Kaspersky Internet Security mess up the NDIS driver with extremly high latency [Closed]

[sarxes]

HI all, As the title describes my problems is the huge DPC latency occured by Kaspersky Internet security. I have a huge DPC with crackling sound. I reinstalled the windows 10 64 bit , tried multiple versions from 1607 to 1903 then I found out the culprit is the KIS. All my drivers are up to date with bios together no problem running smoothly anything until I installed and tested the system. Kaspersky overwrites the NDIS driver causing huge spikes in the system only by watching a simple youtube video. I would appreciate any help in this because the error happened straight after I installed the KIS. No problem before. My PC specs: [spoiler]Motherboard: CPU Type QuadCore Intel Core i5-7600K, 4100 MHz (41 x 100) Motherboard Name Asus B150 Pro Gaming Motherboard Chipset Intel Sunrise Point B150, Intel Kaby Lake-S System Memory 8132 MB (DDR4 SDRAM) DIMM2: 4 GB DDR4-2133 DDR4 SDRAM DIMM4: 4 GB DDR4-2133 DDR4 SDRAM BIOS Type AMI (05/16/2018) Display: Video Adapter GeForce GTX 1060 6GB (6 GB) 3D Accelerator nVIDIA GeForce GTX 1060 6GB Monitor Lenovo Legion Y25F Multimedia: Audio Adapter nVIDIA GP106 HDMI/DP @ nVIDIA GP106 - High Definition Audio Audio Adapter Realtek ALC1150 @ Intel Sunrise Point PCH - High Definition Audio Storage: IDE Controller Intel(R) 100 Series/C230 Chipset Family SATA AHCI Controller Storage Controller Microsoft Storage Spaces Controller Disk Drive Samsung SSD 850 EVO 250GB (250 GB, SATA-III) Disk Drive ST1000DX002-2DV162 (1 TB, 7200 RPM, SATA-III) Network Adapter Intel(R) Ethernet Connection (2) I219-V [/spoiler] [spoiler]CONCLUSION _________________________________________________________________________________________________________ Your system appears to be having trouble handling real-time audio and other tasks. You are likely to experience buffer underruns appearing as drop outs, clicks or pops. One or more DPC routines that belong to a driver running in your system appear to be executing for too long. Also one or more ISR routines that belong to a driver running in your system appear to be executing for too long. At least one detected problem appears to be network related. In case you are using a WLAN adapter, try disabling it to get better results. One problem may be related to power management, disable CPU throttling settings in Control Panel and BIOS setup. Check for BIOS updates. LatencyMon has been analyzing your system for 0:32:25 (h:mm:ss) on all processors. _________________________________________________________________________________________________________ SYSTEM INFORMATION _________________________________________________________________________________________________________ Computer name: DESKTOP-GPEFF5A OS version: Windows 10 , 10.0, version 1903, build: 18362 (x64) Hardware: ASUSTeK COMPUTER INC., B150 PRO GAMING CPU: GenuineIntel Intel(R) Core(TM) i5-7600K CPU @ 3.80GHz Logical processors: 4 Processor groups: 1 RAM: 8132 MB total _________________________________________________________________________________________________________ CPU SPEED _________________________________________________________________________________________________________ Reported CPU speed: 3792 MHz Note: reported execution times may be calculated based on a fixed reported CPU speed. Disable variable speed settings like Intel Speed Step and AMD Cool N Quiet in the BIOS setup for more accurate results. WARNING: the CPU speed that was measured is only a fraction of the CPU speed reported. Your CPUs may be throttled back due to variable speed settings and thermal issues. It is suggested that you run a utility which reports your actual CPU frequency and temperature. _________________________________________________________________________________________________________ MEASURED INTERRUPT TO USER PROCESS LATENCIES _________________________________________________________________________________________________________ The interrupt to process latency reflects the measured interval that a usermode process needed to respond to a hardware request from the moment the interrupt service routine started execution. This includes the scheduling and execution of a DPC routine, the signaling of an event and the waking up of a usermode thread from an idle wait state in response to that event. Highest measured interrupt to process latency (µs): 19394.70 Average measured interrupt to process latency (µs): 7.778651 Highest measured interrupt to DPC latency (µs): 19389.70 Average measured interrupt to DPC latency (µs): 2.868904 _________________________________________________________________________________________________________ REPORTED ISRs _________________________________________________________________________________________________________ Interrupt service routines are routines installed by the OS and device drivers that execute in response to a hardware interrupt signal. Highest ISR routine execution time (µs): 1276.286392 Driver with highest ISR routine execution time: dxgkrnl.sys - DirectX Graphics Kernel, Microsoft Corporation Highest reported total ISR routine time (%): 0.370378 Driver with highest ISR total time: dxgkrnl.sys - DirectX Graphics Kernel, Microsoft Corporation Total time spent in ISRs (%) 0.416522 ISR count (execution time <250 µs): 1575568 ISR count (execution time 250-500 µs): 0 ISR count (execution time 500-999 µs): 13 ISR count (execution time 1000-1999 µs): 3 ISR count (execution time 2000-3999 µs): 0 ISR count (execution time >=4000 µs): 0 _________________________________________________________________________________________________________ REPORTED DPCs _________________________________________________________________________________________________________ DPC routines are part of the interrupt servicing dispatch mechanism and disable the possibility for a process to utilize the CPU while it is interrupted until the DPC has finished execution. Highest DPC routine execution time (µs): 10020.433544 Driver with highest DPC routine execution time: ndis.sys - Network Driver Interface Specification (NDIS), Microsoft Corporation Highest reported total DPC routine time (%): 0.158176 Driver with highest DPC total execution time: nvlddmkm.sys - NVIDIA Windows Kernel Mode Driver, Version 431.60 , NVIDIA Corporation Total time spent in DPCs (%) 0.588212 DPC count (execution time <250 µs): 5757255 DPC count (execution time 250-500 µs): 0 DPC count (execution time 500-999 µs): 8842 DPC count (execution time 1000-1999 µs): 8 DPC count (execution time 2000-3999 µs): 0 DPC count (execution time >=4000 µs): 0 _________________________________________________________________________________________________________ REPORTED HARD PAGEFAULTS _________________________________________________________________________________________________________ Hard pagefaults are events that get triggered by making use of virtual memory that is not resident in RAM but backed by a memory mapped file on disk. The process of resolving the hard pagefault requires reading in the memory from disk while the process is interrupted and blocked from execution. NOTE: some processes were hit by hard pagefaults. If these were programs producing audio, they are likely to interrupt the audio stream resulting in dropouts, clicks and pops. Check the Processes tab to see which programs were hit. Process with highest pagefault count: aida64.exe Total number of hard pagefaults 46330 Hard pagefault count of hardest hit process: 5346 Number of processes hit: 80 _________________________________________________________________________________________________________ PER CPU DATA _________________________________________________________________________________________________________ CPU 0 Interrupt cycle time (s): 124.486853 CPU 0 ISR highest execution time (µs): 1276.286392 CPU 0 ISR total execution time (s): 32.018869 CPU 0 ISR count: 1527483 CPU 0 DPC highest execution time (µs): 10020.433544 CPU 0 DPC total execution time (s): 41.402588 CPU 0 DPC count: 5296083 _________________________________________________________________________________________________________ CPU 1 Interrupt cycle time (s): 49.725951 CPU 1 ISR highest execution time (µs): 202.707806 CPU 1 ISR total execution time (s): 0.397184 CPU 1 ISR count: 47770 CPU 1 DPC highest execution time (µs): 1197.927743 CPU 1 DPC total execution time (s): 3.902049 CPU 1 DPC count: 398978 _________________________________________________________________________________________________________ CPU 2 Interrupt cycle time (s): 34.979037 CPU 2 ISR highest execution time (µs): 15.053797 CPU 2 ISR total execution time (s): 0.000559 CPU 2 ISR count: 331 CPU 2 DPC highest execution time (µs): 496.007384 CPU 2 DPC total execution time (s): 0.277714 CPU 2 DPC count: 39034 _________________________________________________________________________________________________________ CPU 3 Interrupt cycle time (s): 31.727501 CPU 3 ISR highest execution time (µs): 0.0 CPU 3 ISR total execution time (s): 0.0 CPU 3 ISR count: 0 CPU 3 DPC highest execution time (µs): 358.068038 CPU 3 DPC total execution time (s): 0.196367 CPU 3 DPC count: 32014[/spoiler]

[Flood and Flood's wife]

I would appreciate any help in this because the error happened straight after I installed the KIS.

Hello sarxes, Welcome! Before installing KIS did you confirm hardware/ software compatibility requirements? As you don't advise KIS version, I've provided (below) a KIS 2020 library help link Please tell us: KIS: Free or licensed?

1. Version?
2. Patch(x) x = letter?

Any other Kaspersky software installed / active? IF "yes"

1. Name
2. Version
3. Patch(x)? x = letter

---- If the system is run in SafeMode does the issue repeat? ---- (replicate the issue - activate YouTube video), at the same time, run GSI, include Windows logs, upload the .zip to cloud & post back the link please? GSI - ref below. ---- (replicate the issue - activate YouTube video), go to KIS REPORTS, select "ALL EVENTS", 24hrs, export the report, save as .txt, upload using the "upload icon" in your reply. Please let us know? Thanks. https://support.kaspersky.com/common/diagnostics/3632 https://help.kaspersky.com/KIS/2020/en-US/87342.htm

[Flood and Flood's wife]

Hello sarxes, Re if you'd like us to hear the crackling sound, please replicate in a environment with all other sound muted or suppressed, upload file to cloud, post back the link, or, zip the file & upload using the "upload icon" in your reply.

[sarxes]

Please tell us: KIS: Free or licensed? = Trial at the moment, I haven't activated yet. I have a 2 year subscriptions as always for many years.

1. Version = 19.0.0.1080
2. Patch(x) x = (g)

Any other Kaspersky software installed / active? IF "yes"

1. Name
2. Version
3. Patch(x)? x = letter

---- If the system is run in SafeMode does the issue repeat?

[sarxes]

I also reinstalled yesterday again my windows. I ran a diagnostic data without KIS installed then with KIS installed already activated. The same thing . My NDIS is somewhere in the sky.

[Flood and Flood's wife]

sarxes

1. Run in SafeMode - does the issue repeat? .
2. (replicate the issue - activate YouTube video), go to KIS REPORTS, select "ALL EVENTS", 24hrs, export the report, save as .txt, upload using the "upload icon" in your reply.
3. Was GIS collected as issue was replicated?

Thanks.

[sarxes]

1. I can't confirm the safe mode because the Latencymon doesnt work or even other driver
2. attached
3. attached in previous post and the GIS collected the data for it.

[Flood and Flood's wife]

sarxes.

1. Latency monitor is not needed to test the issue in SafeMode.
2. Was GSI collected as a YouTube video was running?
3. What exactly does "NDIS is somewhere in the sky", mean?

[sarxes]

The YouTube was running, but not necessary needed to run , sometimes just browsing the web I get high spikes. That means latency in the sky.

[Flood and Flood's wife]

sarxes, Please start device in SafeMode with Networking, replicate the issue - browse the web, at the same time, run GSI & Windows logs, upload the .zip to cloud & post back the link. & With Windows in normal mode - run MEMTEST & replicate the issue 4 times daily by 5 days, at the end of the analysis period, upload data and post back link.

[arfarf]

I had the same issue in Total Security. Disable "Network Attack Blocker" if you have something similar and my latency results behaved as expected. EDIT: Should add that I did the test while downloading something since thats only when I noticed the microstutter when moving mouse + crack and pops from headphones.

[Flood and Flood's wife]

I had the same issue in Total Security. Disable "Network Attack Blocker" if you have something similar and my latency results behaved as expected. Should add that I did the test while downloading something since thats only when I noticed the microstutter when moving mouse + crack and pops from headphones.

Hello arfarf, Welcome! Have you logged the issue with Kaspersky Technical Support? Please let us know? Thank you.

[arfarf]

Hello arfarf, Welcome! Have you logged the issue with Kaspersky Technical Support? Please let us know? Thank you.

No I have not. I admit Im a bit to lazy to find it out so I hoped a reply here would at least show that more had the same issue. Please let me know what I can do to help.

[Flood and Flood's wife]

No I have not. I hoped a reply here would at least show that more had the same issue. Please let me know what I can do to help.

Hello arfarf, Thank you for posting back!. Updating a post does show others, more than one person has the issue, however, with this issue, and to help anyone, who might also get this issue. the Lab need to be consulted.

1. Your additional information "I noticed the microstutter when moving mouse + crack and pops from headphones", is actually really helpful, as is:"disable Network Attack Blocker", even tho, (imo), that's unwise, unless it's temporary,

The Lab will ask for:

1. GSI & Windows Logs
2. Traces , the Traces need to be run at the same time the issue is occuring.
3. & the results of the SafeMode tests.
4. If you could make a recording of the "crack and pops from headphones", (& you've tested that specific sound issue is happening with any headset), then that would also be very helpful.
5. Kaspersky Technical Support, select Location, select General Product Use, then select from available options:

Phone (not available all regions) OnlineChat (not available all regions) Log an online request - MyKaspersky.com account login You may look at this & think "urrrgh, that's a lot of work", but really, it's not & it's good for your Karma:wink: Thanks again:pray_tone3:!