After Installing the new Agent with Kasperky AntiVirus several clients dont start the AV service and wants a endless reboot. After any reboot, we gets the same log.
LDAV.log:
---------- Initializing LANDesk AV Service -----------
Tue, 18 Dec 2012 12:59:13 Running on workstation, LANDesk system language: DEU
Tue, 18 Dec 2012 12:59:13 Setting permission on HKLM\Software\LANDesk\ManagementSuite\WinClient\Antivirus...
Tue, 18 Dec 2012 12:59:13 Setting permission on HKLM\Software\LANDesk\ManagementSuite\WinClient\Antivirus\License...
Tue, 18 Dec 2012 12:59:13 Loading behaviors...
Tue, 18 Dec 2012 12:59:13 Successfully loaded behaviors
Tue, 18 Dec 2012 12:59:13 Loading the settings: CORESERVER_v1765.5
Tue, 18 Dec 2012 12:59:13 Loading settings for each component
Tue, 18 Dec 2012 12:59:13 Loading update settings...
Tue, 18 Dec 2012 12:59:13 pilot: false
Tue, 18 Dec 2012 12:59:13 Download from core then internet
Tue, 18 Dec 2012 12:59:13 noredir: false, SadBandwidth: 50
Tue, 18 Dec 2012 12:59:13 nopeer: false, PeerBandwidth: 75
Tue, 18 Dec 2012 12:59:13 update application modules: true
Tue, 18 Dec 2012 12:59:13 vulscan app path dir: C:\Program Files (x86)\LANDesk\LDClient\
Tue, 18 Dec 2012 12:59:13 Successfully added C:\Program Files (x86)\LANDesk\LDClient\antivirus\kav\ to PATH
Tue, 18 Dec 2012 12:59:13 Initializing the connector...
Tue, 18 Dec 2012 12:59:13 ERROR: Failed to initialize connector
Tue, 18 Dec 2012 12:59:13 LDAV requires a reboot
Tue, 18 Dec 2012 12:59:13 Core server name found in HKLM\SOFTWARE\Intel\LANDesk\LDWM: CORESERVER
DeferredReportAction: name '', code '25', type '80', status 'Sie müssen einen Neustart durchführen, um die Installation abzuschließen. (8D804D10)'
Core server name found in HKLM\SOFTWARE\Intel\LANDesk\LDWM: CORESERVER
Tue, 18 Dec 2012 12:59:13 Sent alert : internal.ldms.LDAV.AVServiceFailedToStart for (, Sie müssen einen Neustart durchführen, um die Installation abzuschließen.)
Begin submit antivirus info...
re-getting the computer idn
File C:\Program Files (x86)\LANDesk\Shared Files\ProxyHost.exe version within specified
Attempting to connect to proxyhost
connect to proxy result: 0
Using proxyhost to communicate with the core
Gerätekennung wird mit Core CORESERVER abgeglichen
In SendRequest: Action = SOAPAction: "http://tempuri.org/ResolveDeviceID"
Tue, 18 Dec 2012 12:59:13 SendRequest: SOAPAction: "http://tempuri.org/ResolveDeviceID"
Tue, 18 Dec 2012 12:59:14 Success
local address: 10.4.253.120
Last status: Fertig
GetComputerIdn {519D6A10-12B9-4D4F-B6CD-284922A801E2} = 2697
In SendRequest: Action = SOAPAction: "http://tempuri.org/PutInfectedQuarantinedAndTrusted"
Tue, 18 Dec 2012 12:59:14 SendRequest: SOAPAction: "http://tempuri.org/PutInfectedQuarantinedAndTrusted"
Tue, 18 Dec 2012 12:59:15 Success
Successfully submitted AV file information to the core
Vulscan reboot key exists. Reboot is needed.
Vorheriger Aktionsverlauf wird an Core gesendet.
Tue, 18 Dec 2012 12:59:15 HTTP POST: http://CORESERVER/WSVulnerabilityCore/VulCore.asmx
Tue, 18 Dec 2012 12:59:15 Setting a proxy...
Tue, 18 Dec 2012 12:59:15 Setting socket timeout to 1000 * 60 * 4
Tue, 18 Dec 2012 12:59:15 Success
Last status: Fertig
Tue, 18 Dec 2012 12:59:15 2980: Service stopped
Tue, 18 Dec 2012 12:59:15 Exiting WinMain: main service: true