Jump to content

Kaspersky Anti Virus


Recommended Posts

Have an issue trying to connect with Kaspersky Anti Virus 2016 installed.  No matter how I configure it I simply can't connect, the launcher always reports sunrise.net-7.org as offline.  I've added the entire Net-7 installation folder to the exclusion list, added LaunchNet7.exe and net7proxy.exe individually to the exclusion list and set them as trusted applications, disabled port 443 monitoring, disabled scanning of encrypted connections entirely...Suspending / pausing KAV doesn't work either.  If I uninstall it I have no problems connecting. If anyone uses KAV or has any suggestions on what I could try (other than leaving KAV uninstalled or using a different anti virus app) I am all ears.

 

Windows 10 Pro x64

 

 

Link to comment
Share on other sites

Try adding the net 7 and the enb files to the exclusion list. Or turn it off when you want to play

Already tried that.  Disabling / suspending the virus protection temporarily also does not work.  The only way I can get it to connect is to uninstall KAV completely.  Really strange, I just can't figure out why it's even blocking it in the first place.  I'm making the assumption that it's soley KAV's fault since uninstalling the software solves the problem.  Are there any other ports besides 443 that I should configure KAV to ignore for testing purposes?

Edited by sgrundy
Link to comment
Share on other sites

I remember something on the news recently;y about KAV  doing that on a lot of program's. your best bet would be AVG or AVast anitvirus 

I guess I'll browse around KAV forums and maybe put in a support ticket and see what happens.  Thanks for you help.

Link to comment
Share on other sites

I'm betting some of these are using different protocols. You'll want to make sure the UDP is open for anything in the 8000-10000 range for sure originating from our net7proxy.exe, net7.exe or LaunchNet7.exe (also make sure you've excepted those executables if you haven't).

 

There are several handshakes that happen on those ports and if the server can't make them with your client, it will not be able to advance your session to allowing a login for example.

 

I can't imagine why sunrise.net-7.org reports as offline. Have you also verified DNS settings? For example, open a command prompt and type:

nslookup
<enter>

then type:

net-7.org

<enter>

 

Do you get a response with an IP address? This problem could be lower level than Kaspersky unless you are actually confirming that you're able to get into the game without it installed. If the latter is the case, it is almost undoubtedly a blocked port somewhere.

 

Should look something like this:

[attachment=3259:nslookup_enb.PNG]

Link to comment
Share on other sites

Yes if I uninstall KAV then I can connect with no problems, I get an almost immediate online response from sunrise.net-7.org.  With KAV installed I can ping / nslookup / full traceroute to sunrise and nothing seems wrong. Something, somewhere in KAV is interfering with the process...I did notice the UDP connections pop up when the launcher is trying to authenticate, the one thing I haven't done yet is watch resource monitor with KAV uninstalled to see what the differences may be.  

 

KAV doesn't include a rule based firewall just the port monitoring but it's clearly the problem.  I just find it odd that suspending KAV's services doesn't resolve the problem, only removing it completely works.  KAV installs a NDIS 6 network filter that handles a lot of it's protection mechanisms but even uninstalling that doesn't work. I'll try to isolate what tcp/udp connections are being blocked.

Edited by sgrundy
Link to comment
Share on other sites

OK I finally found the cause of the problem.  KAV installs a network filtering component (klwfp.sys) that, although I'm not quite sure what it actually does, when disabled fixes the authentication problem I was having. Disabling it doesn't appear to break any functionality of KAV so I consider this issue resolved.

 

Thank you Kyp and everyone else for offering assistance.

 

Cheers.

Edited by sgrundy
Link to comment
Share on other sites

Correct, after I read you immediate post following mine that sounds like a packet filter designed to intercept certain ports and simply drop them.

 

Good to hear, btw, nice reference in the forum name. Are you also immortal? ;)

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
×
×
  • Create New...