the product. So please stay tuned.

That's what they told me on the phone almost 24 hours ago -- they told me a fix would be out with the next sig release, which came and went last night with no update.


[Edit] I just forced the admin kit to update, the server patch seems to be out. I just told one of my servers to do a module update and it was able to update the Updater.dll successfully now.

[Edit again] Guess I spoke too soon... The client program doesn't report the error, but the admin kit sure is...

Grrr.

Will this workaround be required to get this fixed, or will they release a patch to fix it? I received this link this morning pointing to the same workaround... http://www.kaspersky.com/technews?id=203038735

Going by this fix, why is it required to reinstall the software over the old installation? Why can't you just stop the services, overwrite the files from the archive, and restart the services? I tested it on 1 workstation just to see if it would work, and it was able to update successfully after. Aside from this being a ridiculous fix, any thoughts on whether overwriting the files without reinstall will have any impact on the installation?

Waaa, The users started to call the helpdesk center.
I tried the reinstallation and it works, but it's manually, I will wait the fix, I will not reinstall almost 1k computers.

Ditto. I've got 45+ servers, 1400 clients over 8 buildings. I am not about to start going through and doing this manually.

Luckly for me, we just deployed KAV beginning of this month, and I hadn't rolled out the update system just yet (Got the clients installed, we did some manual updates but other than that, no automatic updates just yet -- it doesnt look like it hit many of my clients.

I'm just mind boggled that the corporate users weren't notified of the error before hand, and given some solutions or procedures to stop the spread of the damage.

[Edit] I just got off the phone with tech support and it's going to be pushed from the admin kit out. He mentioned it was an executable -- so I don't know if I should take that to mean I'll have to add it to the remote install list, or something, and force it out, or if it will just come out with the updates...

Very frustrating. They did add me to the e-mail list, however... I don't know why they don't do that, anyways. They have our e-mail addresses..

How do we get added to "the email list"? This mess is an extremely unprofessional way to doing business. It started with the same error message from my clients yesterday morning. These guys are a rather clever sort and I would think they would have pushed the fix by now.

Kidbyte

Caveat to everyone out there: Be very, very careful if you choose to 'reinstall via the Admin Kit'.

I used an install job that had worked in the past and was configed for no reboot. I ran it. Of the 200 workstations that I tested on, over 50 rebooted without giving the user any chance to abort or save their work. On the vast majority of workstations, users saw several different error messages. On about 20 workstations, the computer froze completely and had to be manually rebooted.

Not very pretty. I guess I'm waiting too (assuming I'm not fired for this...)

The KAV guys may be busy digging foxholes in georgia right now.......

10 minutes ago I talked with KL in US, they comment me the fix will release in about an hour.

At 17.21 (BST) on a Friday afternoon that really helps me!

Hopefully it'll be an automatic solution as I wont be back till Tuesday (bank holiday)

Good luck all

Totally awesome! Just gives me enough time to go for lunch! Thanks so much for the info!

Here is 11:25am, still waiting...

You call Kaspersky Support and ask about the update bug. They'll ask for your name and e-mail then.



They told me that yesterday afternoon. They told me the exact same thing almost 1.5 hours ago now. It's not that I don't mind waiting for the RIGHT fix, but at least give us a good time frame here. If it's going to be 4 PM EST let me know that.

Another reason to wait for the official patch:

Reinstalling Kaspersky using the admin kit over the top of the original not only causes machines to reboot, it doesn't actually seem to fix the referenced memory error problem in avp.exe.

Turning off Kaspersky updates in the admin kit does seem to reduce the number of errors that do appear, making me think that it is the update module that is crashing (stop me if you all already figured this stuff out). I have no definitive proof of this though.

Hello,

Sorry for the trouble, the problem should be fixed shortly.

Hello,

This is to follow up on a resolution for the recent issue that you reported to Kaspersky Lab. We have now have a patch available that will resolve this issues. This patch will solve the update issue automatically and it can be installed in one of the following ways: Instructions are as follows:

Locally:

For product version 8.0.3.837 download archive patches.zip, extract contents and execute file kav6patch837.exe
For product version 8.0.3.830 download archive patches.zip, extract and execute file kav6patch830.exe

Before running the patch on the computer please make sure that the version of the installed product is the same as the number in the name of the file that you have downloaded.

Remotely (with the help of Administration Kit, using group policy):

For product version 8.0.3.837 download archive patches.zip, extract contents, create deployment task for file kav6patch837.exe with parameter /S, run the task

For product version 8.0.3.830 download archive patches.zip, extract contents, and create deployment task for file kav6patch830.exe with parameter /S, run the task

When creating the task, it is important to observe the syntax of the command, it must be exactly like kav6patch***.exe /S (with capital /S).

To create a deployment task:
Open the Administration Kit
Click on the Remote Install Folder
Click on “Add an Installation Package”
Click Next
Name the task
Click Next
Change the drop down menu to “Make installation package for specified executable file”
Click on Browse
Browse to the location of the appropriate file (for example kav6patch837.exe)
Click on the file and click Open
Enter /S in the Executable command line section
Click Next
Click Finish
Right click your package and choose Install to begin the installation wizard where you will add the computers to be installed to
After the deployment wizard is complete, click on global tasks
Right click your task and choose Start to begin the process
After completing the task updates will now be successful
You will need to eventually reboot the computers, although this can be delayed to an appropriate time

After running the patch on computers running Windows Vista OS, in some cases KAV will not be started automatically. It is recommended to run the product in this case via menu Start -> Programs.
The patch can be downloaded from here:
ftp://support-download:Download4KAV@kaspe...fix/patches.zip

or here:
ftp://ftp.kasperskyftp.com/utils/updatefix/patches.zip
username: support-download
password: Download4KAV

Ok, I am a newbie here, but what program/executable are we talking about concerning the version? Are we talking the version of the Admin Kit or what? These people have so many numbers it is confusing. I am running 6.0.1405 of the Admin Kit.

Thanks for the patch. I'm in the process of testing it on a few machines. Let's hope this resolves everything.

Please let us know the results of your test, Mike. We will be nervously awaiting your reply!

I just sent out the patches... we'll see if they work.

This is the third time since we've been with KAV that an update wasn't properly tested and hosed all of our workstations. Can we please get an explanation as to why this keeps happening?

I tested in 02 workstation in spanish and I have problems, because the patch only works in english versions of KAV. I executed this path in one WIndows Server 2003 Ent SP2 English and works great.
Please inform your results

Even without a reboot, those I've tested on successfully update. I've only rebooted a few, so no guarantee's yet. Will post back if I find any issues.

Which patch do you use for the admin kit remote install? 830 or 837?

Thanks!

TMike, the AV is in english version? Because I have all my workstations with KAV in spanish and this patch don't work.

My KAV versions are 6.0.837, so I used the 837 patch. I think jacppe meant to say 6.0.830 and 6.0.837 instead of 8.0.x. Whichever version workstation and server you have, use that one.




I have KAV english version. So far no problems.

Whatever version matches the last three digits of the clients KAV version. I have 6.0.3.837 so I would use the 837 one...

Hi TMike, this is the copy of an email from one guy of KL of US.
I still having problems, because my AV in the workstations are in spanish, I will wait for a patch for this language.
Is good hear the solution for english users works great.

The response of KAV
http://support.kaspersky.com/wks6mp3/error?qid=208279891