We've been experiencing ABENDs on 2 nodes of a 3-node NW6.5sp8 cluster since loading Kaspersky AV (we switched from McAfee since they no longer support NW). The servers in this cluster would suffer from occasional ABENDs previously but are now restarting every 3-4 days. After looking at the previous ABEND logs I've done the following in an attempt to fix this:
1) changed set parms: NCP --> level 2 oplocks=off, & client file caching=off
2) Replaced NWFTPd.nlm with patched version released 3-26-2010 to ver. 5.10.01, since all nodes in this file services cluster support FTP file xfer.
3) Excluded files and directories from being scanned by Kaspersky - ADMIN_FSx: volume, ~*.* & *.TMP temp files, & log files.

Anybody have any similar issues or know what may be going on here?

Here's a snippet of the last ABEND log: (full log & config.txt) attached:
************************************************** *******
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.08

Server OFPNWFS1 halted Tuesday, June 8, 2010 8:28:02.047 am
Abend 1 on P00: Server-5.70.08: Page Fault Processor Exception (Error code 00000000)

Registers:
CS = 0008 DS = 0023 ES = 0023 FS = 0023 GS = 0023 SS = 0010
EAX = 00000000 EBX = 00000000 ECX = 00000EC0 EDX = 00000400
ESI = 00000000 EDI = 40CF81C0 EBP = A6405D18 ESP = A6405CC4
EIP = 8AC532AB FLAGS = 00010206
8AC532AB 8B580C MOV EBX, [EAX+0C]=?
EIP in COMN.NSS at code start +0003C2ABh
Access Location: 0x0000000C

The violation occurred while processing the following instruction:
8AC532AB 8B580C MOV EBX, [EAX+0C]
8AC532AE 8B7010 MOV ESI, [EAX+10]
8AC532B1 31C9 XOR ECX, ECX
8AC532B3 01D3 ADD EBX, EDX
8AC532B5 11CE ADC ESI, ECX
8AC532B7 89580C MOV [EAX+0C], EBX
8AC532BA 57 PUSH EDI
8AC532BB 897010 MOV [EAX+10], ESI
8AC532BE E88D18FEFF CALL COMN.NSS|COMN_ReleaseInternal
8AC532C3 E9E9FBFFFF JMP 8AC52EB1



Running process: KAV Engine 1 Process
Thread Owned by NLM: KLABSCAN.NLM
Stack pointer: A6405CAC
OS Stack limit: A6306140
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: --00000000 (LOADER.NLM|KernelAddressSpace+0)