[Kaspersky flooding clients with MSI files]

Have an update:

 

After some investigation we found that Windows Defender had been reenabled on the system (maybe through MS update – not sure). Since Windows Defender is  incompatible with KSM we believe it was causing the auto update to fail. Unfortunately, the update engine still requested an update file every hour (at 80MB a piece) so the erosion of drive space was pronounced (took about a month to drive it to almost 0).

 

To remedy, we disabled Windows Defender, manually applied the update, and are no longer seeing the update payload spooled down. We inventoried all files in the install directory with the files signature of the failed updated and moved them off box for eventual deletion.

 

Not sure if this applies to anyone else reporting issue but may be worth a look. 

[Kaspersky flooding clients with MSI files]

We have a similar issue on at least server. We have 1,185 instances of the same 80MB database update file. The file date for each is 08/27/2019  and this correlates to when the logical drive capacity started it march towards zero. I have had to extend the drive to free up additional space as I am reluctant to start sniping files from this directory. 

 

KES for Windows: 11.1.0.15919 AES56

DB Release: 10/30/2019 12:47 AM

Server: 2019 b17763