20110404.102754.64 ntc [ 2768 ad4] noname Upgrader version is 6.00.0.201009100 20110404.102754.64 tr3 [ 2768 ad4] noname Home directory C:\Program Files\DrWeb Enterprise Suite 20110404.102754.64 tr3 [ 2768 ad4] noname Command line <"C:\Program Files\DrWeb Enterprise Suite\0\drwupgrade.exe" -verbosity=all -rotate=10,10m ALL> 20110404.102754.64 tr3 [ 2768 ad4] noname Maximum logs is set to 10 20110404.102754.64 tr0 [ 2768 ad4] noname Single instance guard acquired 20110404.102754.72 inf [ 2768 ad4] noname No files to remove after reboot found 20110404.102754.72 ntc [ 2768 ad4] noname [Mode] Components list changed cycle 20110404.102754.73 inf [ 2768 ad4] noname Scanned: 3 products, 0 delayed, 0 incomplete, 0 inconsistent 20110404.102754.73 db0 [ 2768 ad4] noname 'cache' directory doesn't exist, creating new one 20110404.102754.73 tr0 [ 2768 ad4] noname Single instance guard released 20110404.102754.73 ntc [ 2768 ad4] noname [System] Process exit code is 0x0 20110404.102757.84 ntc [ 2936 b7c] noname Upgrader version is 6.00.0.201009100 20110404.102757.84 tr3 [ 2936 b7c] noname Home directory C:\Program Files\DrWeb Enterprise Suite 20110404.102757.84 tr3 [ 2936 b7c] noname Command line <"C:\Program Files\DrWeb Enterprise Suite\0\drwupgrade.exe" -verbosity=all -rotate=10,10m ALL> 20110404.102757.84 tr3 [ 2936 b7c] noname Maximum logs is set to 10 20110404.102757.84 tr0 [ 2936 b7c] noname Single instance guard acquired 20110404.102757.84 inf [ 2936 b7c] noname No files to remove after reboot found 20110404.102757.84 ntc [ 2936 b7c] noname [Mode] Components list changed cycle 20110404.102757.84 inf [ 2936 b7c] noname Scanned: 3 products, 0 delayed, 0 incomplete, 0 inconsistent 20110404.102757.84 tr0 [ 2936 b7c] noname Single instance guard released 20110404.102757.84 ntc [ 2936 b7c] noname [System] Process exit code is 0x0 20110404.103722.45 ntc [ 1760 6e4] noname Upgrader version is 6.00.0.201009100 20110404.103722.45 tr3 [ 1760 6e4] noname Home directory C:\Program Files\DrWeb Enterprise Suite 20110404.103722.45 tr3 [ 1760 6e4] noname Command line <"C:\Program Files\DrWeb Enterprise Suite\0\drwupgrade.exe" -verbosity=all -rotate=10,10m> 20110404.103722.45 tr3 [ 1760 6e4] noname Maximum logs is set to 10 20110404.103722.45 tr0 [ 1760 6e4] noname Single instance guard acquired 20110404.103722.50 inf [ 1760 6e4] noname No files to remove after reboot found 20110404.103722.50 ntc [ 1760 6e4] noname [Mode] Service start 20110404.103722.50 inf [ 1760 72c] noname Scanned: 3 products, 0 delayed, 0 incomplete, 0 inconsistent 20110404.103729.45 tr3 [ 1760 6e4] noname StartServiceCtrlDispatcher successfully finished 20110404.103729.45 tr0 [ 1760 6e4] noname Single instance guard released 20110404.103729.45 ntc [ 1760 6e4] noname [System] Process exit code is 0x0 20110404.105250.25 ntc [ 1752 6e0] noname Upgrader version is 6.00.0.201009100 20110404.105250.25 tr3 [ 1752 6e0] noname Home directory C:\Program Files\DrWeb Enterprise Suite 20110404.105250.25 tr3 [ 1752 6e0] noname Command line <"C:\Program Files\DrWeb Enterprise Suite\0\drwupgrade.exe" -verbosity=all -rotate=10,10m> 20110404.105250.25 tr3 [ 1752 6e0] noname Maximum logs is set to 10 20110404.105250.25 tr0 [ 1752 6e0] noname Single instance guard acquired 20110404.105250.29 inf [ 1752 6e0] noname No files to remove after reboot found 20110404.105250.29 ntc [ 1752 6e0] noname [Mode] Service start 20110404.105250.31 inf [ 1752 728] noname Scanned: 3 products, 0 delayed, 0 incomplete, 0 inconsistent 20110404.105255.84 tr3 [ 1752 6e0] noname StartServiceCtrlDispatcher successfully finished 20110404.105255.84 tr0 [ 1752 6e0] noname Single instance guard released 20110404.105255.84 ntc [ 1752 6e0] noname [System] Process exit code is 0x0 20110404.105610.07 ntc [ 1728 6c4] noname Upgrader version is 6.00.0.201009100 20110404.105610.07 tr3 [ 1728 6c4] noname Home directory C:\Program Files\DrWeb Enterprise Suite 20110404.105610.07 tr3 [ 1728 6c4] noname Command line <"C:\Program Files\DrWeb Enterprise Suite\0\drwupgrade.exe" -verbosity=all -rotate=10,10m> 20110404.105610.07 tr3 [ 1728 6c4] noname Maximum logs is set to 10 20110404.105610.07 tr0 [ 1728 6c4] noname Single instance guard acquired 20110404.105610.09 inf [ 1728 6c4] noname No files to remove after reboot found 20110404.105610.09 ntc [ 1728 6c4] noname [Mode] Service start 20110404.105610.12 inf [ 1728 6e8] noname Scanned: 3 products, 0 delayed, 0 incomplete, 0 inconsistent 20110404.105615.45 tr3 [ 1728 6c4] noname StartServiceCtrlDispatcher successfully finished 20110404.105615.45 tr0 [ 1728 6c4] noname Single instance guard released 20110404.105615.46 ntc [ 1728 6c4] noname [System] Process exit code is 0x0 20110404.105956.03 ntc [ 1752 6dc] noname Upgrader version is 6.00.0.201009100 20110404.105956.03 tr3 [ 1752 6dc] noname Home directory C:\Program Files\DrWeb Enterprise Suite 20110404.105956.03 tr3 [ 1752 6dc] noname Command line <"C:\Program Files\DrWeb Enterprise Suite\0\drwupgrade.exe" -verbosity=all -rotate=10,10m> 20110404.105956.03 tr3 [ 1752 6dc] noname Maximum logs is set to 10 20110404.105956.03 tr0 [ 1752 6dc] noname Single instance guard acquired 20110404.105956.03 inf [ 1752 6dc] noname No files to remove after reboot found 20110404.105956.03 ntc [ 1752 6dc] noname [Mode] Service start 20110404.105956.04 inf [ 1752 6ec] noname Scanned: 3 products, 0 delayed, 0 incomplete, 0 inconsistent 20110404.110001.50 tr3 [ 1752 6dc] noname StartServiceCtrlDispatcher successfully finished 20110404.110001.50 tr0 [ 1752 6dc] noname Single instance guard released 20110404.110001.50 ntc [ 1752 6dc] noname [System] Process exit code is 0x0
drwagntd.log
20110404.105725.61 wrn [ 416 1e4] qrl:1 [Logger] Last message repeated 2 times
20110404.105741.18 inf [ 416 224] prcsr tcp/192.168.15.234:2193: new connection at tcp/192.168.15.51:1099
20110404.105741.21 wrn [ 416 218] mth:2 tcp/192.168.15.234:2193: Old server protocol version 2.10
20110404.105741.29 ERR [ 416 224] prcsr [S/Watch] Cannot open event object {Global\drw_component_signal_30_a02178a2-d11d-b211-98a9-a0019b45910c_128140_0} because of Не удается найти указанный файл (code=2).
20110404.105742.39 tr0 [ 416 224] prcsr [Updater] Platform value has been loaded as <win-nt-32>, system value is 2030402 <Windows XP Professional x86 (Build 2600), Service Pack 3>
20110404.105745.94 inf [ 416 1f8] mth:0 [DrWebSE] Cannot get engine info because of Сервер RPC недоступен (code=1722). and runtime error is No such file or directory (errno=2)
20110404.105745.94 inf [ 416 1f8] mth:0 [DrWeb32] Cannot get engine info because of Сервер RPC недоступен (code=1722). and runtime error is No such file or directory (errno=2)
20110404.105800.63 wrn [ 416 1e4] qrl:1 [QWATCHER] Event channel terminated unexpectedly, trying reconnect...
20110404.105835.64 wrn [ 416 1e4] qrl:1 [Logger] Last message repeated 2 times
20110404.105843.79 inf [ 416 2e0] noname [DrWeb32] Cannot get engine info because of Сервер RPC недоступен (code=1722).
20110404.105843.79 inf [ 416 2e0] noname [Logger] Last message repeated 2 times
20110404.105846.00 ERR [ 416 21c] mth:3 [DwProt] Unable to write 'DrWebEnableState' because of Неверный дескриптор (code=6).
20110404.105846.00 ERR [ 416 21c] mth:3 [DwProt] Unable to install driver 'C:\Program Files\DrWeb Enterprise Suite\dwprot.sys' because of Не удается найти указанный файл (code=2).
20110404.105907.09 ntc [ 416 c58] noname Terminating by signal SHUTDOWN
20110404.105907.09 tr0 [ 416 1cc] noname Dr.Web (R) Enterprise Agent REL-600 Build 6.00.2.201101280 (WinNT 6.0/PPro) is terminating
20110404.105907.21 wrn [ 416 238] noname [RPC server] Connection <2004> is lost
20110404.110001.53 tr0 [ 480 22c] noname [Socket] Using of single CPUs I/O implementation
20110404.110001.54 tr0 [ 480 22c] noname Dr.Web (R) Enterprise Agent REL-600 Build 6.00.2.201101280 (WinNT 6.0/PPro) is rising
20110404.110001.56 wrn [ 480 22c] noname Unable to read RunMode from registry
20110404.110001.56 ntc [ 480 22c] noname No modules have been loaded from "C:\Program Files\DrWeb Enterprise Suite\modules\agent"
20110404.110001.56 ntc [ 480 22c] noname Running at "FO-SMASIST" computer under "Windows XP Professional x86 (Build 2600), Service Pack 3" operating system
20110404.110001.56 ntc [ 480 22c] noname Running under "NT AUTHORITY\SYSTEM:NT AUTHORITY\SYSTEM" account
20110404.110001.56 tr0 [ 480 22c] noname [Windows] Do not use POSIX semantics to access filesystem
20110404.110001.56 ntc [ 480 22c] noname [Windows] System uptime is 00:00:34
20110404.110001.56 ntc [ 480 22c] noname [Windows] Now there are 23 processes and 289 threads using 4036 handles
20110404.110001.56 ntc [ 480 22c] noname [Windows] Commited memory: 101MB total, 327MB maximum
20110404.110001.56 ntc [ 480 22c] noname [Windows] Physical memory: 511MB total, 367MB available, 116MB cache, 28% in use
20110404.110001.56 ntc [ 480 22c] noname [Windows] Kernel memory: 33MB total, 22MB paged, 11MB non-paged
20110404.110001.56 ntc [ 480 22c] noname Using command line: "C:\Program Files\DrWeb Enterprise Suite\drwagntd.exe"
20110404.110001.56 tr0 [ 480 22c] noname [Updater] Upgrader service support new meta information style
20110404.110001.56 tr0 [ 480 22c] noname [Logger] Last message repeated 3 times
20110404.110001.56 inf [ 480 22c] noname [Updater] Product 10-drwbases state 1 -> 1 S
20110404.110001.56 inf [ 480 22c] noname [Updater] Product 10-drwupgrade state 1 -> 1 S
20110404.110001.56 inf [ 480 22c] noname [Updater] Product 20-drwagntd state 1 -> 1 S
20110404.110001.56 tr0 [ 480 22c] noname [NetScan] Creating answerer "udp/:2193"
20110404.110001.57 ERR [ 480 26c] prcsr [DwProt] Unable to write 'DrWebEnableState' because of Неверный дескриптор (code=6).
20110404.110001.57 ERR [ 480 26c] prcsr [DwProt] Unable to install driver 'C:\Program Files\DrWeb Enterprise Suite\dwprot.sys' because of Не удается найти указанный файл (code=2).
20110404.110001.57 inf [ 480 22c] noname Dr.Web (R) Enterprise Agent REL-600 Build 6.00.2.201101280 (WinNT 6.0/PPro) has risen
20110404.110001.57 ERR [ 480 274] nap:0 [nap] Failed to register sha with NapAgent -unknown (error = 80270003) on registration
20110404.110001.84 wrn [ 480 26c] prcsr Attempt to start local scheduler wich is disabled
20110404.110001.84 tr0 [ 480 26c] prcsr [Sch/Ent] Successfully started
20110404.110036.54 wrn [ 480 248] qrl:1 [QWATCHER] Event channel terminated unexpectedly, trying reconnect...
20110404.110111.55 wrn [ 480 248] qrl:1 [Logger] Last message repeated 2 times
20110404.110112.31 inf [ 480 284] noname [DrWeb32] Cannot get engine info because of Сервер RPC недоступен (code=1722).
20110404.110112.33 inf [ 480 284] noname [Logger] Last message repeated 2 times
20110404.110118.84 inf [ 480 26c] prcsr tcp/192.168.15.234:2193: new connection at tcp/192.168.15.51:1110
20110404.110118.84 wrn [ 480 25c] mth:1 tcp/192.168.15.234:2193: Old server protocol version 2.10
20110404.110118.92 ERR [ 480 26c] prcsr [S/Watch] Cannot open event object {Global\drw_component_signal_30_c0882329-d21d-b211-ab60-e0010b0859be_68195_0} because of Не удается найти указанный файл (code=2).
20110404.110119.00 tr0 [ 480 26c] prcsr [Updater] Platform value has been loaded as <win-nt-32>, system value is 2030402 <Windows XP Professional x86 (Build 2600), Service Pack 3>
20110404.110119.59 inf [ 480 25c] mth:1 [DrWebSE] Cannot get engine info because of Сервер RPC недоступен (code=1722). and runtime error is No such file or directory (errno=2)
20110404.110119.59 inf [ 480 25c] mth:1 [DrWeb32] Cannot get engine info because of Сервер RPC недоступен (code=1722). and runtime error is No such file or directory (errno=2)
20110404.110146.55 wrn [ 480 248] qrl:1 [QWATCHER] Event channel terminated unexpectedly, trying reconnect...
20110404.110219.61 ERR [ 480 264] mth:3 [DwProt] Unable to write 'DrWebEnableState' because of Неверный дескриптор (code=6).
20110404.110219.61 ERR [ 480 264] mth:3 [DwProt] Unable to install driver 'C:\Program Files\DrWeb Enterprise Suite\dwprot.sys' because of Не удается найти указанный файл (code=2).
20110404.110149.63 tr0 [ 480 f80] timsy [TimeSync] New system time set successfully
20110404.110151.57 wrn [ 480 248] qrl:1 [QWATCHER] Event channel terminated unexpectedly, trying reconnect...уже более получаса не обновляется станция. т.е. закачано стартовых 14Мб и все...
что делал:
1. вывел из домена/ввел в домен
2. удалил агента/поставил агента
естественно - все через ребуты.
Windows XP SP3 все апдейты, проверял CureIT - чисто.
