Search the Community

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. Product: KSC 11+ Applies also to the update utility version 4.1 and more recent. Consider the following problematic scenarios: You have installed KSWS on the KSC server and enabled Traffic Security component and Traffic Security uses MITM mechanism to analyze traffic. You use a 3rd party software or hardware appliance for traffic filtering and this appliance disrupts connections to HTTPS-enabled public update servers. It can be a hardware appliance like BlueCoat or F5, FortiGate SSL Deep Inspection, or a software proxy like Squid that uses ICAP to redirect traffic to another security application for scanning. KL uses HTTP public key pinning mechanism to verify update server authenticity; certificate used for authentication is self-signed by KL. Using any MITM-based solutions for SSL traffic inspection will lead to failures in establishing connection between KSC and a HTTPS-enabled KL update source. It happens because any MITM traffic inspection will forward a wrong certificate to KSC after inspection and KSC11 will break the connection. The following string can be found in up2date trace: self signed certificate in certificate chain The following trace files are required for accurate diagnostic: $up2date-1103.*, $up2date-1103-eka.* Please bear in mind that Kaspersky Support needs KSC traces mentioned above to be collected BEFORE you apply any of the workarounds listed in this post. Troubleshooting steps If you have KSWS blocking traffic, add Up2Date.exe process or the update source certificate to trusted in Traffic Security settings. If you use a 3rd party appliance to filter traffic, you can explicitly allow traffic signed by KL certificate. Otherwise you can use HTTP to download updates. There are two ways to make KSC use HTTP: Set a server flag on KSC using following commands: klscflag.exe -fset -pv klserver -s Updater -n DisableKLHttps -t d -v 1 and on Update Agents (Distribution Points) getting updates from the internet, if any: klscflag.exe -fset -pv klnagent -s Updater -n DisableKLHttps -t d -v 1 Explicitly set update task to use HTTP sources URLs, for example http://p00.upd.kaspersky.com. Full list of HTTP-enable sources can be found in <insecure_sites_list> parameter in http://dnl-05.geo.kaspersky.com/updates/upd/updcfg2.xml Download updates using update utility 4.0. More recent version of update utility uses https.

My Kaspersky VPN recently updated itself. I was alerted to this by it asking me to accept the terms and conditions again. I then found a few disturbing changes : 1. It automatically changed my settings to accept KSN (which was previously disabled). 2. The other problem was a BIG one because I didn't spot it immediately, and therefore had my privacy breached ... IT FAILED TO HIDE MY IP AND LOCATION! I immediately logged a support ticket, and while I was waiting for a reply, I disabled my IP6 settings in my network adapter. This stopped the problem, so the automatic updated had caused the app to leak IP6 information, and thereby disclosed my IP4 address and location. When support wrote back, they advised me to remove the VPN with Kavremvr.exe and reinstall the VPN software. This has now fixed the IP6 leaking problem, BUT I RECOMMEND THAT YOU ALWAYS CHECK YOUR IP ADDRESS WHEN YOU NOTICE AN AUTOMATED UPDATE. I have asked Kaspersky to investigate the automatic update process to avoid this in the future.

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. 0 - Update completed successfully 1 - All files are up-to-date (No available updates) Result codes depending on OS type: Windows Linux(FreeBSD) Return code description -1 255 Command line parsing exception -2 254 Update Utility error (exception or another malfunction including incorrect command line arguments) -5 251 Update process failure (Not all components are updated, File does not exist on update source, Invalid file signature, Index file damaged, File is not valid XML structure or does not exist) or network error -6 250 Bases are not consistent after update -3 253 Fail (error code for other update process failures)

hI, Kaspresky Standard, i noticed last few days problem with update. when i start it manually it says: "Update databases. Last update: not run" through Home screen: it starts and after it finishes "we recommend that you update databases and application modules." in reports it says that it has finished!? Kaspersy is green but with 1 warning "Databases are out of date" Windows security says the same. before few minutes i opened an email thorough outlook and word attach. kaspersky 15 sec later found trojan (kasp. couldn't delete it. i did it manualy) should i be worried and what to do about update? Thanks in advance.

Dear Concern Please Create a Update Database Task from KSC , then schedule according to your requirements. Regards Ahnaf Tahmeed

Hello, I am facing an issue in Kaspersky Security Center. A large number of managed devices are showing the status "Databases are outdated", even though the update tasks appear to be completed successfully on some devices. Could you please advise on the possible causes of this issue and the recommended troubleshooting steps to resolve it? Environment: Kaspersky Security Center: 15.1 Endpoint Security: 14.0.0.504 Any assistance would be appreciated.

Hello Kaspersky Support Team, I am writing to report a serious issue with frequent Blue Screens of Death (BSOD) that started occurring immediately after a recent update to my Kaspersky Plus software. I suspect there may be a compatibility issue with the latest version. Problem Description: The BSOD error is consistently IRQL_NOT_LESS_OR_EQUAL (a). This issue began on or around September 2nd, 2025, which coincides with when my Kaspersky Plus updated to version 21.22.7.466(a). The crashes primarily happen when I am running specific games. The issue is most severe and easily reproducible with the game Delta Force, but it also occurs with Honkai Impact 3 (BH3.exe). System & Software Information: Kaspersky Version: Kaspersky Plus 21.22.7.466(a) Operating System: Windows 11 Pro for Workstations OS Version: 25H2 OS Build: 26220.5770 Experience Pack: Windows Feature Experience Pack 1000.26100.240.0 Graphics Driver: NVIDIA Studio Driver 580.97 Technical Details from BSOD Dump Analysis: I have analyzed a memory dump file, and the findings point towards a potential driver conflict leading to stack corruption. The key points are: The crash occurs within the NT Kernel (ntkrnlmp.exe). The faulting function is nt!RtlpUnwindPrologue, which fails during a stack walk operation. The call stack indicates this stack walk was initiated by Event Tracing for Windows (ETW), likely for logging purposes. This pattern often suggests that a filter driver (such as those used by antivirus software) may have caused an unstable state, leading to a crash when the system tries to read the stack. Could you please investigate if there is a known issue with version 21.22.7.466(a) regarding game compatibility or conflicts with specific system components? Are there any suggested workarounds or diagnostic steps I should take? Minidumps are available and glad to share. Thank you for your time and assistance.

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. Product: KSC 11 and more recent versions Consider the following problematic scenario: You use a caching proxy server to download updates for the KSC Server, for example, Squid. KSC is configured to download updates via https (default config). $up2date-1103-eka.log analysis KL uses the HTTP public key pinning mechanism to verify update server authenticity; a certificate used for authentication is self-signed by KL. A certificate revocation list is also implemented. More information about the certification revocation process is available here: https://learn.microsoft.com/en-us/archive/blogs/ieinternals/understanding-certificate-revocation-checks https://technet.microsoft.com/en-us/library/ee619754(WS.10).aspx A recent update of CRL was performed at the end of July 2023. CRL is available on this link: http://crl.kaspersky.com/cdp/KasperskyLabPublicServicesRootCertificationAuthority.crl Old CLR was valid till 23.7.2023 and is expired now. When KSC requests the CRL file, the proxy server sends back to KSC the cached version of it and the CRL verification fails. The details can be found in the $up2date-1103-eka.log to identify the issue precisely. 04:01:48.817 0x326c INF httpcli cert_revoke 0x70e2908 Got error: 0xa0010019 (http_client::eCrlHasExpired) 04:01:48.817 0x326c INF httpcli Req 0x70e2908 <- HttpsErrorOccurs: Revocation Error [0xa0010019 (http_client::eCrlHasExpired) 04:01:48.892 0x1d0c INF updater core: ========= Downloading primary index result TLS error ========= Troubleshooting steps To solve the problem, an administrator of the proxy server should turn off caching of the http://crl.kaspersky.com/cdp/KasperskyLabPublicServicesRootCertificationAuthority.crl file. It is recommended to turn off caching for all files downloaded from public update servers using this mask: *.kaspersky.com *.kaspersky-labs.com An alternative workaround: Set a server flag for KSC using the following commands: klscflag.exe -fset -pv klserver -s Updater -n DisableKLHttps -t d -v 1 Also, set a server flag for Update Agents (Distribution Points) that get updates from the Internet, if any: klscflag.exe -fset -pv klnagent -s Updater -n DisableKLHttps -t d -v 1 Explicitly set an update task to use HTTP sources for URLs, for example, http://p00.upd.kaspersky.com. The full list of HTTP-enabled sources can be found in the <insecure_sites_list> parameter at http://dnl-05.geo.kaspersky.com/updates/upd/updcfg2.xml

I want to confirm that it was for sure because of SSDFresh. I did another full scan after restart and update drivers. Fully operational... thanks

In early April, I updated Kaspersky to the latest version, but removed the older version and cleaned the registry. Around the same time, there was also a Windows security update. I have been a Kaspersky user for years without problems, but in April, suddenly a lot of issues arose. Two days ago, a new Windows security update was released, and now everything is working properly for me again (I don't know for how long). Both Smart Home and the visibility of my NAS in Windows Explorer are working again. As it looks now, the April Windows update was the cause.

Last month until now I tried to update anydesk software on app updater feature but couldn't update.

tengo kaspersky premium, la version 21.21.7.384a, y he visto que ha salido la 21.22.7.466, pero a mi no seme actualiza.. y no quiero actualizar manualmente, porque se rompen las extensiones de los navegadores y hay que desistalar entero kaspersky volver a instalar , se sabe cuando se lanza el auto update??

A new version is downloaded automatically through data update search. I don't know why but in my long experience, I've been getting a frustration when It comes to face this reported unknow problem regarding scans not being registered or saved upon finished many times before. In my last threat I've really thought by uninstalling old Kaspersky Internet Security components brought along years before were causing the cullprit. I've thought wrong again. Tonight another version is being prepared to be downloaded after running automatic data bank update, making my bug free Kaspersky Standard 21.24.8.522(b) that have been working fine for 3 months and not demonstrating the bug I've being tormented in the previous versions untill Kaspersky Standard 21.25.7.504(a) came along. The annoying bug is brought back, forcing me to manually uninstall once more this year, download the executable through My Kaspersky, install back and pass another hour testing If scans are being registered or saved upon finished and check If this bug have been resolved which so far It have.🙏 So I leave this unfortunate letter regarding these automated converting mecanism when new Kaspersky Standard versions are ready to replace the current version which can leave or generate unknow or existing problems. I can't even tell If this is an issue with the A.I. implementation or a human error but It bothers me alot to remove my protection and install all back to ficando this unbelivable problem. Another line of thought but how can I keep all the registration in the report segment from previous antivirus versions when I completely uninstall and fresh install the same Live se on the same device? I'm also hope in future version in another next 3 months does not desengage this bizarr behavior.

Problem KSC and KS4Android are implemented but KSC is offline and could not access Internet. KUU can be used for updating KS for Android and distribute the update databases. But after running KUU (Kaspersky Update Utility), you cannot find actual KES for Android versions. Solution AV bases for new KESM versions will appear in KUU UI after running KUU with empty application list. The KUU settings should look like the following (in order to update the list of supported applications, you need first to press 'Start' with a blank application list as follows):

Problem Description, Symptoms & Impact When deploying Auto patches from KSC, installing Network Agent or Kaspersky Endpoint Security, installation fails with bad junction errors. Diagnostics While Auto patch deployments over KSC will directly generate an event in Events section of KSC, manual Network Agent or KES installations will end with Fatal Error message and installation logs will contain information such as below: Application: Kaspersky Security Center Network Agent – Error 25002. Error while installing: Error 1205/0x0 (‘The system cannot find the path specified.’) accessing filesystem object ‘C:\ProgramData\Application Data\KasperskyLab\adminkit\data\.bases’. Error 25002. Error while installing: Error 1205/0x0 (‘The system cannot find the path specified.’) accessing filesystem object ‘C:\ProgramData\Application Data\KasperskyLab\adminkit\data\.bases’. A GSI collected from the device will also contain a txt file named Junction_ProgramData_PCNAME.txt which will show faulty junction points that prevent installation. GSI log: Junction Point Log with Junction: To find bad junction points manually, you check use the command below in CMD: dir /AL C:\ProgramData Workaround & Solution To remove the faulty link, you must follow the steps below: Open a CMD Prompt with elevated account Run the commands below (According to our example above, the fault junction point shows Z:\ drive) rem In order to delete the link, you must first access the directory. cd C:\Programdata rem Removing the link rd "Application Data" rem Recreating the link is not mandatory as the installation itself will create the link if not found mklink /J "C:\ProgramData\Application Data" C:\ProgramData These 3 commands can be used to create a batch file to be sent to multiple devices that are having the issue.

Consider the following scenario: Open update or scan KSWS task. Go to Schedule->Advanced→Task stop settings: Solution Task's stop settings are greyed out and cannot be changed. This is by design behaviour: Task stop settings can be changed only for real-time tasks - Real-Time File Protection and Script Monitoring. These tasks can be configured in KSWS policy to pause the execution at certain time not to interfere with 3d apps or speed up heavy operations. Task stop settings cannot be changed for Updater and On Demand Scan tasks. These tasks should be executed without pausing them.

Unfortunately, we couldn't repeat your problem. We have checked different Win10/11 + Avast Premium/Free in upgrade/update scenario 6.6 to KART 14.0. We need your dump and logs, if you can give it to us.

Похоже на какие-то сетевые проблемы. Посмотрите эти статьи: https://support.kaspersky.ru/kaspersky-for-windows/21.25/troubleshooting/update/13285 https://support.kaspersky.ru/kaspersky-for-windows/21.25/troubleshooting/update/13286

Problem In some cases, it is possible to run a database upgrade task on the KSWS/KICS/KESS host, but despite the upgrade task successfully completing, the databases are still out of date. Solution Most probably product operates in UpdateBlackListOnly mode. This happens in cases when product is activated with activation code and is unable to reach our activation servers. Thus KSWS fails to receive/refresh activation ticket and downloads updates only for Blacklist. Possible ways to solve the problem: 1. Activate with a key file; 2. In case KSWS needs to be activated with the code make sure that either KSWS server is able to reach our public activation servers directly or set up KSC to act as activation proxy and make sure that KSWS server is able to reach KSC on TCP17000.

We have checked KART 6.6 update to KART for Business 14 with Avast Premium/Free Security 26.5.10994a on our Win11 physical stand. There is no reproduction of your problem. We will continue to investigate your problem. Can you collect memory.dmp (C:\Windows\) and send it to me, if it exists? Also, it would be nice to collect KART logs. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\KasperskyLab\protected\KART.14.0\Trace\Default] "TraceFileMaxLevel"=dword:00000320 "TraceFileEnable"=dword:00000001

Hello @CK1, Welcome back! Kaspersky Internet Security (KIS) -> is Kaspersky's *old* software - they've been replaced by Kaspersky Standard - Kaspersky is offering a *free* upgrade, Kaspersky Standard can be downloaded from: https://www.kaspersky.com/downloads#update-product & please READ: Kaspersky: Basic, Standard, Plus, Premium - info & FAQ It's (your) choice whether OR not to install / update a new version over the top OR do a clean install, IF doing a clean install - save LICENSE information only, after installing the new software - run a Database update followed by a shutdown - using SHUTDOWN, not Restart & physical-power-on of the computer -> login, *sign-into* the Kaspersky Standard app, so it *synchronises* with (your) MyKaspersky account - subscription/License -> monitor for the original issue? Please share the outcome with the Community, when it's available? Thank you🙏 Flood🐳+🐋

Frage dazu in wie weit ist das beim gestaffeltem Verteilens eines Update wichtig ob KIS-Lizenz oder einer neuen . Spielt das eine Rolle bei dem verteilen des gestaffelten Update

Hello @mosh, Thank you for the images & information! The *image* that shows KAV & KIS subscriptions *appear* to be in the *same* MyKaspersky account - IF that is correct there can *only* be one email address for that account.... Please confirm, are there *two* MyKaspersky accounts? Both Kaspersky Anti-Virus (KAV) & Kaspersky Internet Security (KIS) -> are Kaspersky's *old* software - they've been replaced by Kaspersky Standard - Kaspersky is offering a *free* upgrade, Kaspersky Standard can be downloaded from: https://www.kaspersky.com/downloads#update-product & please READ: Kaspersky: Basic, Standard, Plus, Premium - info & FAQ It's (your) choice whether OR not to install / update a new version over the top OR do a clean install, IF doing a clean install - save LICENSE information only, after installing the new software - run a Database update followed by a shutdown & power-on of the computer. Thank you🙏 Flood🐳+🐋

Can You try to download from here? https://www.kaspersky.com.au/downloads#update-product

@PoisonMug Just to confirm that my latest Windows Tuesday Update May 12, 2026 didn’t install the KB5083631 preview update.