Jump to content
Sign in to follow this  
mrgoi

DoPingServer__GetKeysHashes failed: #1181

Recommended Posts

Hi everyone.

 

New to the forum and to Kaspersky I guess! wondering weather anyone can help out with a problem I am having.

 

I’ve got a new workstation WDS WIM sysprep'd image with Kaspersky installed using the following article for consideration with cloned images:

http://support.kaspersky.com/ak8/clients_i...l?qid=208280768

 

The problem I am having is that when I push the image out to a client, I log into windows (XP Pro w/SP3 - all latest updates) and change the Kaspersky Network Agent service to Auto - Then run KLMover.exe -dupfix and then reboot the computer.

 

After this I get the following in the event viewer:

 

DoPingServer__GetKeysHashes failed: #1181 (-2146893802) System error 0x80090016 (Keyset does not exist)

 

It happens around about every 30 mins which is what i have the admin Kit console set for the network agent policy to communicate with the admin console:

Compress Netowrk Traffic: Tick

Open Network Agent ports.......: Tick

Use SSL Connection: Tick

 

Use UDP Port: Tick

UDP Port: 15000

 

Some background info

 

Kaspersky Antivirus version: 6.0 Windows Workstations MP4 (6.0.4.1424)

Network Agent: 8.0.2090

Admin Kit: 8.0.2090

 

Kaspersky updates are running fine for the client with the errors and kaspersky works fine. It is also worth noting that this is only happening to "cloaned" computers. Testing on other non cloaned work stations does not produce the error.

 

I’ve enabled the Network Access Protection service in Windows (read this could be something to do with the problem) and ran klnagchk with successful results.

 

Does anyone have any idea why this could be happening?

 

Thanks

Edited by mrgoi

Share this post


Link to post

 

Hello,

 

It seems that the password hashing component has been incorrectly installed or damaged.

Please try to run the attached utility kldpinst to fix it. The utility should be executed under administrator or LocalSystem account on the problematic machine.

 

 

kldpinst.zip

Share this post


Link to post
Hello,

 

It seems that the password hashing component has been incorrectly installed or damaged.

Please try to run the attached utility kldpinst to fix it. The utility should be executed under administrator or LocalSystem account on the problematic machine.

 

This didn't work for me.

Share this post


Link to post
Has the issue been resolved?

 

 

Hello,

 

I have an update on this error. The previous fix did not work for most people, please try the steps bellow and report back here on this thread.

 

 

1. Uninstall Kaspersky Anti-Virus For Windows Servers

 

2. Uninstall Kaspersky Network Agent

 

3. Clear the installation folder of Network Agent and Kaspersky Anti-Virus For Windows Servers

%programfiles%\kaspersky lab\

 

4. Delete following registry key «HKEY_LOCAL_MACHINE\SOFTWARE\KasperskyLab\Components\34»

 

5. Check this folder: C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys, I suppose there're no files there. Refer to the attached ''1.jpg''.

If there are files like the ones in ''old.jpg'', please feel free to delete them.

 

6. This part is very important. Please modify the properties of this folder ''C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys'', like shown in picture 2>3>4>5.jpg in sequence.

 

7. This is to grant full rights to the account you're going to install AdminKit with, in the screenshot, ''administrator'' has been taken as the example. Please adapt to your own account in real situation.

 

8. Then install Network Agent and Kaspersky Anti-Virus For Windows WorkStation

screenshot.zip

Share this post


Link to post

Thanks for your help (nevertheless your post is nearly one year old).

 

This error message in the eventlog caused after we cloned a VMWare virtual machine (with sysprep of course) with preinstalled KAV Server EE 8.0.0.559.

We decided not to delete the MachineKeys as given in Step 5.

Your steps worked for us.

Share this post


Link to post

I found the tool worked perfectly. It took about a quarter of a second to run and didn't look like it done much, but low and behold the errors stopped appearing in the local event log!!

 

Thanks!

 

Anyone know how to check for this error remotely?, on multiple sites? The error doesn't appear on the core server because it's a comms issue with the core...

 

Any ideas would be good!

Edited by RatMonkey

Share this post


Link to post
I found the tool worked perfectly. It took about a quarter of a second to run and didn't look like it done much, but low and behold the errors stopped appearing in the local event log!!

 

Thanks!

 

Anyone know how to check for this error remotely?, on multiple sites? The error doesn't appear on the core server because it's a comms issue with the core...

 

Any ideas would be good!

 

 

Hello again,

 

I found a way to remotely check the KAV event log. I used PSLOGLIST.exe (from the PS Tools collection) to list all of the events in the 'Kaspersky Event Log' into a temporary file, then used FINDSTR to check if the 'DoPingServer__GetKeysHashes failed: #1181' text was present. I then checked the errorlevel of the findstr and applied the fix via PSEXEC.exe if required. Out of the 500 servers I have running Kaspersky on this particular network, the fix was required on 490 of them!.

 

Commands used:

ECHO Checking Kaspersky Event Log at [sERVER NAME]

PSLOGLIST \\[sERVER] -u [uSERNAME] -p [PASSWORD] -s -d 1 -f e "Kaspersky Event Log" > errors.txt

FINDSTR /I "DoPingServer__GetKeysHashes failed: #1181" errors.txt >nul

IF %ERRORLEVEL% == 0 GOTO ERRFOUND

GOTO ERRNOFOUND

 

:ERRFOUND

ECHO INFO : KeyHash error found - Applying fix...

PSEXEC \\[sERVER] -u [uSERNAME] -p [PASSWORD] -c -s -f kldpinst.exe >nul

IF NOT %ERRORLEVEL% == 0 GOTO FIXFAIL

ECHO INFO : Fix successfully applied

ECHO [sERVER] >> FixedServers.txt

GOTO END

 

:FIXFAIL

ECHO [sERVER] Fix failed >> FixedStores.txt

ECHO ERROR: Fix failed

GOTO END

 

:ERRNOFOUND

ECHO INFO : KeyHash error not found - Fix not required

GOTO END

 

 

Hope that's clear!!

 

Dan.

Share this post


Link to post
Sign in to follow this  

×
×
  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.