Jump to content

tvm

Members
  • Content Count

    15
  • Joined

  • Last visited

About tvm

  • Rank
    Candidate
  1. I had the same issue with Microsft SSTP VPN years ago and it was definetly a problem with a Kaspersky policy. Problem is, that I did not record my actions and can just approve that it is related to Kaspersky.
  2. Thank you very much for the feedback. If you need a tester you can contact me, I have a open ticket regarding the this problem (INC000004496598)
  3. Please find attached a new trace of nagent and Windows Update Agent. The nagent trace shows that the wuident.cab is requested by Windows Update Agent and than provided to the Windows Update Agent. _klnagent_1103.zip WindowsUpdate.zip
  4. I moved the computer and waited the whole night to move it back this morning (Computer was still running). Then I just searched for new updates and got the mentioned error from Windows Update. Traces are already available in my upper post. The Problem is that the new Windows Update Agent needs the new wuident.cab but KSC just offers the old one which is not compatible anymore. Is there any possibility to add the new wuident.cab to C:\ProgramData\KasperskyLab\adminkit\1093\dat\wusdata\selfupdate\wsus3\ ? I already tried creating a new folder named with MD5 hash of the file + "00" which is the format for Windows Updates in KSC but no success.
  5. Still the same problem, downloaded wuident.cab is still the wrong one. 2015-05-06 09:51:54:282 992 c20 Agent ************* 2015-05-06 09:51:54:282 992 c20 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates] 2015-05-06 09:51:54:282 992 c20 Agent ********* 2015-05-06 09:51:54:282 992 c20 Agent * Online = Yes; Ignore download priority = No 2015-05-06 09:51:54:282 992 c20 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1" 2015-05-06 09:51:54:282 992 c20 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed 2015-05-06 09:51:54:282 992 c20 Agent * Search Scope = {Machine} 2015-05-06 09:51:54:282 992 c20 Setup Checking for agent SelfUpdate 2015-05-06 09:51:54:282 992 c20 Setup Client version: Core: 7.6.7601.18804 Aux: 7.6.7601.18804 2015-05-06 09:51:54:300 992 c20 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080: 2015-05-06 09:51:54:303 992 c20 Misc Microsoft signed: NA 2015-05-06 09:51:54:304 992 c20 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\TMP1D03.tmp with dwProvFlags 0x00000080: 2015-05-06 09:51:54:306 992 c20 Misc Microsoft signed: NA 2015-05-06 09:51:54:306 992 c20 Misc FATAL: SubCA Chain Policy failed for inner cab. 2015-05-06 09:51:54:306 992 c20 Misc WARNING: Digital Signatures on file C:\Windows\SoftwareDistribution\SelfUpdate\TMP1D03.tmp are not trusted: Error 0x800b0001 2015-05-06 09:51:54:306 992 c20 Setup FATAL: Ident cab verification failed with error 0X800B0001 2015-05-06 09:51:54:307 992 c20 Setup WARNING: SelfUpdate check failed to download package information, error = 0x800B0001 2015-05-06 09:51:54:307 992 c20 Setup FATAL: SelfUpdate check failed, err = 0x800B0001 2015-05-06 09:51:54:307 992 c20 Agent * WARNING: Skipping scan, self-update check returned 0x800B0001 2015-05-06 09:51:54:307 992 c20 Agent * WARNING: Exit code = 0x800B0001 2015-05-06 09:51:54:307 992 c20 Agent ********* 2015-05-06 09:51:54:307 992 c20 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates] 2015-05-06 09:51:54:307 992 c20 Agent ************* 2015-05-06 09:51:54:307 992 c20 Agent WARNING: WU client failed Searching for update with error 0x800b0001
  6. I'm getting closer .... On a Windows 8 Computer I checked the digital signature date of the wuident.cab I get online from Windows update and it shows 1. ‎April ‎2013 21:11:28. When I search for Windows updates over WSUS/Kaspersky I get a wuident.cab with a date of ‎14. ‎Juli ‎2012 00:53:54. I can find these both cabs in C:\ProgramData\KasperskyLab\adminkit\1093\dat\wusdata\selfupdate\wsus3\2e6ba28ea0e094f08dee098f9ab958c500 and .\8c78420c4bae4ba02e7b38c1ebbdcbbc00 And now when I check online for Windows updates from a Windows 7 Computer I get a brand new wuident.cab with date of 23. ‎Mai ‎2014 01:27:37 and this one I have to integrate in KSC so that offline Windows Update over KSC is working for Windows 7. Can you tell me how to do this?
  7. Attached you can find the klnagent-1103.log and WindowsUpdate.log. The problem is related to the wuident.cab from KSC that cannot be validated. _klnagent_1103.zip WindowsUpdate.zip
  8. I'm just checking for Windows updates and get ther error 800B0001 from Windows Update Agent. Also I see the error in the file C:\Windows\WindowsUpdate.log And like I already said, I only get this error with the latest Version of Windows Update Agent. 2015-04-29 20:22:28:513 784 1014 AU Triggering AU detection through DetectNow API 2015-04-29 20:22:28:513 784 1014 AU Triggering Online detection (interactive) 2015-04-29 20:22:28:513 784 e90 AU ############# 2015-04-29 20:22:28:513 784 e90 AU ## START ## AU: Search for updates 2015-04-29 20:22:28:513 784 e90 AU ######### 2015-04-29 20:22:28:513 784 e90 AU <<## SUBMITTED ## AU: Search for updates [CallId = {69C0BDD2-0308-4086-B4C2-9328CCDBCFEF}] 2015-04-29 20:22:28:513 784 81c Agent ************* 2015-04-29 20:22:28:513 784 81c Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates] 2015-04-29 20:22:28:513 784 81c Agent ********* 2015-04-29 20:22:28:513 784 81c Agent * Online = Yes; Ignore download priority = No 2015-04-29 20:22:28:513 784 81c Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1" 2015-04-29 20:22:28:513 784 81c Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed 2015-04-29 20:22:28:513 784 81c Agent * Search Scope = {Machine} 2015-04-29 20:22:28:544 784 81c Setup Checking for agent SelfUpdate 2015-04-29 20:22:28:544 784 81c Setup Client version: Core: 7.6.7601.18804 Aux: 7.6.7601.18804 2015-04-29 20:22:28:560 784 81c Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080: 2015-04-29 20:22:28:576 784 81c Misc Microsoft signed: NA 2015-04-29 20:22:28:576 784 81c Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\TMP9173.tmp with dwProvFlags 0x00000080: 2015-04-29 20:22:28:576 784 81c Misc Microsoft signed: NA 2015-04-29 20:22:28:576 784 81c Misc FATAL: SubCA Chain Policy failed for inner cab. 2015-04-29 20:22:28:576 784 81c Misc WARNING: Digital Signatures on file C:\Windows\SoftwareDistribution\SelfUpdate\TMP9173.tmp are not trusted: Error 0x800b0001 2015-04-29 20:22:28:576 784 81c Setup FATAL: Ident cab verification failed with error 0X800B0001 2015-04-29 20:22:28:576 784 81c Setup WARNING: SelfUpdate check failed to download package information, error = 0x800B0001 2015-04-29 20:22:28:576 784 81c Setup FATAL: SelfUpdate check failed, err = 0x800B0001 2015-04-29 20:22:28:576 784 81c Agent * WARNING: Skipping scan, self-update check returned 0x800B0001 2015-04-29 20:22:28:576 784 81c Agent * WARNING: Exit code = 0x800B0001 2015-04-29 20:22:28:576 784 81c Agent ********* 2015-04-29 20:22:28:576 784 81c Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates] 2015-04-29 20:22:28:576 784 81c Agent ************* 2015-04-29 20:22:28:576 784 81c Agent WARNING: WU client failed Searching for update with error 0x800b0001 2015-04-29 20:22:28:576 784 62c AU >>## RESUMED ## AU: Search for updates [CallId = {69C0BDD2-0308-4086-B4C2-9328CCDBCFEF}] 2015-04-29 20:22:28:576 784 62c AU # WARNING: Search callback failed, result = 0x800B0001 2015-04-29 20:22:28:576 784 62c AU # WARNING: Failed to find updates with error code 800B0001 2015-04-29 20:22:28:576 784 62c AU ######### 2015-04-29 20:22:28:576 784 62c AU ## END ## AU: Search for updates [CallId = {69C0BDD2-0308-4086-B4C2-9328CCDBCFEF}] 2015-04-29 20:22:28:576 784 62c AU ############# 2015-04-29 20:22:28:576 784 62c AU Successfully wrote event for AU health state:0 2015-04-29 20:22:28:576 784 62c AU Successfully wrote event for AU health state:0 2015-04-29 20:22:33:583 784 81c Report REPORT EVENT: {09DC8596-B48C-4A5E-9CBA-9323BB2E38E0} 2015-04-29 20:22:28:576+0200 1 148 101 {D67661EB-2423-451D-BF5D-13199E37DF28} 1 800b0001 SelfUpdate Failure Software Synchronization Windows Update Client failed to detect with error 0x800b0001. 2015-04-29 20:22:33:614 784 81c Report CWERReporter::HandleEvents - WER report upload completed with status 0x8 2015-04-29 20:22:33:614 784 81c Report WER Report sent: 7.6.7601.18804 0x800b0001(0) 67661EB-2423-451D-BF5D-13199E37DF28 Scan 1 0 SelfUpdate {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} 0
  9. I found the following thread in Google Cache: "Testing of patch "E" for KSC 10.1.249, KSC 10 MR1" http://webcache.googleusercontent.com/sear...=clnk&gl=de And in the list of fixed issues there is exactly the error I have on my clients: 227770 Windows Update Agent error 0x800B0001
  10. I used this feature to realocate the wusfiles to another drive but it seems that all downloaded Windows updates are duplicated to "C:\ProgramData\KasperskyLab\adminkit\1093\.working\FTServer" So it seems that the same amount of WUS* files now persist on the c: and e: drive of the server with over 200 GB of used space. Everyday I am expandig the virtual disks of the server because it is freezing due to a full hard drive. And I get patches just for Windows 7/8.1 and Server 2008 R2/2012 and some SQL Servers/Exchange. This is definitely a big roblem and I am thinking of disabling the whole WSUS part of KSC. Is there anything I can do?
  11. Um das Thema noch abzuschließen noch kurz die Info, dass nun alles wieder läuft. Ich habe den Administrationsserver komplett gesichert und anschließend neu installiert. Danach war das Problem behoben und auch die Ursache schnell gefunden. Aus irgendeinem Grund liefen einige der Kaspersky Dienste mit dem Lokalen System Account und nicht mit dem extra eingerichteten Kaspersky Benutzer wodurch es Problem bei dem Zugriff auf die SQL Datenbank gab: "Failed to alllocate DB connection(s) as the database server is unavailable."
  12. With installed KB2990214/Windows Update Agent v7.6.7601.18804 and also with v7.6.7600.320 I get the error 800B0001. (Windows Update or Microsoft Update programs cannot determine the cryptographic service provider.) With v7.6.7600.256 everything works just fine and I can reproduce the error with just installing the fixes again. So which version of Windows Update Agent works for other users? To check your installed version just check the details of file C:\Windows\System32\wuaueng.dll
  13. Hi, we are running the latest Version of KSC and Administration Agent, 10.2.434 including Patch B. Now we have began to configure our administration server for acting as a WSUS Server and got some issues regarding the Windows Update Agent. All Windows 7 machines with installed KB2990214 have an Windows Update Agent version 7.6.7601.18804 which is incompatible for getting Windows Updates over network Agent/KSC. After uninstalling this update the Windows update Agent Version is 7.6.7600.320 which is also incompatible. Only after downgrading the agent to version 7.6.7600.256 we are able to get windows updates from KSC. Does anybody has the same issues getting KSC to work as WSUS Server? Also after downgrading the agent and deactivating KB2990214 from the update list it is still installed with next windows update which bricks windows update again,
  14. Hallo, da ich schon seit über einer Woche mit unserem Administrationsserver kämpfe und Kaspersky mir bisher noch nicht helfen konnte dachte ich, dass ich es einmal hier probiere. Vor ca. einer Woche habe ich das Update auf die aktuellste Version installiert und in diesem Zuge mit klsrvswch.exe die wusfiles auf eine andere Partition verschoben. Seitdem haben wir massive Probleme mit dem Server, die beiden Dienste klserver und sqlserver erzeugen alle paar Stunden eine 100%ige CPU Auslastung und ich kann den Server nur noch über die Hyper-V Konsole herunterfahren. Wenn ich zufälligerweise gerade auf dem Server eingeloggt bin reicht es auch nur den Dienst klserver neuzustarten. Ich bin momentan ziemlich verzweifelt und unser KSC ist so gut wie nicht zu benutzen. Leider wird auch rein gar nichts im Ereignisprotokoll geloggt, der Server scheint wirklich komplett einzufrieren. Den aktuellsten Patch B habe ich bereits installiert, hat aber keinerlei Abhilfe geschafft. Ich habe auch noch folgenden Thread gefunden (http://forum.kaspersky.com/index.php?showtopic=220849) aber scheint nur für eine ältere Version zu sein und hat auch keine Abhilfe geschafft. Keine Ahnung ob es noch relevant ist aber KES habe ich auf den Clients noch nicht aktualisiert (immer noch 10.2.1.23 MR1), nur den Agent inkl. Patch B. Über jegliche Hilfe wäre ich dankbar.
  15. Same Problem here, would be nice if you can send me the patch.
×
×
  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.