Reinstalling AVG on top of the existing installation appears to fix the problem. We still do not know the root cause.
EDIT: You do not have to reboot the node after installation and all configurable KES settings are still intact (except for the profile).