lnet

I just found a Windows PC with Windows 1909 which has Kaspersky 4.0.0.1003(b). Does this version of KART not automatically update or does the autoupdate of KART not work because of the older Windows 10 Version 1909 ? Would it be an option to install this older Kaspersky and to not update it or is this to risky because i noticed KART 5.0.0 does state is the first compatible with Windows 10 20H2

Hi again pdwk. Thanks again to you ! -very strange the cat copy did boot ours up again and that even both folders where the same same before restart workstations did not boot after. -disable drivers signature did not work for us. very strange indeed no recovery option did work. i don't know about some of our pcs having drivers signature off. should i check out if the ones not affected do have this disabled ? how ?​​​​​​​ -let´s see if kaspersky responds. i also left feedback on kart uninstall dialog. -i am very concerned about the servers. also i am very concerned leaving all pcs and servers without antiransome. i tried Sophos but i never had Sophos finding a ransome whilst kart did stop some of them. KART was good because we were able to use server specific antivirus and microsoft antivirus on windows 10 + kart. do you use other antivirus on client than the microsoft one ? ​​​​​​​-unfortunately i had the same experience: no one as simple as KART, Acronis, cyberransome and Bitdefender not anymore available, the others still available are or in beta, not simple, only folder protection or not starting the service -we have more than 1000 files in the cat folder​​​​​​​​​​​​​​ -i found this: Linkindeed this is very simular if not exactly the same we are experiencing now...

i have kart installed on Windows Servers as well. Did not uninstall/restart them by now. Do u have it installed on Servers as well ? Did u uninstall them ? What would be another valuable Antiransome to install in the meantime ? Tested some but any convinced me. I activated folder protection in Windows Antiransome by now...

thanks for your feedback. strange the copy of the cart is not making our pcs boot again whilst on yours they did with the same copy syntax. how can we identify if a windows is already affected ? i tried to compare the cat files before restarting some working windows pcs after uninstalling kart and they were the same in both folders but still some of them did not restart. i also did write to Kaspersky in regarding. did u as well ? so u found out that KART 5.0.0.3660 (aka 3.0.1.3660) is causing the problem ? Is this the version all Windows update to automatically ?

me too on many computers

Hi pdwk, Unfortunately your solution to copy the *.cat files did not work for us (tried it on 3 different Pcs). I also tried to copy the *.cat files from a working pc and this didn’t work as well. In your case - was the folder you specified above in the CatRoot empty? Could you tell in advance which Pc will have the issue after a reboot? Do you think removing the KART tool on an already affected pc works? The issue is somehow connected to printing files and/or opening pdf files - a client told me that after opening a pdf file an error occurred (unfortunately we have no picture of the error) and after printing that pdf the computer crashed.

Yesterday we had 2 PCs with Windows with 20H2 and Windowsupdate KB5000802 installed (not sure since when they had this installed) where we installed the Hotfix KB5001567. On the next reboot they did not start anymore. Could be caused by KART having in the meantime updated or emptyed the folders and therefore Hotfix influencing it only because it's requested restart of Windows...

Hi peek, thanks again for your precious hints and experiences. We are at the same point. The only common item between all the computers that experienced this bug was KART. Interesting many users on your side reported seeing the KART update message. Actually this and the fact KART was the only item between all the computers that experienced this bug was what made me think KART was involved. Also others users reported they only had BSOD when printing but then PCs started normal whilst ours did not start. Very cool u found that the *.cat files were all deleted. How did u find out this ? Perfect u did test copying the cat files than removing KART and testing again. It would have been the final solution if we would know which KART version is the cause. We have many PCs we did not yet shut down for some days. We will do a check if all of them have the cat files and will check the KART version if we find one without the cat files. Did you uninstall KART on all your PCs or is there one specific version or minimum version up which are safe ? We still do not know if uninstalling KART would be the best solution to make sure the problem does not arise again (and first checking on the same ones if cat files are there). Would disabling KART services be the way to go. Or completely uninstalling after checking cat files are there ? To which version does KART automatically update right now ? the different version number under control panel and KART itself are very confusing. Not sure yet how all of this is influenced by the buggy windowsupdate, printing operations and printing errors and/or if only the fact windows reboot was initiated. I guess windows update in combination with one specific KART version creates the problem. Not sure if all KART are auto updating to that one after some time. That would mean more PCs affected in the next days after the next reboot. Unfortunately Windows lokal Restore with option keeping files deleted the program files folder so we cannot check which exact KART version the affected PCs had. The file appearing on the desktop after windows restore “removed apps on Windows refresh” does state: Kaspersky Anti-Ransomware Tool for Business Kaspersky Lab 5.0.0.0 We did not start the build-in Windows Disk Cleanup on this workstations. Maybe back in time on some we did but surely not on all affected ones up to now. Is there any Kaspersky Support reading our post ? Are we both the only ones having KART installed and having this problems ? Don't find other infos in internet in regarding.

Hi pdwk, Thank you for the hints - we will test them tomorrow - so until now you where not able to recreate this bug? Can you tell us when exactly your crashes happen? Where there any signs for a crash?

Hi pdwk, we also have such a similar problem. Many of our client’s PC’s were stuck in a boot loop after a windows update restart. We first thought that was the already known issue with the KB500802/KB500808 update. But in our case all of the affected Pcs had to be reinstalled from scratch - no recovery option was working. The BSOD error was: CRITITCAL SERVICE FAILED. All of those computers had Kaspersky 5.0.0.0 installed. We noticed that Kaspersky was showing a pop up windows a few times during the day then after a restart they crashed. We had this issue on 9 computers. Were you able to restore those affected PCs? Another strange thing: Since we suspected a buggy windows update causing those problems, we installed Kaspersky again on the freshly installed PC’s. We downloaded the latest Kaspersky Antiransome Tool for Business from the webpage “KART_5.0.0.92320-Business.exe” - after installing that exe, I checked the version in the Control Panel and there the version number is 3.0.1.3039 whereas in the Kaspersky Tool under settings- Get Support its shown 5.0.0.3039. Very confusing!!! Best regards lnet