I am running KAV Workstation 6.0.3.837. This morning there were a couple of updates that required me to restart my computer. For most of the day I have been periodically receiving avp.exe application error messages. I don't have the first message, but it asks me to press cancel to debug. The second error message I get immediately afterward is: The instruction at "0x310ac71c" referenced memory at "0x03939168". The memory could not be "read". Click on OK to terminate the program. Since the second restart of my computer, my Windows Security Alert has been on the taskbar and it's telling me that my anti-virus program is off. When I check KAV, everything looks fine and everything is running.

Does anyone know what I need to do to fix this problem? Thanks in advance for any help you can give me!

Anne

Hi, I have the same problem, check the image.
Now I have almost 1000 computers with KAV and 25 servers with KAV, and we have problems!!!! critical problems!

I am experiencing the same issue.

Also, attempts to update workstations manually from Administration Server always result in "Failure."

We have 15 computers and no one else seems to be experiencing this problem, yet. I checked my Admin program and all are green - no problems. I hope it's limited to just my computer.

Thanks for letting me know I'm not alone. Let's hope someone here can help us.

Anne

There are at Kaspersky someone who can answer please ????????????

Hi,
we have 100 Computers and got the same problems. After the last Kaspersky Update from yesterday, that needed to reboot the client, the avp.exe produces an error, when u try to update the client.
Any solutions?

Hi, this is a know problem. Kaspersky is working on it.

Temporary solution, that might help:

- Disable self-defense and delete files in folders:

C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP6\Bases
C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP6\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav6\6.0.3.830

And run update again.

- Or product can be reinstalled to fix the issue.

Good to know, that they are working on it...
Waiting for the fix, hope that it will arrive today..

Hello!
Same problem on KAV for Windows Server. Any temporary solution from Kaspersky Lab? KAV produces error:

Click to view attachment
A screen from my error message.

Temporary solution that will help:

1. Disable self-defence.
2. Exit Anti-Virus
3. Replace files on the hard drive with the files here
4. Start the product.
5. Update

Regards,
dawinci

Thank you Dawinci, but it will be good if Kaspersky make a formal response

Here is Kaspersky Anti-Virus one of 61 notifications:

Product: Kaspersky Anti-Virus 6.0 for Windows Servers Version 6.0.3.837 Operation system: Microsoft Windows 2003 Server Standart Edition Domain Controller Service Pack 2 (build 3790)
Computer: xxx (name removed)
Domain: xxxx (name removed)

Notifications:
Important:22.8.2008 9:16:15 Process (PID 348) tried to access Kaspersky Anti-Virus process (PID 3936), but the action has been blocked by the Self-Defense component. No action on your part is necessary.

Updates has been fixed. Please update your products. Have a lot of fun and a nice weekend

Is there anything official from Kaspersky that shows they know about this and are working on it?

Before deleting Kaspersky files to implement a fix, I would prefer an answer from someone with a little more authority.

MY signatures on the AdminKit Server are now from 22.08.2008 10:34:20,
but I still get the error message from avp.exe!

Has somebody solved the problem with the newest updates?

No, still the same error.

It's the same thing by me

Ah, k. Thanks for the feedback.
I opened a call by Kaspersky Support. Hope they will inform my, when a Fix is available.
I`ll let u know, if i get some Info.

I«m having this issue on our 30 PC network. Any news?

No, still waiting for a reply from the Kaspersky Support.
Hope there is a Fix available in the next hours, so that the error could be fixed bevor the weekend.

It seems to me that the error is being caused by the update process. When I try to update manually I get the error.

Same here,

More of the workstations are reporting lack of user rights for the update.

I've had major problems this morning affecting so far 15 of my 130 users. The error messages vary but I've attached one to this post.

It's also screwed up DHCP, clients can't get an IP address.

Yes, it happens when scheduled from the AdminServer or local updates are started.
Yesterday there was an update of the avp.exe.
I think that this Patches causes the error.

a FAQ has been released here

I still having the problems! with my servers and workstation. No answer from Kaspersky after 24 hours of problems. The updates still failing.
This is a bad time of response.
This day will be bad for me

About this article: http://support.kaspersky.com/wks6mp3/error?qid=208279891
I will not reinstall the KAV to almost 1000 workstations and servers.
I will interrupt the user, no signs of Kaspersky could solve this issue caused by them?

Today an update/fix for Adminkit will be released. This update makes remote "fixing" possible. None of you must install/uninstall locally the product. So please stay tuned.

Seems that the patch takes a longer time.

This sounds good, dawinci.
Looking forward...

How many time this path will spend for release dawinci?
I tried the reinstallation of the product on one server and now is working fine.
But we need the fix as soon as posible.

The temporary solution described in the FAQ article will solve the provlem, but it's a temporary solution only. It doesn't make sense for more than ~10/20 clients, thats right.

Please be patient. Fix will be released today, i'm sure =)

@jacppe: sorry, i have currently no timelime for the release of this patch, we've to wait.

Same here on over 100 computers.

Waiting for the Administration Kit fix so I could fix it remotly...

I have talked to the support on the phone and they told me that a fix will be released in 1 our 2 hours they are testing it right now (they told me that at 10:45 a.m. eastern time).

You have to call them if you want them to e-mail you when the fix is released.

I assume they will announce it here too?

They told me that about 5 hours ago and still nothing!

I don't know

Hi, What is the telephone number of KL, I need to communicate with them for ask support. Thank you.
Dawinci, I probed the reinstallation and solve our problem but I will wait for the final fix. Please inform us when the fix is released.
Thanks

Nearly the end of the business day here, Weekend coming and i have to hope that they tell us about the fix.

Surely important info like this should be automatically sent out to Sys Admins.

Here's the phone number:
Phone (Business Products Only): 1-866-323-4801

I will try to post something when I get my e-mail from the support.

I came in this morning and the error message just kept popping up. I rebooted my computer and a log appeared regarding the prior instance of the application with the errors. I sent it to Kaspersky and everything appears to be working fine. There must have been an update overnight.

I hope everyone else is working fine, too.

Thanks!

Anne

I'm thinking many of us are still down. They have released the correct update now, so if your machines never got the bad one it seems to be okay. However, if your machine got the nasty update, then you're still up the creek. Either you do what they posted in the FAQ, or you wait -- I just talked to Tech Support who said they're releasing an executable to correct the problem within the next hour or two... They said it will be deployable through the KAK, so hopefully it's just coming down through the updater service... Either way, they took my name and e-mail address to let me know when it's available.

Good thing I've only got 1500 clients waiting on this and I'm 200 miles away.

I have almost 1000 workstations with the error, but here the day just started and I'm in the office! Please inform us when the fix is released.
Thanks

Here too i got the problem and i have to install this antivirus solution this afternoon onto my customer server so i hope the update will be out soon.

I knew I should have waiting longer on this. It's now been 1 hour and I've started getting the error messages again. It still seems to be just my computer and no one else on our network.

It's nice to hear there will be a fix shortly.

Anne

We're evaluating the product and seeing this issue on our small number of test systems as well. I was prompted to reboot multiple times yesterday and I'm seeing evidence that svchost.exe (the 'netsvcs' instance) is causing the crash:

"8/22/2008 11:36:33 AM Process (PID 1056) tried to access Kaspersky Anti-Virus process (PID 5452), but the action has been blocked by the Self-Defense component. No action on your part is necessary." PID 1056 is "svchost.exe -k netsvcs" on my system.

Presumably turning off Self-Defense might also avoid the issue but that's hardly a way to run the product.

While certainly not good, it is comforting that KL is quickly working to resolve the issue.

I would like to hear what the source of the problem was and what they're doing to ensure something similar doesn't recur.

Has anyone heard anything? The 1 or 2 hours of testing mentioned above was over a long time ago.

From one guy of KL in US

Hello,

This is to follow up on a resolution for the recent issue that you reported to Kaspersky Lab. We have now have a patch available that will resolve this issues. This patch will solve the update issue automatically and it can be installed in one of the following ways: Instructions are as follows:

Locally:

For product version 8.0.3.837 download archive patches.zip, extract contents and execute file kav6patch837.exe
For product version 8.0.3.830 download archive patches.zip, extract and execute file kav6patch830.exe

Before running the patch on the computer please make sure that the version of the installed product is the same as the number in the name of the file that you have downloaded.

Remotely (with the help of Administration Kit, using group policy):

For product version 8.0.3.837 download archive patches.zip, extract contents, create deployment task for file kav6patch837.exe with parameter /S, run the task

For product version 8.0.3.830 download archive patches.zip, extract contents, and create deployment task for file kav6patch830.exe with parameter /S, run the task

When creating the task, it is important to observe the syntax of the command, it must be exactly like kav6patch***.exe /S (with capital /S).

To create a deployment task:
Open the Administration Kit
Click on the Remote Install Folder
Click on “Add an Installation Package”
Click Next
Name the task
Click Next
Change the drop down menu to “Make installation package for specified executable file”
Click on Browse
Browse to the location of the appropriate file (for example kav6patch837.exe)
Click on the file and click Open
Enter /S in the Executable command line section
Click Next
Click Finish
Right click your package and choose Install to begin the installation wizard where you will add the computers to be installed to
After the deployment wizard is complete, click on global tasks
Right click your task and choose Start to begin the process
After completing the task updates will now be successful
You will need to eventually reboot the computers, although this can be delayed to an appropriate time

After running the patch on computers running Windows Vista OS, in some cases KAV will not be started automatically. It is recommended to run the product in this case via menu Start -> Programs.
The patch can be downloaded from here:
ftp://support-download:Download4KAV@kaspe...fix/patches.zip

or here:
ftp://ftp.kasperskyftp.com/utils/updatefix/patches.zip
username: support-download
password: Download4KAV

Hello!

Finally! Patch works!