ANSWERED Kaspersky users read here

[JuanV 0]

Running must current stable release on windows 7 64bit.  As of today once VPN is connected I cannot load any pages within browsers.  Tried firefox and explorer.  Everything works with VPN off, tried uninstalling and reinstalling Airvpn, turned off all antivirus any suggestions?

[markoomg 0]

Same problem here. A little bit more details on my side:

At first I tried to change the DNS servers to use ones from OpenDNS => no improvment.

Then I started continuous pings to an ip adress (8.8.8.8) and to a fqdn (www.yahoo.com). After connecting to the vpn, as soon as I start firefox I got no ICMP responses so it's not DNS related. Works again when I close the browser.

 

Seems to work with edge tho. I tried several airvpn servers, I reinstalled Firefox from scratch => No improvments

 

I'm wondering, can it be related to SHA1 used in OpenVPN? I heard there was a POC of SHA1 collisions few weeks ago and my Firefox was updated yesterday...

Also from Firefox 52 release notes :

Display (but allow users to override) an “Untrusted Connection” error when encountering SHA-1 certificates that chain up to a root certificate included in Mozilla’s CA Certificate Program. (Note: Firefox continues to permit SHA-1 certificates that chain to manually imported root certificates.) Read more about the Mozilla Security Team’s plans to deprecate SHA-1

 

 

Thanks in advance for your help.

 

Config: Windows 10, Eddie v2.11.8, KAV

 

M

[Gary Ashton 6]

I'm having the same problem. Windows 10.  Windows installed a large update last night. This morning when I came to use the internet using Firefox all was fine. Connected AirVPN and it stopped working. Close the Eddie client and all is ok again. 

I tried re-installing both Firefox and Eddie using the latest installers. Still no-go.

Start Edge though and all works fine. Sounds like something to do with Firefox as explained above. This is a real pain as I REALLY do not want to use Edge. I'll have to see if I can find another browser that will work.

 

Anyone have any suggestions? (No, NOT Chrome!).

[Staff 9973]

Config: Windows 10, Eddie v2.11.8, KAV

 

M

 

 

EDIT: in light of the news about Kaspersky Patch D, this message can be ignored for the rest of the thread. It pertains to a different Kaspersky problem which causes similar symptoms, but that's nowadays probably totally unrelated to the problem discussed in this thread caused by Patch D of Kaspersky. The solution that's described below applies to markoomg and Gary Ashton's problem and probably not to the other users in this thread.

 

Just for the readers' comfort, from the ticket we see that markoomg problems has been solved. It was caused by a Kaspersky feature, an injection of a javascript script in every web site page performed by Kaspersky itself.

 

This potentially catastrophic security problem has been noted since 2015. See here for example:

http://blog.oratronik.org/?p=457

https://www.reddit.com/r/privacy/comments/3frjqw/psa_kaspersky_injects_remote_javascript_into_all/

 

However, we ignore why only now this has become a problem in browsing. We have an abnormally high amount of tickets about the very same problem, all of them caused by Kaspersky, and all of them written in the last 24/48 hours (nothing before that, so the question is: did something change in Kaspersky default settings?).

 

Kind regards

[Gary Ashton 6]

For information, I tried all of the techniques in the link above and none worked.

 

However, I did find that removing the Kaspersky Firefox Add-in did solve it. It's an optional plug-in anyway which Kaspersky asks to add on initial installation so you can elect to not have it. Once it's installed though you can't remove it by normal means using the browser. there is another way...

I removed it entirely by going to the registry and removing the addin here:

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins

 

You'll see the Kaspersky Addin there so just delete the key.

If you remove the registry key then it won't load the plugin when Firefox starts. Solved my problem. Hope this helps someone else.

 

[CrankyCat 7]

I have this same issue on Windows 7x64, the current Kaspersky Total Security (17.0.0.611 d), and Eddie 2.12.4. I don't have the registry entries that Gary suggested but do have the Kaspersky browser addons installed.

The logs don't show anything unusual upon connecting initially. If I open a command prompt and use "ping -t airvpn.org" I see the expected latency continuing indefinitely. However, as soon as I open any browser window, and they all default to a blank tab, the ping immediately starts showing "Request timed out". Occasionally I'll see a successful ping at over 3000ms but can't really do anything. If I close all browser windows the connection comes back again and the pings resume.

The first time I tried starting the AirVpn client I already had browsers open and the connections would time out and retry.

I tried disabling Kaspersky protection including unchecking "Automatically activate Kaspersky Protection extension in browsers", disabling Kaspersky in all browsers, and disabling Web Anti-Virus and private browsing. I finally tried disabling Kaspersky completely. While just opening a browser no longer causes the pings and all other network activity to fail, any attempt to actually browse to any web page causes latency to go extremely high and pings start failing. Once the web page times out the pings start succeeding again.

 

No updates are currently available but before this issue these were installed:

 

Windows Malicious Software Removal Tool x64 - March 2017 (KB890830)

March, 2017 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4012215)

Security Update for Microsoft Silverlight (KB4013867)

 

I'm going to wait until tomorrow before uninstalling Kaspersky and seeing if that works in case the issue gets resolved.

 

Below are the verbose logs. Nothing really seems obvious except the timeouts when I manually chose to refresh the server list with a browser open

. 2017.03.18 01:37:45 - Data path: C:\Users\cranky\AppData\Local\AirVPN
. 2017.03.18 01:37:45 - Application path: C:\Program Files\AirVPN
. 2017.03.18 01:37:45 - Executable path: C:\Program Files\AirVPN\AirVPN.exe
. 2017.03.18 01:37:45 - Command line arguments (1): path="home"
. 2017.03.18 01:37:45 - Operating System: Microsoft Windows NT 6.1.7601 Service Pack 1
. 2017.03.18 01:37:45 - Shell of 'C:\Program Files\AirVPN\openvpn.exe','--version' done sync in 0 ms, Output: OpenVPN 2.4.0 x86_64-w64-mingw32 [sSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jan 29 2017
. 2017.03.18 01:37:45 - library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09
. 2017.03.18 01:37:45 - Windows version 6.1 (Windows 7) 64bit
. 2017.03.18 01:37:45 - Originally developed by James Yonan
. 2017.03.18 01:37:45 - Copyright © 2002-2017 OpenVPN Technologies, Inc.
. 2017.03.18 01:37:45 - Compile time defines: enable_async_push=no enable_comp_stub=no enable_crypto=yes enable_crypto_ofb_cfb=yes enable_debug=yes enable_def_auth=yes enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=needless enable_fragment=yes enable_iproute2=no enable_libtool_lock=yes enable_lz4=yes enable_lzo=yes enable_management=yes enable_multi=yes enable_multihome=yes enable_pam_dlopen=no enable_pedantic=no enable_pf=yes enable_pkcs11=yes enable_plugin_auth_pam=no enable_plugin_down_root=no enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=yes enable_small=no enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=no enable_werror=no enable_win32_dll=yes enable_x509_alt_username=no with_crypto_library=openssl with_gnu_ld=yes with_mem_check=no with_plugindir='$(libdir)/openvpn/plugins' with_special_build= with_sysroot=no
. 2017.03.18 01:37:45 - Shell of 'C:\Program Files\AirVPN\plink.exe','-V' done sync in 16 ms, Output: plink: Release 0.67
. 2017.03.18 01:37:45 - Shell of 'C:\Program Files\AirVPN\stunnel.exe','-version' done sync in 15 ms, Output: stunnel 5.40 on x86-pc-mingw32-gnu platform
. 2017.03.18 01:37:45 - Compiled/running with OpenSSL 1.0.2k 26 Jan 2017
. 2017.03.18 01:37:45 - Threading:WIN32 Sockets:SELECT,IPv6 TLS:ENGINE,OCSP,PSK,SNI
. 2017.03.18 01:37:45 - Global options:
. 2017.03.18 01:37:45 - RNDbytes = 64
. 2017.03.18 01:37:45 - RNDoverwrite = yes
. 2017.03.18 01:37:45 - taskbar = yes
. 2017.03.18 01:37:45 - Service-level options:
. 2017.03.18 01:37:45 - ciphers = HIGH:!DH:!aNULL:!SSLv2
. 2017.03.18 01:37:45 - curve = prime256v1
. 2017.03.18 01:37:45 - debug = notice
. 2017.03.18 01:37:45 - logId = sequential
. 2017.03.18 01:37:45 - options = NO_SSLv2
. 2017.03.18 01:37:45 - options = NO_SSLv3
. 2017.03.18 01:37:45 - sessionCacheSize = 1000
. 2017.03.18 01:37:45 - sessionCacheTimeout = 300 seconds
. 2017.03.18 01:37:45 - stack = 65536 bytes
. 2017.03.18 01:37:45 - TIMEOUTbusy = 300 seconds
. 2017.03.18 01:37:45 - TIMEOUTclose = 60 seconds
. 2017.03.18 01:37:45 - TIMEOUTconnect = 10 seconds
. 2017.03.18 01:37:45 - TIMEOUTidle = 43200 seconds
. 2017.03.18 01:37:45 - verify = none
. 2017.03.18 01:37:45 - Shell of 'C:\Program Files\AirVPN\curl.exe','--version' done sync in 0 ms, Output: curl 7.34.0 (x86_64-pc-win32) libcurl/7.34.0 OpenSSL/1.0.0k zlib/1.2.8 WinIDN libssh2/1.4.3 librtmp/2.3
. 2017.03.18 01:37:45 - Protocols: dict file ftp ftps gopher http https imap imaps ldap pop3 pop3s rtmp rtsp scp sftp smtp smtps telnet tftp
. 2017.03.18 01:37:45 - Features: AsynchDNS GSS-Negotiate IDN Largefile NTLM SSL SSPI libz
I 2017.03.18 01:37:45 - OpenVPN Driver - TAP-Windows Adapter V9, version 9.21.2
I 2017.03.18 01:37:45 - OpenVPN - Version: 2.4.0 - OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09 (C:\Program Files\AirVPN\openvpn.exe)
I 2017.03.18 01:37:45 - SSH - Version: plink 0.67 (C:\Program Files\AirVPN\plink.exe)
I 2017.03.18 01:37:45 - SSL - Version: stunnel 5.40 (C:\Program Files\AirVPN\stunnel.exe)
I 2017.03.18 01:37:45 - curl - Version: 7.34.0 (C:\Program Files\AirVPN\curl.exe)
I 2017.03.18 01:37:45 - Certification Authorities: C:\Program Files\AirVPN\cacert.pem
! 2017.03.18 01:37:45 - Activation of Network Lock - Windows Filtering Platform
. 2017.03.18 01:37:45 - Updating systems & servers data ...
I 2017.03.18 01:37:45 - Session starting.
. 2017.03.18 01:37:45 - IPv6 disabled with packet filtering.
. 2017.03.18 01:37:46 - Systems & servers data update completed
I 2017.03.18 01:37:48 - Checking authorization ...
! 2017.03.18 01:37:48 - Connecting to Kocab (Netherlands, Alblasserdam)
. 2017.03.18 01:37:49 - OpenVPN > OpenVPN 2.4.0 x86_64-w64-mingw32 [sSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jan 29 2017
. 2017.03.18 01:37:49 - OpenVPN > Windows version 6.1 (Windows 7) 64bit
. 2017.03.18 01:37:49 - OpenVPN > library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09
. 2017.03.18 01:37:49 - OpenVPN > MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:3100
. 2017.03.18 01:37:49 - OpenVPN > Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.03.18 01:37:49 - OpenVPN > Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.03.18 01:37:49 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.162.180:443
. 2017.03.18 01:37:49 - OpenVPN > Socket Buffers: R=[8192->524288] S=[8192->524288]
. 2017.03.18 01:37:49 - OpenVPN > Attempting to establish TCP connection with [AF_INET]213.152.162.180:443 [nonblock]
. 2017.03.18 01:37:50 - OpenVPN > TCP connection established with [AF_INET]213.152.162.180:443
. 2017.03.18 01:37:50 - OpenVPN > TCP_CLIENT link local: (not bound)
. 2017.03.18 01:37:50 - OpenVPN > TCP_CLIENT link remote: [AF_INET]213.152.162.180:443
. 2017.03.18 01:37:50 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.162.180:443, sid=868e7b61 81720e29
. 2017.03.18 01:37:50 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org
. 2017.03.18 01:37:50 - OpenVPN > Validating certificate key usage
. 2017.03.18 01:37:50 - OpenVPN > ++ Certificate has key usage 00a0, expects 00a0
. 2017.03.18 01:37:50 - OpenVPN > VERIFY KU OK
. 2017.03.18 01:37:50 - OpenVPN > Validating certificate extended key usage
. 2017.03.18 01:37:50 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
. 2017.03.18 01:37:50 - OpenVPN > VERIFY EKU OK
. 2017.03.18 01:37:50 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org
. 2017.03.18 01:37:51 - OpenVPN > Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
. 2017.03.18 01:37:51 - OpenVPN > [server] Peer Connection Initiated with [AF_INET]213.152.162.180:443
. 2017.03.18 01:37:52 - OpenVPN > SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
. 2017.03.18 01:37:53 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.5.0.1,comp-lzo no,route-gateway 10.5.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.5.7.119 255.255.0.0'
. 2017.03.18 01:37:53 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified
. 2017.03.18 01:37:53 - OpenVPN > OPTIONS IMPORT: compression parms modified
. 2017.03.18 01:37:53 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified
. 2017.03.18 01:37:53 - OpenVPN > OPTIONS IMPORT: route options modified
. 2017.03.18 01:37:53 - OpenVPN > OPTIONS IMPORT: route-related options modified
. 2017.03.18 01:37:53 - OpenVPN > OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
. 2017.03.18 01:37:53 - OpenVPN > Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
. 2017.03.18 01:37:53 - OpenVPN > Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.03.18 01:37:53 - OpenVPN > Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
. 2017.03.18 01:37:53 - OpenVPN > Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.03.18 01:37:53 - OpenVPN > interactive service msg_channel=0
. 2017.03.18 01:37:53 - OpenVPN > ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=11 HWADDR=78:24:af:d9:71:29
. 2017.03.18 01:37:53 - OpenVPN > open_tun
. 2017.03.18 01:37:53 - OpenVPN > TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{6FDF7A09-EB8E-485D-BDCE-6770CFE0B0AA}.tap
. 2017.03.18 01:37:53 - OpenVPN > TAP-Windows Driver Version 9.21
. 2017.03.18 01:37:53 - OpenVPN > Set TAP-Windows TUN subnet mode network/local/netmask = 10.5.0.0/10.5.7.119/255.255.0.0 [sUCCEEDED]
. 2017.03.18 01:37:53 - OpenVPN > Notified TAP-Windows driver to set a DHCP IP/netmask of 10.5.7.119/255.255.0.0 on interface {6FDF7A09-EB8E-485D-BDCE-6770CFE0B0AA} [DHCP-serv: 10.5.255.254, lease-time: 31536000]
. 2017.03.18 01:37:53 - OpenVPN > Successful ARP Flush on interface [13] {6FDF7A09-EB8E-485D-BDCE-6770CFE0B0AA}
. 2017.03.18 01:37:53 - OpenVPN > do_ifconfig, tt->did_ifconfig_ipv6_setup=0
. 2017.03.18 01:37:58 - OpenVPN > TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
. 2017.03.18 01:37:58 - OpenVPN > C:\Windows\system32\route.exe ADD 213.152.162.180 MASK 255.255.255.255 192.168.1.1
. 2017.03.18 01:37:58 - OpenVPN > ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
. 2017.03.18 01:37:58 - OpenVPN > Route addition via IPAPI succeeded [adaptive]
. 2017.03.18 01:37:58 - OpenVPN > C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.5.0.1
. 2017.03.18 01:37:58 - OpenVPN > ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
. 2017.03.18 01:37:58 - OpenVPN > Route addition via IPAPI succeeded [adaptive]
. 2017.03.18 01:37:58 - OpenVPN > C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.5.0.1
. 2017.03.18 01:37:58 - OpenVPN > ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
. 2017.03.18 01:37:58 - OpenVPN > Route addition via IPAPI succeeded [adaptive]
. 2017.03.18 01:37:58 - Starting Management Interface
. 2017.03.18 01:37:58 - OpenVPN > Initialization Sequence Completed
. 2017.03.18 01:37:58 - DNS leak protection with packet filtering enabled.
. 2017.03.18 01:37:58 - Flushing DNS
. 2017.03.18 01:37:58 - Shell of 'cmd.exe','/c ipconfig /flushdns' done sync in 0 ms, Output: Windows IP Configuration
. 2017.03.18 01:37:58 - Successfully flushed the DNS Resolver Cache.
. 2017.03.18 01:38:04 - Shell of 'cmd.exe','/c ipconfig /registerdns' done sync in 6022 ms, Output: Windows IP Configuration
. 2017.03.18 01:38:04 - Registration of the DNS resource records for all adapters of this computer has been initiated. Any errors will be reported in the Event Viewer in 15 minutes.
I 2017.03.18 01:38:04 - Checking route
I 2017.03.18 01:38:06 - Checking DNS
! 2017.03.18 01:38:09 - Connected.
. 2017.03.18 01:38:09 - OpenVPN > MANAGEMENT: Client connected from [AF_INET]127.0.0.1:3100
. 2017.03.18 01:38:09 - OpenVpn Management > >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info
. 2017.03.18 01:40:29 - Updating systems & servers data ...
. 2017.03.18 01:40:30 - Systems & servers data update completed
. 2017.03.18 01:40:52 - Updating systems & servers data ...
. 2017.03.18 01:41:02 - Updating systems & servers data ..., 1° try failed (curl: (28) Connection timed out after 10046 milliseconds)
. 2017.03.18 01:41:12 - Updating systems & servers data ..., 2° try failed (curl: (28) Operation timed out after 10046 milliseconds with 0 out of -1 bytes received)
. 2017.03.18 01:41:22 - Updating systems & servers data ..., 3° try failed (curl: (28) Connection timed out after 10046 milliseconds)
. 2017.03.18 01:41:32 - Updating systems & servers data ..., 4° try failed (curl: (28) Operation timed out after 10047 milliseconds with 0 out of -1 bytes received)
. 2017.03.18 01:41:32 - Cannot retrieve systems & servers data. (curl: (28) Connection timed out after 10046 milliseconds)
! 2017.03.18 01:41:58 - Disconnecting
. 2017.03.18 01:41:58 - Management - Send 'signal SIGTERM'
. 2017.03.18 01:41:58 - OpenVPN > MANAGEMENT: CMD 'signal SIGTERM'
. 2017.03.18 01:41:58 - OpenVPN > C:\Windows\system32\route.exe DELETE 213.152.162.180 MASK 255.255.255.255 192.168.1.1
. 2017.03.18 01:41:58 - OpenVPN > Route deletion via IPAPI succeeded [adaptive]
. 2017.03.18 01:41:58 - OpenVPN > C:\Windows\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.5.0.1
. 2017.03.18 01:41:58 - OpenVPN > Route deletion via IPAPI succeeded [adaptive]
. 2017.03.18 01:41:58 - OpenVPN > C:\Windows\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.5.0.1
. 2017.03.18 01:41:58 - OpenVPN > Route deletion via IPAPI succeeded [adaptive]
. 2017.03.18 01:41:58 - OpenVPN > Closing TUN/TAP interface
. 2017.03.18 01:41:58 - OpenVPN > SIGTERM[hard,] received, process exiting
. 2017.03.18 01:41:58 - Connection terminated.
. 2017.03.18 01:41:58 - DNS leak protection with packet filtering disabled.
. 2017.03.18 01:41:58 - IPv6 restored with packet filtering.
. 2017.03.18 01:41:58 - Flushing DNS
. 2017.03.18 01:41:58 - Shell of 'cmd.exe','/c ipconfig /flushdns' done sync in 16 ms, Output: Windows IP Configuration
. 2017.03.18 01:41:58 - Successfully flushed the DNS Resolver Cache.
. 2017.03.18 01:42:04 - Shell of 'cmd.exe','/c ipconfig /registerdns' done sync in 6037 ms, Output: Windows IP Configuration
. 2017.03.18 01:42:04 - Registration of the DNS resource records for all adapters of this computer has been initiated. Any errors will be reported in the Event Viewer in 15 minutes.
! 2017.03.18 01:42:04 - Session terminated.
. 2017.03.18 01:42:04 - Shutdown in progress
. 2017.03.18 01:42:04 - Deactivation of Network Lock
. 2017.03.18 01:42:04 - Shutdown complete

[Rockpile10 0]

I have the same issue. I've removed the Kaspersky add-on for Chrome and deleted the key in the registry, but it's made no difference.  Pages sometimes load after about 1min. I managed to get to a broadband speed testing site and it recorded my usual speed of about 50Mbps, but as soon as I tried to move to another site it wouldn't connect.  I tried completely disabling Kaspersky Total Security and that didn't help. I've totally reinstalled Kaspersky and it strangely worked for a brief time but it's back to the same problem today.

[Gary Ashton 6]

CrackyCat,

 

There is another place that the plugin is registered. It depends on the version of Kaspersky you have - either Anti-Virus or Internet Security...

 

I believe for IS, you need to go to this location:

 

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions

 

Hope this helps.

[CrankyCat 7]

I uninstalled KB890830 and that did nothing. AirVpn worked fine after I uninstalled Kaspersky completely.

I reinstalled Kaspersky and configured it to never enable the browser addons and all that did was avoid interfering until I actually tried to go to a web site. As opposed to as soon as I opened a browser.

I tried testing with airvpn.org and enabling it as a trusted site, etc. but that didn't help.

 

To me the problem seems to be extremely high latency. Perhaps DNS entries for addresses needed by Kaspersky don't resolve. That would explain it. I suppose I'll need to open a ticket with Kaspersky. AirVpn may already have contacted them but it's the weekend and all so probably nothing in the next couple of days anyway.

[chuzzwuzzer01 0]

I have been having the same probs losing my connection with windows 7 and Kaspersky. I will be keeping an eye on this thread and hopefully there's a workaround.

[Guest]

I don't think this is just a windows issue. Worked fine this yesterday. Not this AM.

 

I'm running open vpn connect & iOS 10.2.1. Treid both wifi 300mbit and cellular. Attempting to hook into the US tcp & udp server ports (443/53), connects but no throughput so the pages time out. Tried Canada, very slow. Turn off vpn works fine on my end.

 

Did the typical device troubleshooting.

[trev 1]

I had a similar issue, either very slow webpage connection on Firefox, or unable to connect.

It didn't happen with Pale Moon.

I completely uninstalled Kaspersky AV and now Firefox is OK again.

[VPN44 2]

I have the same issue using Windows 10 x64, Eddie 2.12.4 (all default options) using the latest Tap driver. I do have Kasperpky Total Security 17..0.0.611 installed. When I use Speedtest.net without a VP|N connection I get my normal 100Mbps DL and 120Mbps UL. As soon as I connect VPN, major latency and Firefox/Chrome basically connect to nothing.

[VPN44 2]

Btw, why does my Tap driver default to DNS 10.4.0.1? What does that do?

[CrankyCat 7]

If you use the Eddie client try adding airvpn.exe to Kaspersky's exclusions. Settings->Additional->Threats and Exclusions and click on "Manage Exclusions". Browse to the AirVpn install folder and select it. See if that does the trick. Either that worked or Kaspersky did an update. :-)

[chuzzwuzzer01 0]

Just tried adding to exclusions as above but still the same for me.

[DZ5TGW 5]

The issue has been caused by 'Patch D' which was issued by Kaspersky. I believe that the Patch has been recalled now pending further testing by Kaspersky but, unfortunately, there's no way to rollback to the stable 'Patch C'. You therefore need to deactivate your licence, completely uninstall Kaspersky, restart your computer and then reinstall Kaspersky - it should only update to Patch C.

 

The other workaround is to download the official OpenVPN application and then install the AirVPN configuration. There are still intermittent disconnections but nowhere near as bad as when using Eddie (which is based on OpenVPN).

 

It seems to be affecting Private Internet Access customers as well. Here's the official Kaspersky forum.

 

I'd also recommend uninstalling Kaspersky Secure Connection (their own VPN) via Control Panel - this is separate software and will not affect your antivirus protection. If you don't need it, you should uninstall it.

 

I had opened a ticket with AirVPN, sent them multiple logs and the solution (using OpenVPN) but I've not received any further response - presumably because of how many tickets they say are open.

 

Kaspersky is otherwise an excellent piece of software but this bug is really annoying me. 

 

AirVPN is working on my other devices so it's definitely a problem with Kaspersky.

[checkk 0]

I had this issue too, but before I left airvpn I thought Id try to install new windows and since then it works like it should. So I guess kaspersky was the culprit

[trev 1]

Having read the OP that the D patch had been pulled, I downloaded from the Kaspersky website and reinstalled KAV.

It showed the C version, but after rebooting, I had the D version.

I tried connecting with the latest Eddie and Firefox and NO GO.

Uninstalled KAV again and everything back to normal.

Hope this stops others from wasting time like I did.

[x7tqha43ufzv58l2enk62p5ys2 0]

Hi all, many thanks to all involved in finding the solution, deleted kaspersky with patch d then downloaded it again this time with patch c and all is working again

[DZ5TGW 5]

Having read the OP that the D patch had been pulled, I downloaded from the Kaspersky website and reinstalled KAV.

It showed the C version, but after rebooting, I had the D version.

I tried connecting with the latest Eddie and Firefox and NO GO.

Uninstalled KAV again and everything back to normal.

Hope this stops others from wasting time like I did.

 

It's working for other users trev.

 

There is another workaround if you've had Patch D forced upon you.

• Right click on the Kaspersky icon and exit the program
• Then load Eddie and wait until you're connected
• Now re-load Kaspersky.

I've spent a substantial amount of time analysing the crash dump in Visual Studio and it's 100% a problem with Kaspersky. I have sent a PGP message to their development team to let them know of the problem.

 

It's quite an easy fix for Kasperksy to implement although they have suggested that it may not be fixed until Kaspersky 2018 (later this year). They have broken compatibility with OpenVPN. There is a fix for OpenVPN but I have neither the time nor inclination to write a patch for OpenVPN when the issue has been caused by an improper anti-virus implementation.

 

Kaspersky is so effective (they are 1 of the top 2 AVs) because it puts deep hooks into the operating system to prevent/detect viruses and malware early. I'd suggest people continue using it (Windows Defender alone is not sufficient) and await a patch. It's inconvenient I know.

 

Alternatively Sophos provide commercial-grade protection for free for home users. I've not tested their endpoint software with AirVPN but I successfully use their UTM without problem. You can download it here.

[Staff 9973]

There is a fix for OpenVPN but I have neither the time nor inclination to write a patch for OpenVPN when the issue has been caused by an improper anti-virus implementation.

 

 

Hello!

 

Would you like to share the details if or when you have time? We have already written patches for OpenVPN in the past and we already routinely release our patched version of OpenVPN. It will take time because any new code must be thoroughly peer reviewed to prevent any risk of "injecting" unwanted vulnerabilities, but it's a potential way to go. We are also aware that "patching" something to conform to the bad behavior of something else is highly questionable.

 

Kind regards

[Soupcan Sam Hootkins 13]

I have the same issue using Windows 10 x64, Eddie 2.12.4 (all default options) using the latest Tap driver. I do have Kasperpky Total Security 17..0.0.611 installed. When I use Speedtest.net without a VP|N connection I get my normal 100Mbps DL and 120Mbps UL. As soon as I connect VPN, major latency and Firefox/Chrome basically connect to nothing.

Having the same issue here, This occurs ONLY when the VPN is connected. I did have Kaspersky and Malwarebytes installed, which I tested the speed with either Kaspersky, Malwarebytes or both turned off, then I completely uninstalled both of them, and the issue still exists, but again, only when the VPN is connected. Not sure what the hell is going on

[chuzzwuzzer01 0]

Uninstalled Kaspersky and reinstalled to © version. All working again. Cheers !

[x7tqha43ufzv58l2enk62p5ys2 0]

Hi just in from work and kaspersky has updated itself to patch d, connection has failed again, all was well yesterday when i reinstalled kaspersky and it updated itself to patch c, i thought i had it sorted. Does anybody know why it has updated itself back to patch d if kaspersky has pulled patch d ?