He is using HID so there are no bulk transfers.
I've never heard of AV spicing into the USB stack, but I suppose it is possible.
Usually AV will get on the file system stack for this sort of thing. USB Drives are also part of the file system.
Most likely the real problem is the poll rate which is set the descriptors.
In the hcc_u8 geh_config_descriptor, the USB_FILL_EP_DESC, the last value should be 1 for a 1 ms poll time.