Here is the latest information on our most recent R9.5 VSA patch:
Looks like .11 has KAV working well for us. We did find the endpoints really do need a reboot after KAV updates, for the system to fully recognize the update.
KAV is working for us, but only after we ran a SQL script to download the latest version(Refer to case #246695).
Before that there we were still having the "Downloding OEM files to VSA" problem.
Glad your issue was resolved. The downloading of Kaspersky OEM installers has been updated to reflect the required executables as well.