Jump to content


Photo

Kaspersky users read here


Best Answer Staff, 12 April 2017 - 04:12 PM

https://airvpn.org/topic/22665-kaspersky-2017-patch-e-released/

 

This should definitely fix any Kaspersky problem with OpenVPN usage.

 

Kind regards

Go to the full post


  • Please log in to reply
54 replies to this topic

#1 JuanV

JuanV

    Newbie

  • Members
  • Pip
  • 1 posts

Posted 15 March 2017 - 07:58 PM

Running must current stable release on windows 7 64bit.  As of today once VPN is connected I cannot load any pages within browsers.  Tried firefox and explorer.  Everything works with VPN off, tried uninstalling and reinstalling Airvpn, turned off all antivirus any suggestions?



#2 markoomg

markoomg

    Newbie

  • Members
  • Pip
  • 1 posts

Posted 15 March 2017 - 08:37 PM

Same problem here. A little bit more details on my side:

At first I tried to change the DNS servers to use ones from OpenDNS => no improvment.

Then I started continuous pings to an ip adress (8.8.8.8) and to a fqdn (www.yahoo.com). After connecting to the vpn, as soon as I start firefox I got no ICMP responses so it's not DNS related. Works again when I close the browser.

 

Seems to work with edge tho. I tried several airvpn servers, I reinstalled Firefox from scratch => No improvments

 

I'm wondering, can it be related to SHA1 used in OpenVPN? I heard there was a POC of SHA1 collisions few weeks ago and my Firefox was updated yesterday...

Also from Firefox 52 release notes :

Display (but allow users to override) an “Untrusted Connection” error when encountering SHA-1 certificates that chain up to a root certificate included in Mozilla’s CA Certificate Program. (Note: Firefox continues to permit SHA-1 certificates that chain to manually imported root certificates.) Read more about the Mozilla Security Team’s plans to deprecate SHA-1

 

 

Thanks in advance for your help.

 

Config: Windows 10, Eddie v2.11.8, KAV

 

M



#3 Gary Ashton

Gary Ashton

    Member

  • Members
  • PipPip
  • 13 posts

Posted 17 March 2017 - 10:59 AM

I'm having the same problem. Windows 10.  Windows installed a large update last night. This morning when I came to use the internet using Firefox all was fine. Connected AirVPN and it stopped working. Close the Eddie client and all is ok again. 

I tried re-installing both Firefox and Eddie using the latest installers. Still no-go.

Start Edge though and all works fine. Sounds like something to do with Firefox as explained above. This is a real pain as I REALLY do not want to use Edge. I'll have to see if I can find another browser that will work.

 

Anyone have any suggestions? (No, NOT Chrome!).



#4 Staff

Staff

    Advanced Member

  • Staff
  • PipPipPip
  • 7791 posts

Posted 17 March 2017 - 01:08 PM

Config: Windows 10, Eddie v2.11.8, KAV

 

M

 

 

EDIT: in light of the news about Kaspersky Patch D, this message can be ignored for the rest of the thread. It pertains to a different Kaspersky problem which causes similar symptoms, but that's nowadays probably totally unrelated to the problem discussed in this thread caused by Patch D of Kaspersky. The solution that's described below applies to markoomg and Gary Ashton's problem and probably not to the other users in this thread.

 

Just for the readers' comfort, from the ticket we see that markoomg problems has been solved. It was caused by a Kaspersky feature, an injection of a javascript script in every web site page performed by Kaspersky itself.

 

This potentially catastrophic security problem has been noted since 2015. See here for example:

http://blog.oratronik.org/?p=457

https://www.reddit.com/r/privacy/comments/3frjqw/psa_kaspersky_injects_remote_javascript_into_all/

 

However, we ignore why only now this has become a problem in browsing. We have an abnormally high amount of tickets about the very same problem, all of them caused by Kaspersky, and all of them written in the last 24/48 hours (nothing before that, so the question is: did something change in Kaspersky default settings?).

 

Kind regards



#5 Gary Ashton

Gary Ashton

    Member

  • Members
  • PipPip
  • 13 posts

Posted 17 March 2017 - 04:59 PM

For information, I tried all of the techniques in the link above and none worked.

 

However, I did find that removing the Kaspersky Firefox Add-in did solve it. It's an optional plug-in anyway which Kaspersky asks to add on initial installation so you can elect to not have it. Once it's installed though you can't remove it by normal means using the browser. there is another way...

I removed it entirely by going to the registry and removing the addin here:

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins

 

You'll see the Kaspersky Addin there so just delete the key.

If you remove the registry key then it won't load the plugin when Firefox starts. Solved my problem. Hope this helps someone else.

 



#6 CrankyCat

CrankyCat

    Member

  • Members
  • PipPip
  • 14 posts

Posted 18 March 2017 - 07:34 AM

I have this same issue on Windows 7x64, the current Kaspersky Total Security (17.0.0.611 d), and Eddie 2.12.4. I don't have the registry entries that Gary suggested but do have the Kaspersky browser addons installed.

The logs don't show anything unusual upon connecting initially. If I open a command prompt and use "ping -t airvpn.org" I see the expected latency continuing indefinitely. However, as soon as I open any browser window, and they all default to a blank tab, the ping immediately starts showing "Request timed out". Occasionally I'll see a successful ping at over 3000ms but can't really do anything. If I close all browser windows the connection comes back again and the pings resume.

The first time I tried starting the AirVpn client I already had browsers open and the connections would time out and retry.

I tried disabling Kaspersky protection including unchecking "Automatically activate Kaspersky Protection extension in browsers", disabling Kaspersky in all browsers, and disabling Web Anti-Virus and private browsing. I finally tried disabling Kaspersky completely. While just opening a browser no longer causes the pings and all other network activity to fail, any attempt to actually browse to any web page causes latency to go extremely high and pings start failing. Once the web page times out the pings start succeeding again.

 

No updates are currently available but before this issue these were installed:

 

Windows Malicious Software Removal Tool x64 - March 2017 (KB890830)

March, 2017 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4012215)

Security Update for Microsoft Silverlight (KB4013867)

 

I'm going to wait until tomorrow before uninstalling Kaspersky and seeing if that works in case the issue gets resolved.

 

Below are the verbose logs. Nothing really seems obvious except the timeouts when I manually chose to refresh the server list with a browser open

Spoiler


#7 Rockpile10

Rockpile10

    Newbie

  • Members
  • Pip
  • 1 posts

Posted 18 March 2017 - 11:19 AM

I have the same issue. I've removed the Kaspersky add-on for Chrome and deleted the key in the registry, but it's made no difference.  Pages sometimes load after about 1min. I managed to get to a broadband speed testing site and it recorded my usual speed of about 50Mbps, but as soon as I tried to move to another site it wouldn't connect.  I tried completely disabling Kaspersky Total Security and that didn't help. I've totally reinstalled Kaspersky and it strangely worked for a brief time but it's back to the same problem today.



#8 Gary Ashton

Gary Ashton

    Member

  • Members
  • PipPip
  • 13 posts

Posted 18 March 2017 - 12:44 PM

CrackyCat,

 

There is another place that the plugin is registered. It depends on the version of Kaspersky you have - either Anti-Virus or Internet Security...

 

I believe for IS, you need to go to this location:

 

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions

 

Hope this helps. :yes:



#9 CrankyCat

CrankyCat

    Member

  • Members
  • PipPip
  • 14 posts

Posted 18 March 2017 - 02:36 PM

I uninstalled KB890830 and that did nothing. AirVpn worked fine after I uninstalled Kaspersky completely.

I reinstalled Kaspersky and configured it to never enable the browser addons and all that did was avoid interfering until I actually tried to go to a web site. As opposed to as soon as I opened a browser.

I tried testing with airvpn.org and enabling it as a trusted site, etc. but that didn't help.

 

To me the problem seems to be extremely high latency. Perhaps DNS entries for addresses needed by Kaspersky don't resolve. That would explain it. I suppose I'll need to open a ticket with Kaspersky. AirVpn may already have contacted them but it's the weekend and all so probably nothing in the next couple of days anyway.



#10 chuzzwuzzer01

chuzzwuzzer01

    Newbie

  • Members
  • Pip
  • 6 posts

Posted 18 March 2017 - 02:49 PM

I have been having the same probs losing my connection with windows 7 and Kaspersky. I will be keeping an eye on this thread and hopefully there's a workaround.



#11

  • Guests

Posted 18 March 2017 - 03:31 PM

I don't think this is just a windows issue. Worked fine this yesterday. Not this AM.

I'm running open vpn connect & iOS 10.2.1. Treid both wifi 300mbit and cellular. Attempting to hook into the US tcp & udp server ports (443/53), connects but no throughput so the pages time out. Tried Canada, very slow. Turn off vpn works fine on my end.

Did the typical device troubleshooting.

#12 trev

trev

    Member

  • Members
  • PipPip
  • 19 posts

Posted 18 March 2017 - 08:52 PM

I had a similar issue, either very slow webpage connection on Firefox, or unable to connect.

It didn't happen with Pale Moon.

I completely uninstalled Kaspersky AV and now Firefox is OK again.



#13 VPN44

VPN44

    Member

  • Members2
  • PipPip
  • 11 posts

Posted 18 March 2017 - 11:54 PM

I have the same issue using Windows 10 x64, Eddie 2.12.4 (all default options) using the latest Tap driver. I do have Kasperpky Total Security 17..0.0.611 installed. When I use Speedtest.net without a VP|N connection I get my normal 100Mbps DL and 120Mbps UL. As soon as I connect VPN, major latency and Firefox/Chrome basically connect to nothing.



#14 VPN44

VPN44

    Member

  • Members2
  • PipPip
  • 11 posts

Posted 19 March 2017 - 12:24 AM

Btw, why does my Tap driver default to DNS 10.4.0.1? What does that do?



#15 CrankyCat

CrankyCat

    Member

  • Members
  • PipPip
  • 14 posts

Posted 19 March 2017 - 12:46 AM

If you use the Eddie client try adding airvpn.exe to Kaspersky's exclusions. Settings->Additional->Threats and Exclusions and click on "Manage Exclusions". Browse to the AirVpn install folder and select it. See if that does the trick. Either that worked or Kaspersky did an update. :-)



#16 chuzzwuzzer01

chuzzwuzzer01

    Newbie

  • Members
  • Pip
  • 6 posts

Posted 19 March 2017 - 07:16 AM

Just tried adding to exclusions as above but still the same for me.



#17 DZ5TGW

DZ5TGW

    Newbie

  • Members
  • Pip
  • 7 posts

Posted 19 March 2017 - 01:05 PM

The issue has been caused by 'Patch D' which was issued by Kaspersky. I believe that the Patch has been recalled now pending further testing by Kaspersky but, unfortunately, there's no way to rollback to the stable 'Patch C'. You therefore need to deactivate your licence, completely uninstall Kaspersky, restart your computer and then reinstall Kaspersky - it should only update to Patch C.

 

The other workaround is to download the official OpenVPN application and then install the AirVPN configuration. There are still intermittent disconnections but nowhere near as bad as when using Eddie (which is based on OpenVPN).

 

It seems to be affecting Private Internet Access customers as well. Here's the official Kaspersky forum.

 

I'd also recommend uninstalling Kaspersky Secure Connection (their own VPN) via Control Panel - this is separate software and will not affect your antivirus protection. If you don't need it, you should uninstall it.

 

I had opened a ticket with AirVPN, sent them multiple logs and the solution (using OpenVPN) but I've not received any further response - presumably because of how many tickets they say are open.

 

Kaspersky is otherwise an excellent piece of software but this bug is really annoying me.  :angry:

 

AirVPN is working on my other devices so it's definitely a problem with Kaspersky.



#18 checkk

checkk

    Newbie

  • Members
  • Pip
  • 2 posts

Posted 19 March 2017 - 04:10 PM

I had this issue too, but before I left airvpn I thought Id try to install new windows and since then it works like it should. So I guess kaspersky was the culprit



#19 trev

trev

    Member

  • Members
  • PipPip
  • 19 posts

Posted 19 March 2017 - 04:12 PM

Having read the OP that the D patch had been pulled, I downloaded from the Kaspersky website and reinstalled KAV.

It showed the C version, but after rebooting, I had the D version.

I tried connecting with the latest Eddie and Firefox and NO GO.

Uninstalled KAV again and everything back to normal.

Hope this stops others from wasting time like I did.



#20 x7tqha43ufzv58l2enk62p5ys2

x7tqha43ufzv58l2enk62p5ys2

    Member

  • Members
  • PipPip
  • 10 posts

Posted 19 March 2017 - 04:24 PM

Hi all, many thanks to all involved in finding the solution, deleted kaspersky with patch d then downloaded it again this time with patch c and all is working again







Similar Topics Collapse

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Servers online. Online Sessions: 15145 - BW: 61471 Mbit/sYour IP: 54.197.24.206Guest Access.