Jump to content

bkonner

Members
  • Content Count

    17
  • Joined

  • Last visited

About bkonner

  • Rank
    Candidate
  1. Please do the following to temporarily repair the update problem with Kaspersky Anti-Virus 6 Enterprise Edition. This is a temporary solution until the update problem has been resolved. The following instructions will temporarily repair the update problem. This may be done manually on any server running Kaspersky Anti-Virus 6.0 Enterprise Edition or using the Kaspersky Administrator Kit. Once the problem has been resolved you may restore the update task. First please download the following Definition Set: Download from this link the file: av-i386-cumul.zip: http://support.kaspersky.com/faq/?qid=208279232. Unpack this into a folder and share this folder. Manually Temporarily fixing the update problem: You need to do three things: 1. Delete the current definitions on the server 2. Update the server using the definitions downloaded and unpacked from above 3. Stop or change to manually the scheduled update task. Follow the details below: Please manually do the following Disable Kaspersky Anti-Virus Navigate to the following directory and delete all the files in this directory C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\KAV for Windows Servers Enterprise Edition\6.0\Bases\Current\ After the definitions have been removed, enable Kaspersky Anti-Virus In your update task point the updater to the folder you unpacked the definitions. Perform the update. Repairing temporarily the problem using the Kaspersky Administrator Kit: It is necessary to run two tasks: 1. Stop the update task in Group Tasks 2. One to delete the current definitions 3. One to apply the definitions you downloaded from the link provided at the top of this email Create a task to delete the current definitions on the servers. 1. Go to Tasks For Specific Computers or Global Tasks and click add a task 2. Give the Task an appropriate name and click next 3. Click Application Deployment and click Next 4. Click New 5. A new wizard starts. Give the task an appropriate name and click next 6. You are not making a Kaspersky Lab Application. You are making an application for a specified Executable File. 7. Create a batch file to delete all the files in this directory. This is the default path. C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\KAV for Windows Servers Enterprise Edition\6.0\Bases\Current\. Save this batch file and above where it says Select point to this batch file and click next 8. Finish the package. It will upload to the server 9. You are back in the Installation package screen. Select this package and click Next 10. It is a push install. Click Next 11. Make no changes in Settings. Click Next 12. Select your targets using Windows Networking. Click Next and select only servers using Kaspersky Anti-Virus 6.0.2.555 or 6.0.2.551 13. If the Account screen if you are not running the Kaspersky Administrator Kit with a domain admin account enter an account that has local administrator privileges. Click Next 14. Schedule this to run manually and click next and finish this up 15. Disable Kaspersky Anti-Virus 16. Manually start this task and delete the definitions. Then update the definitions as noted below Create a temporary task in Tasks for Specific Computers to update the servers. 1. Enable Kaspersky Anti-Virus 2. Go to Tasks For Specific Computers and click add a task 3. Give the task an appropriate name. Click next 4. The Application is Kaspersky Anti-Virus 6.0 For Enterprise Edition. Select Application Database Update 5. Click Custom HTTP, FTP server and add the folder for the share. 6. Do not schedule the update 7. Run this after you have deleted the currently installed definitions
  2. Hello, On the server hosting the Kaspersky Administrator Kit once you have deleted your computers in the Group and Network nodes (make certain you have turned off automatic forwarding of computers if you are using this), open a command prompt and enter: ipconfig /flushdns. Sometimes this is necessary to get the licenses back. Thanks, Bill Konner Kaspersky Lab Boston
  3. Hi, The text file you enclosed is exactly what I am looking for. THANKS! I agree with you on the uninstallers. I work for KAV and on Friday had a client who was manually uninstalling Trend Micros (do not remember the version) and it was causing C++ errors. When I had him use the uninstaller through the admin kit, it worked flawlessly. Also, it is necessary to run a reboot script after running the uninstallers. I have noticed errors if you do not do so. I use a simple reboot script and make an external application. This prevents problems when installing KAV 6.0.3.837 after the uninstall. Again, this was exactly what I needed. There are times where I need to use NoNAV and cannot use the admin kit. So this is very helpful.\ Thanks again! Bill K
  4. Hi, I will ask him to uninstall the NDIS filters. This did not occur to me. I made the reference to 14000 because the host computer was not listening to this; this is used if you are not using a secured connection. 13000 was fine. 15000 was not open. It now is. It also did not occur to me to check the Network node to see if there is a duplicate computer. I should add that this guy installed the admin kit on another comuter (a laptop). He then installed it on a server as I instructed him. But I have manually also installed the agent on the targets but still no success. Thanks for the ideas. Bill
  5. Howdy, On the workstation I want you to navigate to c:\program files\Kaspersky Lab\Kaspersky Network Agent folder\ and look for KLMOVER.EXE. Open a command prompt. Drag klmover.exe to the command prompt (do not hit enter). Hit the space bar. Enter -address hit the space bar and enter the IP address of the server. Command is: KLMOVER -address xxx.xxx.xxx.xxx (hit enter). Next drag klnagchk to the command prompt. Second from last line will tell you how many synchronizations were completed. You need one (should only list one). Then go back to the admin kit and hit synchronize. Is this a new admin kit? Are you using 6.0.1591 (check in the MMC console in Help about Kaspersky Admin kit). If it is not 6.0.1591, upgrade. I ask because if this is a new admin kit replacing another one from another server, the certificate on the clients is looking for the other admin kit. I am not clear at this point if this is a new install or a rebuild of the admin kit. If this is a replacement for an old admin kit, did you run klbackup and create a backup? If this is a replacement for an older admin kit, you need to work on the certificate and add a line to the command above: klmover -address xxx.xxx.xxx.xxx -cert path-to-the-certificate-file Is the network a domain or workgroup environment? If it is a workgroup environment, simple file sharing must be disabled. How can you tell if it is? Open Windows Explorer and enter in the address bar: \\workstation_name\c$. If you can connect, you should be able to use the admin kit. Also, if the XP firewall is enabled, disable it. You can do so in your OU policy for 2003 (if the server is 2003) if computers are in the daomin. If the client OS is XP Home or Vista Home (choke, choke, choke), you must manually install the agent but then can use the admin kit to deploy there after. This is because XP Home and Vista Home are brain dead network wise. You might want to call us in customer support (8 AM to 9 PM EDT): 1-866-328-5700. Thanks, Bill
  6. Howdy, Problem: No matter what I do, I cannot get the network agent to synchronize with the Kaspersky Administrator Kit on some but not all computers. The client is running 6.0.1591 (admin kit). Server is 2003 Workstations is a (very, very underpowered) Windows XP Pro Problem: Cannot synchronize agent no matter what I do. What I have done: Ran Netstat and discovered that ports 14,000 and 15,000 not opened. Tried to telnet into ports once computer was listening to these ports but could not. When I enabled monitoring all ports (KAV 6.0.3.837 is installed), I was able to telnet into these two ports using UDP. I can deploy the agent through the admin kit (believe it or not) but cannot get it to synchronize. Ran packet sniffer and discovered that ports 14,000 and 15,000 were not opened. They are now open. I have run KLMOVER using -dupfix, -ps flag for port 13,000, and -cert flag. When run, it says it is successful. I then run klnagack and it says it synchronizes. Go back to the admin kit and cannot synchronize. No VLAN on switches (had him check). Ran GetSysInfo and discovered Panasonic firewall installed and had him remove it. XP firewall is off. Initially I turned it on and add agent to firewall (now off, though) KAV 6.0.3.837 installed (he installed it manually). Changed settings to monitor all ports which resolved problem with ports 14,000 and 15,000 open and able to telnet into them for UDP. I think (but not certain) Anti-Hacker module is disabled (do not remember as it is Sunday and I am not at work). This is a possible new client for us. I can get the agent to work on some computers but not all. This is so frustrating. Does anyone have a clue what I should try next? Thanks, Bill Konner
  7. Howdy, Does anyone know the command line switches to run Symantec's NoNav through the Kaspersky Admin Kit? Also, does anyone know if anything is out from Symantec to remove versions 11.* through 12? Thanks, Bill Konner
  8. Thanks for the reply, This is not KIS 2009 it is KAV 6.0.3.837 for Workstations. I do not think this user is being totally honest with us on what she did. I can remove this spyware through KAV doing a scan with riskware checked in Protection. I just do not get this. There is something on this computer we are not seeing. I have done several sysinfo's and do not see the process. I even did a HiJackThis scan and see nothing. I just do not know what is on this computer. This is so frustrating and we at corporate support in Boston have spent a lot of time on this one. I have no clue what this is. Thanks for your response. Bill K
  9. Howdy, I have a client who has a variation of Antispyware.com installed on one of her computers. I recreated what she did and easily was able to remove it changing settings in Kaspersky Anti-Virus for Workstations v 6.0.3.837 on a VM session. I did everything she did infecting the VM session but cannot recreate what infected her computer. GetSystemInfo.exe was not helpful. There is a red icon in the system tray similar to Microsoft's security warning (your firewall is disabled icon, notice). When you click this icon it brings up Antispyware.com's web page. It flashes a red shield type icon by the clock and then becomes an info question mark every couple of seconds (flashing back and fourth). GetSystemInfo.exe does not show the running process I was expecting. I have run smitfradfix and combofix. I do not have the results for smitfraudfix. Has anyone seen a variant of AntiSpwyare.com's fake antispy software that installs a red security seal by the clock? Thanks, Bill Konner
  10. This also worked for someone who had an HP 4250/4250 series printer. There must have been a module update (lots in the last couple of days) that caused this. Uninstalling and reinstalling 6.0.3.837 fixes the problem. Bill Konner Kaspersky Lab Boston, Massachusetts
  11. I work for technical support in Woburn, Massachusetts. I had a user with the same problem. They were using 6.0.3.837. What worked was completely uninstalling and reinstalling the AV. Prior to this I tried everything including uninstalling the NDIS drivers. It is possible there was a module update in the last few days that could have caused this but I am not sure. Nevertheless, a full uninstall and reinstall fixed my client's problem with the HP 1320 N (network printer--not USB). Bill Konner
  12. Howdy, Is it possible to increase the timeout period when deploying through the Administrator Kit using a VPN connection? The Admin Kit times out when deploying to remote locations. Bandwidth is an SDSL line 750,000 bandwidth. Package size is 26.5 MB approximately. The client can install one package at a time. Having remote slave servers is not practical as each site has only ten to 12 workstations. There are quite a few remote locations. Thanks, Bill Konner
  13. Hello, I need to know what font is used with Kaspersky Workstation 6.0.3.830? I have a client who has quite a few Windows 98 SE computers. Errors were made in deploying the agent with the Admin Kit and I am fixing this with him, but the font for the interface comes out as Wing Ding. He was previously using version 5.0.1152 without a problem. Any Windows 98 SE workstation upgrade to version 6.0.3.830 has this problem. I am assuming that the problem is that the workstation does not have the required font and the font was changed. To be honest, I have no clue where else to look for a solution. Thanks, Bill Konner
  14. Hi, Thanks for the reply. I did this. The workstation is totally clean. I have no clue what is wrong. This is very frustrating. Thanks again. Bill Konner
  15. Hello, I have Outlook 2007/Office 2007. Kaspersky Workstation 6.0.3.830 is installed. No conflicting software. The computer is completely up to date with all Microsoft patches. When I connect using the IMAP email account, Outlook crashes. In Outlook, Tools/Options, Mail-Anti-Virus, I first un checked in Settings: Scan upon Receiving. Outlook still crashed. If I disable Mail Anti Virus, problem goes away. I am just not sure what is wrong. Any help would be appreciated. Thank you, Bill Konner
×
×
  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.