Advice and solutions for Kaspersky Embedded Systems Security

The materials provided on the Advice and Solutions (Forum Knowledgebase) part of the Forum result from the work of the Kaspersky Customer Support team and Forum community members. They are shared here for ease of use of Kaspersky products, deploying and configuring them. Please remember that using commands or recommendations from the articles without a clear understanding of their purpose may result in errors or system inoperability. Please note that some materials presented are not official, so technical support may decline to support a specific unsupported configuration in some instances. Please also ensure to use the official documentation, found in this link…

Installation of affected products fails if it can't disable Windows Defender. To do this, during the installation the installer tries to edit edit local policy settings via Windows APIs, which load cached machine local policy from %windir%\System32\GroupPolicy folder, make changes and save back to the file system. If mentioned operations with local policy fail, installation fails with MSI error 1603, MSI log contains following errors: DisableWindowsDefender: Error: (_com_error): OpenLocalMachineGPO(GPO_OPEN_LOAD_REGISTRY) failed code=<some error code> OR DisableWindowsDefender: Error: (_com_error): pGroupPolicy->Save failed code=<so…

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. Problem When installing KESS on Windows XP MSI installer service may stop working, and the msi.dll is reverted to version 3.1. The reason for such behavior is that the "Scan at operating system startup" task restores the "Last access time" attribute. The System Restore in turn restores the files with the modified attributes from the backup. Solution Prior to KESS installation create the following registry entry: [HKEY_LOCAL_MACHINE\SOFTWARE\KasperskyLab\ESS\2.3\Environment] "DontRestoreFileTimes"=dword:00000001 If the product is already installed and the prob…

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. There can be the following errors in the installation log: InstallDriversDeferred (4c8:0830) [11:20:58:793]: Failed to execute driver package 'DriverKlips.601'. Failed to add a catalog file. Error 0x80070426. InstallDriversDeferred (4c8:0830) [11:20:58:793]: Failed to add a catalog file. Error 0x80070426. The problems of installing a driver's cat-file usually mean that there are some problems with Cryptographic services and the system cat-base. Try the following workaround: 1. Re-create C:\Windows\System32\catroot2 according to the instruction from the article: https:…