Hi all

I've found the problem about Kaspersky for Windows Sever Enterprise Edition on windows server 2008:

I have a file sharing server which is windows server 2008 OS.
After KAV Windows Sever Enterprise Edition installed on this file server, the problem is occur...

When everyone access to this shared folder via map drive on this server, it can access but it take a long time for open each file may be take seconds more than before (15-30 seconds) Most file is image, document, autoCAD etc.

but the problem will not occur everytime when open file via map drive. It will occur sometimes and random. May occur 1 time per day.
If disable av protection, the problem will not happen.

first of all, i've disabled blocking script feature but it was not help.

Help me please?

I have similar problem, but with an accounting program with its data files accessable via mapped drives on the server.

I have this problem, too.

I had to deactivate realtime detection in KAV EE. it took a long time - up to one minute - to open files from a mapped folder. especially .xls an .jpg or .bmp.

In the log of KAV Enterprise file server i saw "Objekt wurde nicht untersucht. Grund: Zulässige Untersuchungszeit für Objekt überschritten." Object was not investigated. Reason: Time for investigation exceeded.

I could reproduce the problem by creating a new image in a mapped folder and then tried to open it instantly. But this problem does not occur from every workstation or user in active directory!


KAV Windows Servers EE Version 6.0.2.551

KAV Workstation 6.0.3.837 on Client Workstations

Hello,

I faced the same issue.
Run a full scan of all files on the server with KAV for FS EE to create iSwift dabatabase. It you already did the scan, then disable iSwift/iChecker for all scan tasks (Real Time and Script monitoring).

Hello,

Could you try to install CriticalFix3 and CriticalFix4 for MP2. They might help you.
Please use x64 CriticalFixes only for x64 KAV6WSEE version.

These patches are not published yet, but already have passed all tests.
All information about these patches you can read in attached release notes.
Please write about the results.

Hum, in the release notes of the CF4 I can read "issue with citrix & roaming profiles fixed"; here everybody says that it is still an issue...

We've lost a customer because of that. He evaluated the FSEE MP1 and bought 1200 licences to protect his Citrix environment and cancelled his order because the MP2 has this issue and after one month of investigations there's still no fix that works.

Hello,

In some cases CF4 didn't help, but other customers informed us the issue had been fixed.

Thank, i will try fixed its and let's everyone know the result again

Since installing the fixes there had been no more errors.
Aditionally i have to say that i excluded a lot of subfolders in the mapped drive directly in the management console because of time-errors.


A little bit off topic:
Are there any problems with the trusted zone when i add them with Administration kit?

there are diferent ways to exclude folders from being scanned.
- the trusted zone with grouppolicies in administration kit didn't seem to work right.
- excluding with management console runs, but i don't know when i should use trusted zone with grouppolicy and when exclusivly exclude folders in the management console.

Hello,

Could you explain why you decided it doesn't work properly?
Are there any events in task log about checking excluded files?

Tthank you.

excatly :-)

but i didn't try it since the fixes. the folders are excluded directly in the management console now. i will tell you when i have time to test it again!

I tried it out again. Everything works fine now. subfolders excluded by Grouppolicies are not scanned.

Nice to hear it!

I had to realise a new installation yesterday. I confirm, the issue has not been fixed. The environment :

- Server 2003 Enterprise + Citrix Presentation Server 4.5 + FSEE 6.2.511 +CF3 +CF4
- Server 2003 Enterprise (datastore, hosts the user profiles)
- XP clients with Citrix desktop agent

---

The situation is simple, if KAV FSEE is running and the real-time scanner + script protection are disabled, everything works fine. If you enable the real-time scanner, the clients don't get their profile any more.

I'm trying to get a solutions since more than a month now. I've already opened two completely similar support cases and, unfortunately, lost one of the customers (1200 BS licenses)... I provided a sysinfo of the server + a full traces file generated with FSEE in debug mode... only one thing I've got for the moment concerning this issue is a ticket number...

Is anybody able to help me quickly?

Hi everybody who is tracking this topic.

We suppose we have found the solution for this problem.
We have tested it in our test-lab and the issue has been fixed. But before publishing (anyway it will take at least 2 weeks) it officially, could you test it in your test environment if it is possible? Then we could be sure that we really have fixed the problem.

The patch changes driver's (klif.sys) version to 8.1.0.53 and does not require system reboot. It is applicable to KAV6WSEE 6.0.2.551. Please use x86 patch version for x86 WSEE version. And x64 for x64 respectively.
It is NOT OFFICIAL patch and we DON'T RECOMMEND to install it on production servers until it will be published officially.

We'll be very gratefull for any information.

Thank you.

This fix worked for my 2003 Terminal Server, has it been tested on Server 2008?

Hello,

Yes, CF5 driver (8.1.0.53) has been tested on Windows Server 2008.

We have released Critical Fixes for KAV6WSEE MP2 (6.0.2.551).
Please see this topic: http://forum.kaspersky.com/index.php?showtopic=88930

I'm having a similar issue, where when kavsee is enabled, clients freeze up completely for 1-5 minutes at random times. When I say freeze up, I mean all file access is inaccessible and logging into the domain is unavailable until it unfreezes. Support techs had me add the actual mapped drive letter to exclusions rather than just excluding "all network drives" on the clients and "network places" on kavsee server. Do the critical fixes fix this completely, so that I can remove the drive letters and just have "all network drives" (kavw) and "network places" (kavsee) as being excluded?

Thanks