Hello!

I am in need of a bit of assistance please:
We have a Win2K Server that had an older version of Norton on it which was outdated that we finally decided to get current on its virus protection, given that we still hadnt yet done so for over a year (Things were working and other steps had been taken to ensure virus attacks wouldnt happen in the meantime). We went ahead and uninstalled Norton, then we installed KAV and let it update itself. It asked to restart, so we did.

Upon restarting, the server now hangs up on the blank screen that normally follows the windows splash screen. The server does respond to pings, and its netbios port is open, however all the other services are dead (Windows Networking, Print services, MSSQL Server).

We attempted to get into Safe Mode and uninstall KAV, however it requires that the Installer Service be running, and of course the Installer service will not run when windows is in safe mode!!!

Assistance with this matter would be GREATLY appreciated, given that this disaster happened during a holiday and that almost no one is available to do support through the weekend.

Happy Holidays,
-Ray

Hi,

I have just experienced exactly the same problem, following the installation over the weekend of Kaspersky AV 6.0 for Windows Servers on my Win2K File Server. Rebooting results in a load of services not running (as seen in Event Log if I go in via safe mode) and the standard logon prompt is not shown (just a blank screen). All the failed services report the following error: "Error 1077: No attempts to start the servcie have been made since the last boot".

I have disabled the two KAV services in safe mode but rebooting doesn't help. I do notice that the "klif" service didn't start during normal booting - I think this is part of KAV although it doesn't seem to be listed in Services or Device Manager.

Did the original poster get the problem fixed? Can anyone from Kaspersky shed light on the problem?

Regards,

Neil Stewart

Hi,

boot in safe mode, there open regedit through start->run, type in regedit and press ok.
in the left side navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Klif
in the right side you will see a Start entry with the value 1, double click it and set the value to 2. close regedit and reboot.

Hi,

Thanks - I made that change and it seems to have worked. Can you explain what it is doing or what problem it fixes?

For reference, as part of my investigation into this problem I used the Win2K "Repair" option on the install CD to roll the OS back to plain SP4 with no updates. At this point the server was booting OK. I then reapplied the ~65 updates that have come out since SP4 and once again had the problem where there was no logon prompt while booting. I then made this change to the start mode of the klif driver and was able to boot normally.

Regards,

Neil Stewart

It does not decrease security level brought by KAV, it just changes boot order used by Windows to load driver when the operating system is started.

I don't have detailed explanation of why this issue occurs, I'm sorry. I just faced the same problem and solved it in that way, according to recommendations of Kaspersky Lab's developers.

Ok thanks for that!

Cheers,

Neil