Нужен es-service.log с проблемной станции, для начала.
Dr.Web Es Service for Windows v12.12.20.02010
Copyright © Doctor Web, Ltd., 1992-2024
Current arch: x64
Binary: x64
Operating System: Windows 7 x64 (Build 7601), Service Pack 1
Command line: C:\Program Files\DrWeb\es-service.exe --logfile=C:\ProgramData\Doctor Web\Logs\es-service.log
===============================================================================
2024-Apr-02 08:55:53.145231 [ 1596] [INF] [subsysmanager] start with mode: es, business
2024-Apr-02 08:55:53.145231 [ 1596] [INF] [subsysmanager] Creating subsystems...
2024-Apr-02 08:55:53.146231 [ 1596] [INF] [dws] Create reconnector
2024-Apr-02 08:55:53.146231 [ 1596] [INF] [dws9_clients] create
2024-Apr-02 08:55:53.146231 [ 1596] [INF] [ipc] create
2024-Apr-02 08:55:53.146231 [ 1596] [INF] [config] create
2024-Apr-02 08:55:53.146231 [ 1596] [INF] [DbStorage] [db-storage] create
2024-Apr-02 08:55:53.146231 [ 1596] [INF] [environment] Environment monitor subsystem created
2024-Apr-02 08:55:53.146231 [ 1596] [INF] [plugins] create
2024-Apr-02 08:55:53.146231 [ 1596] [INF] [components] create
2024-Apr-02 08:55:53.147231 [ 1596] [INF] [event-processor] create
2024-Apr-02 08:55:53.149231 [ 1596] [INF] [mixed] Mixed subsystem created
2024-Apr-02 08:55:53.149231 [ 1596] [INF] [Scheduler] create
2024-Apr-02 08:55:53.149231 [ 1596] [INF] [task-runner] Create
2024-Apr-02 08:55:53.150231 [ 1596] [INF] [escanner] create
2024-Apr-02 08:55:53.150231 [ 1596] [INF] [statistics] create
2024-Apr-02 08:55:53.150231 [ 1596] [INF] [esloader] create
2024-Apr-02 08:55:53.150231 [ 1596] [INF] [esupdate] create
2024-Apr-02 08:55:53.150231 [ 1596] [INF] [quarantine] Create
2024-Apr-02 08:55:53.150231 [ 1596] [INF] [devices] create
2024-Apr-02 08:55:53.163232 [ 1596] [INF] [reconnector] create
2024-Apr-02 08:55:53.163232 [ 1596] [INF] [netsvc] create
2024-Apr-02 08:55:53.163232 [ 1596] [INF] [subsysmanager] Subsystems created
2024-Apr-02 08:55:53.163232 [ 1596] [INF] [manager] start subsystem dws9_clients ...
2024-Apr-02 08:55:53.163232 [ 1596] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:55:53.164232 [ 1596] [ERR] [dws] Connect to control dwservice [0] exception: System error; (Unable to open pipe.)
2024-Apr-02 08:55:53.164232 [ 1596] [INF] [manager] start subsystem ipc ...
2024-Apr-02 08:55:53.165232 [ 1596] [INF] [Service] [Modules] Start 8 threads for modules
2024-Apr-02 08:55:53.165232 [ 1612] [INF] [ipc] Pipe listener started. Endpoint: pipe://\\.\PIPE\DrWeb-EsService-FF46E948-FBFB-42C2-8346-DF3A5D6E14EB
2024-Apr-02 08:55:54.165235 [ 1640] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:55:55.167238 [ 1632] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:55:56.180839 [ 1640] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:55:57.180845 [ 1632] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:55:58.180902 [ 1640] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:55:59.180959 [ 1632] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:00.181016 [ 1640] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:01.181074 [ 1632] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:02.181131 [ 1640] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:03.181188 [ 1632] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:03.181188 [ 1632] [ERR] [dws] Connect to control dwservice [10] exception: System error; (Unable to open pipe.)
2024-Apr-02 08:56:04.181245 [ 1640] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:05.181302 [ 1632] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:06.181360 [ 1640] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:07.181417 [ 1632] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:08.181474 [ 1640] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:09.181531 [ 1632] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:10.181588 [ 1640] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:11.181646 [ 1632] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:12.181703 [ 1640] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:13.181760 [ 1632] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:13.181760 [ 1632] [ERR] [dws] Connect to control dwservice [20] exception: System error; (Unable to open pipe.)
2024-Apr-02 08:56:14.181817 [ 1640] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:15.181874 [ 1632] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:16.181932 [ 1640] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:17.181989 [ 1632] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:18.182046 [ 1640] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:19.182103 [ 1632] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:20.182160 [ 1640] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:21.182218 [ 1632] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:22.182275 [ 1640] [INF] [dws] Try connect to Control Service Dr.Web ...
2024-Apr-02 08:56:22.186275 [ 1640] [INF] [dws] Connected to Control Service Dr.Web 12.12.22
2024-Apr-02 08:56:22.186275 [ 1640] [INF] [DbStorage] SQLite version is 3.39.4
2024-Apr-02 08:56:22.187275 [ 1640] [INF] [manager] start subsystem config ...
2024-Apr-02 08:56:22.393287 [ 1640] [INF] [config] Es default connection settings created
2024-Apr-02 08:56:22.394287 [ 1640] [INF] [manager] start subsystem DbStorage ...
2024-Apr-02 08:56:22.396287 [ 1640] [INF] [DbStorage] db path: C:\ProgramData\Doctor Web\Database
2024-Apr-02 08:56:22.396287 [ 1640] [INF] [DbStorage] Trying to initialize DB storage
2024-Apr-02 08:56:22.830312 [ 1640] [INF] [manager] start subsystem environment ...
2024-Apr-02 08:56:22.830312 [ 1640] [INF] [manager] start subsystem plugins ...
2024-Apr-02 08:56:22.830312 [ 1640] [INF] [manager] start subsystem components ...
2024-Apr-02 08:56:22.832312 [ 1640] [INF] [manager] start subsystem UserMon ...
2024-Apr-02 08:56:22.832312 [ 1640] [INF] [manager] start subsystem event-processor ...
2024-Apr-02 08:56:22.832312 [ 1640] [INF] [event-processor] start
2024-Apr-02 08:56:23.390344 [ 1640] [INF] [event-processor] Starting event processor (15 events pending)
2024-Apr-02 08:56:23.390344 [ 1640] [INF] [event-processor] Accumulate events schedule is OFF('111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111')
2024-Apr-02 08:56:23.390344 [ 1640] [INF] [event-processor] Starting timer (15 events pending)
2024-Apr-02 08:56:23.390344 [ 1640] [INF] [manager] start subsystem VdbCache ...
2024-Apr-02 08:56:23.390344 [ 1640] [INF] [manager] start subsystem Mixed ...
2024-Apr-02 08:56:23.390344 [ 3204] [INF] [VdbCache] Subscribing for engine events...
2024-Apr-02 08:56:23.391344 [ 1640] [INF] [manager] start subsystem NAP ...
2024-Apr-02 08:56:23.391344 [ 1640] [INF] [NAP] NAP set to 'yes'
2024-Apr-02 08:56:23.391344 [ 1640] [INF] [manager] start subsystem NetScan ...
2024-Apr-02 08:56:23.391344 [ 1640] [INF] [manager] start subsystem Scheduler ...
2024-Apr-02 08:56:23.391344 [ 1640] [INF] [manager] start subsystem task-runner ...
2024-Apr-02 08:56:23.392344 [ 3204] [INF] [VdbCache] Mesh uplink status changed: error -515178496
2024-Apr-02 08:56:23.465348 [ 3208] [INF] [NAP] nap_register: begins
2024-Apr-02 08:56:23.487349 [ 1640] [INF] [manager] start subsystem escanner ...
2024-Apr-02 08:56:23.487349 [ 1640] [INF] [escanner] escanners table is empty
2024-Apr-02 08:56:23.487349 [ 1640] [INF] [manager] start subsystem statistics ...
2024-Apr-02 08:56:23.531352 [ 1640] [INF] [manager] start subsystem esloader ...
2024-Apr-02 08:56:23.533352 [ 1640] [INF] [manager] start subsystem RepoCache ...
2024-Apr-02 08:56:23.533352 [ 1640] [INF] [manager] start subsystem es_update ...
2024-Apr-02 08:56:23.536352 [ 1640] [INF] [manager] start subsystem quarantine ...
2024-Apr-02 08:56:23.536352 [ 1632] [INF] [esupdate] Try load configuration...
2024-Apr-02 08:56:23.537352 [ 1640] [INF] [manager] start subsystem MCastUpdates ...
2024-Apr-02 08:56:23.537352 [ 1640] [INF] [manager] start subsystem devices ...
2024-Apr-02 08:56:23.537352 [ 1632] [INF] [esupdate] Configuration loaded successfully
2024-Apr-02 08:56:23.537352 [ 1640] [INF] [manager] start subsystem es_server_communication ...
2024-Apr-02 08:56:23.537352 [ 1624] [WRN] [MCastUpdates] Invalid multicast group '[FF0E::176]:2197', skipped
2024-Apr-02 08:56:23.537352 [ 3232] [INF] [quarantine] Event listener started
2024-Apr-02 08:56:23.537352 [ 1640] [INF] [es_server_communication] setup send geolocation with interval 15 minutes
2024-Apr-02 08:56:23.537352 [ 1640] [INF] [es_server_communication] Don't send filesystem info
2024-Apr-02 08:56:23.537352 [ 1640] [INF] [manager] start subsystem reconnector ...
2024-Apr-02 08:56:23.537352 [ 1640] [INF] [reconnector] Client bandwidth is unlimited
2024-Apr-02 08:56:23.538352 [ 1616] [INF] [esloader] Update products-revisions map
2024-Apr-02 08:56:23.538352 [ 1616] [INF] [esloader] ESproduct = 10-drwbases; revision = 130'20240401151719
2024-Apr-02 08:56:23.538352 [ 1616] [INF] [esloader] ESproduct = 10-drwspamdb; revision = 130'20240401142052
2024-Apr-02 08:56:23.538352 [ 1616] [INF] [esloader] ESproduct = 20-drwagent; revision = 130'20240401100342
2024-Apr-02 08:56:23.538352 [ 1616] [ERR] [esloader] old server protocol
2024-Apr-02 08:56:23.538352 [ 1616] [INF] [esupdate] Load products.xml from C:/ProgramData/Doctor Web/Updater/repo/90\products.xml
2024-Apr-02 08:56:23.544353 [ 1640] [INF] [manager] start subsystem netsvc ...
2024-Apr-02 08:56:23.544353 [ 1624] [TRC] [es-client] [Discovery] Parse endpoints <tcp/[fe80::ec75:66fb:e26f:14a1%11]:2193>
2024-Apr-02 08:56:23.544353 [ 1624] [TRC] [es-client] [Discovery] Parse endpoint <tcp/[fe80::ec75:66fb:e26f:14a1%11]:2193>
2024-Apr-02 08:56:23.548353 [ 1632] [INF] [es-client] [TextProto/Client/A2S/Session] Connected to "tcp://[fe80::ec75:66fb:e26f:14a1%11]:2193"
2024-Apr-02 08:56:23.563354 [ 3240] [TRC] [es-client] [TextProto/Client/A2S/Session] Computer LDAP DN was not gotten
2024-Apr-02 08:56:23.563354 [ 3240] [TRC] [es-client] [TextProto/Client/A2S/Session] Computer local SID "S-1-5-21-1716180950-504616633-4196278373" was gotten
2024-Apr-02 08:56:23.563354 [ 3240] [TRC] [es-client] [TextProto/Client/A2S/Session] Computer AD SID was not gotten
2024-Apr-02 08:56:23.563354 [ 1620] [TRC] [es-client] [TextProto/Client/A2S/Session] Retrieve some MSAD info later if can
2024-Apr-02 08:56:23.592355 [ 1616] [INF] [esupdate] Products.xml contains 4 groups, 27 products, 40 components
2024-Apr-02 08:56:23.684361 [ 1616] [INF] [reconnector] server flavour is 'es'
2024-Apr-02 08:56:23.684361 [ 1616] [INF] [reconnector] ES connected to [fe80::ec75:66fb:e26f:14a1%11]:2193 'connected successfully'
2024-Apr-02 08:56:23.687361 [ 1616] [INF] [reconnector] request settings for 4
2024-Apr-02 08:56:23.687361 [ 1616] [INF] [reconnector] request settings for 30
2024-Apr-02 08:56:23.687361 [ 1616] [INF] [reconnector] request settings for 38
2024-Apr-02 08:56:23.687361 [ 1616] [INF] [reconnector] request settings for 54
2024-Apr-02 08:56:23.687361 [ 1616] [INF] [reconnector] request settings for 57
2024-Apr-02 08:56:23.687361 [ 1616] [INF] [reconnector] request settings for 103
2024-Apr-02 08:56:23.688361 [ 1616] [INF] [reconnector] request settings for 124
2024-Apr-02 08:56:23.688361 [ 1616] [INF] [reconnector] request settings for 145
2024-Apr-02 08:56:23.688361 [ 1616] [INF] [reconnector] request settings for 149
2024-Apr-02 08:56:23.688361 [ 1616] [INF] [reconnector] request settings for 154
2024-Apr-02 08:56:23.688361 [ 1616] [INF] [reconnector] request settings for 156
2024-Apr-02 08:56:23.688361 [ 1616] [INF] [reconnector] request settings for 159
2024-Apr-02 08:56:23.688361 [ 1616] [INF] [reconnector] request settings for 160
2024-Apr-02 08:56:23.688361 [ 1616] [INF] [reconnector] request settings for 161
2024-Apr-02 08:56:23.688361 [ 1616] [INF] [components] on_connected
2024-Apr-02 08:56:23.688361 [ 1616] [INF] [event-processor] Flush events on connect (15 events pending)
2024-Apr-02 08:56:23.688361 [ 1616] [INF] [reboot-manager] notify es of no restart required
2024-Apr-02 08:56:23.688361 [ 1616] [INF] [Scheduler] Need schedule cause connect
2024-Apr-02 08:56:23.688361 [ 1616] [INF] [Scheduler] Get schedule request
2024-Apr-02 08:56:23.689361 [ 1616] [INF] [esloader] Connected to es server
2024-Apr-02 08:56:23.689361 [ 3244] [INF] [quarantine] Quarantine digest calculation started
2024-Apr-02 08:56:23.689361 [ 1616] [INF] [esloader] Update products-revisions map
2024-Apr-02 08:56:23.689361 [ 1616] [INF] [esloader] ESproduct = 10-drwbases; revision = 130'20240401151719
2024-Apr-02 08:56:23.689361 [ 1616] [INF] [esloader] ESproduct = 10-drwspamdb; revision = 130'20240401142052
2024-Apr-02 08:56:23.689361 [ 1616] [INF] [esloader] ESproduct = 20-drwagent; revision = 130'20240401100342
2024-Apr-02 08:56:23.689361 [ 1616] [INF] [esloader] Sending ANF_STATE to server ...
2024-Apr-02 08:56:23.690361 [ 1616] [INF] [esloader] EsProduct = 10-drwbases ; revision = 13020240401151719; state = S; force_update = no
2024-Apr-02 08:56:23.690361 [ 1616] [INF] [esloader] EsProduct = 10-drwspamdb; revision = 13020240401142052; state = S; force_update = no
2024-Apr-02 08:56:23.690361 [ 1616] [INF] [esloader] EsProduct = 20-drwagent ; revision = 13020240401100342; state = S; force_update = no
2024-Apr-02 08:56:23.693361 [ 1628] [INF] [components] Scanner (4) changed state to unknown
2024-Apr-02 08:56:23.693361 [ 1628] [INF] [components] AvService (30) changed state to started
2024-Apr-02 08:56:23.695361 [ 3244] [INF] [quarantine] Quarantine digest sent
2024-Apr-02 08:56:23.695361 [ 3244] [INF] [quarantine] Quarantine digest calculation finished
2024-Apr-02 08:56:23.735364 [ 1636] [INF] [reconnector] New Rights
2024-Apr-02 08:56:23.744364 [ 1640] [INF] [config] Rewrite es default connection settings
2024-Apr-02 08:56:23.758365 [ 1640] [INF] [config] Rewrite es default connection settings
2024-Apr-02 08:56:23.763365 [ 1624] [TRC] [es-client] [TextProto/Client/A2S] Parameter "UsersEnable" for component #30 not found
2024-Apr-02 08:56:23.763365 [ 1624] [TRC] [es-client] [TextProto/Client/A2S] Parameter "UsersPeriod" for component #30 not found
2024-Apr-02 08:56:24.039381 [ 3176] [INF] [config] User(s) WIN-JU76482SCV1\TIL logged on, apply settings
2024-Apr-02 08:56:24.041381 [ 3176] [INF] [es-config] Apply for user S-1-5-21-1716180950-504616633-4196278373-1000 common settings
2024-Apr-02 08:56:24.378400 [ 1624] [INF] [esupdate] Recieve new policies.
2024-Apr-02 08:56:24.378400 [ 1636] [INF] [esupdate] Processing policies.
2024-Apr-02 08:56:24.391401 [ 1636] [INF] [esupdate] Run changing policies (change composition of components)
2024-Apr-02 08:56:24.391401 [ 1636] [INF] [esupdate] Product = DrWebAgent Revision = 20240401100342
2024-Apr-02 08:56:24.391401 [ 1636] [INF] [esupdate] Product = DrWebEsAgent Revision = 20240401100342
2024-Apr-02 08:56:24.391401 [ 1636] [INF] [esupdate] Product = DrwBase Revision = 20240401151719
2024-Apr-02 08:56:24.391401 [ 1636] [INF] [esupdate] Product = ESAgentSetup Revision = 20240401100342
2024-Apr-02 08:56:24.391401 [ 1636] [INF] [esupdate] Product = NetFilterHttp Revision = 20240401100342
2024-Apr-02 08:56:24.391401 [ 1636] [INF] [esupdate] Product = NetFilterParentalControl Revision = 20240401100342
2024-Apr-02 08:56:24.391401 [ 1636] [INF] [esupdate] Product = OutlookPlugin Revision = 20240401100342
2024-Apr-02 08:56:24.391401 [ 1636] [INF] [esupdate] Product = ScannerSE Revision = 20240401100342
2024-Apr-02 08:56:24.391401 [ 1636] [INF] [esupdate] Product = SpamFilterOutlook Revision = 20240401142052
2024-Apr-02 08:56:24.391401 [ 1636] [INF] [esupdate] Product = SpamFilterSpiderMail Revision = 20240401142052
2024-Apr-02 08:56:24.391401 [ 1636] [INF] [esupdate] Product = SpiderG3Ws Revision = 20240401100342
2024-Apr-02 08:56:24.391401 [ 1636] [INF] [esupdate] Product = Updater Revision = 20240401100342
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] mesh mode is enable
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] new product (es, mesh mode enabled) policies
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = AVDAgentSetup ( EsId = 503) CANNOT be installed! (0) (not suitable type)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = Bases ( EsId = 30) CANNOT be installed! (0) (not suitable for mesh)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = DrWebAgent ( EsId = 30) MUST be installed! (2) (installed)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = DrWebAvdAgent ( EsId = 30) CANNOT be installed! (0) (not suitable type)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = DrWebEsAgent ( EsId = 30) MUST be installed! (2) (installed)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = DrWebEsAgentIndustrial ( EsId = 30) CANNOT be installed! (0) (not suitable for not industrial)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = DrwBase ( EsId = 30) MUST be installed! (2) (installed)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = DwsNetFilter ( EsId = 38) CANNOT be installed! (0) (not suitable for mesh)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = DwsParentalControl ( EsId = 54) CANNOT be installed! (0) (not suitable for mesh)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = ESAgentSetup ( EsId = 502) MUST be installed! (2) (installed)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = Firewall ( EsId = 105) MAY be installed! (1)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = NetFilterHttp ( EsId = 38) MAY be installed! (1) (installed)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = NetFilterMail ( EsId = 14) CANNOT be installed! (0)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = NetFilterParentalControl ( EsId = 54) MUST be installed! (2) (installed)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = OutlookPlugin ( EsId = 103) MAY be installed! (1) (installed)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = ScannerSE ( EsId = 4) MAY be installed! (1) (installed)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = SpamFilterOutlook ( EsId = 55) MAY be installed! (1) (installed)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = SpamFilterSpiderMail ( EsId = 55) MAY be installed! (1) (installed)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = SpiderG3Ws ( EsId = 57) MAY be installed! (1) (installed)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Product = Updater ( EsId = 30) MUST be installed! (2) (installed)
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] nothing to change configuration
2024-Apr-02 08:56:24.453405 [ 1636] [INF] [esupdate] Run changing policies for proxy
2024-Apr-02 08:56:24.498407 [ 1612] [INF] [config] Rewrite es default connection settings
2024-Apr-02 08:56:24.607413 [ 1612] [TRC] [es-client] [TextProto/Client/A2S] Parameter "UsersEnable" for component #30 not found
2024-Apr-02 08:56:24.607413 [ 1612] [TRC] [es-client] [TextProto/Client/A2S] Parameter "UsersPeriod" for component #30 not found
2024-Apr-02 08:56:24.718420 [ 1616] [INF] [es-config] Apply for user S-1-5-21-1716180950-504616633-4196278373-1000 common settings
2024-Apr-02 08:56:25.359456 [ 1612] [INF] [config] Rewrite es default connection settings
2024-Apr-02 08:56:25.474463 [ 1632] [INF] [Scheduler] SCHEDULE: 18 Action Class 0f0fe560-e333-11ec-59d4-74bf353f3be0 0 escan_job_t 0 Action Name 0f0fe560-e333-11ec-59d4-74bf353f3be0 0 Daily%Sscan 0 Action ScanMode 0f0fe560-e333-11ec-59d4-74bf353f3be0 0 ScanFixed%S1%SSuspiciousFiles%S2%SScanRootkit%S1%SScanIdle%S2%SActionInfectedBoot%S1%SScanHeuristic%S1%SScanNonet%S0%SScanShutdown%S0%SMaxArchSize%S0%SIncurableFiles%S2%SScanStartups%S1%SMaxTimeMills%S0%SMaxArchLevel%S16%SInfectedFiles%S1%SScanRemovable%S1%SMaxCompressionRatio%S1000%SCheckArchives%S1%SMaxSizeToExtract%S524288%SScanInteractive%S0%SActionRiskware%S2%SMaxEngineToUsePercent%S50%SActionInfectedContainer%S2%SCheckContainer%S1%SFollowSymbolicLinks%S1%SActionInfectedMail%S0%SScanMemory%S1%SMaxEngineToUse%S0%SActionInfectedArchive%S2%SCheckEMailFiles%S1%SScanBoot%S1%SActionHacktools%S2%SScanPriority%S50%SActionAdware%S2%SRatioCheckThreshold%S1024%SActionJokes%S2%SPauseOnBattery%S1%SScanSelection%S0%SActionDialers%S2%SScanType%Scustom 0 Action ScanType 0f0fe560-e333-11ec-59d4-74bf353f3be0 0 full 0 Job State 0f0fe560-e333-11ec-59d4-74bf353f3be0 1 %Z 2 Time Class 0f0fe560-e333-11ec-59d4-74bf353f3be0 0 daily_job_t 0 Time Hour 0f0fe560-e333-11ec-59d4-74bf353f3be0 1 %Z 13 Time Minute 0f0fe560-e333-11ec-59d4-74bf353f3be0 1 %Z 0 Time UseUTC 0f0fe560-e333-11ec-59d4-74bf353f3be0 2 %Z 0 Action Class dd137cd0-e665-11ec-6006-4c385f32b97a 0 log_job_t 0 Action Log dd137cd0-e665-11ec-6006-4c385f32b97a 0 %Z 0 Action Name dd137cd0-e665-11ec-6006-4c385f32b97a 0 %D0%92%D0%B5%D0%B4%D0%BE%D0%BC%D1%81%D1%82%S%D1%81%D0%B5%D1%82%D1%8C 0 Job State dd137cd0-e665-11ec-6006-4c385f32b97a 1 %Z 19 Time At dd137cd0-e665-11ec-6006-4c385f32b97a 4 %Z 0 Time Class dd137cd0-e665-11ec-6006-4c385f32b97a 0 daily_job_t 0 Time Hour dd137cd0-e665-11ec-6006-4c385f32b97a 1 %Z 10 Time Minute dd137cd0-e665-11ec-6006-4c385f32b97a 1 %Z 0 Time UseUTC dd137cd0-e665-11ec-6006-4c385f32b97a 2 %Z 1
2024-Apr-02 08:56:27.890601 [ 1628] [INF] [components] EScanner (37) changed state to unknown
2024-Apr-02 08:56:27.890601 [ 1628] [INF] [components] NetFilterHttp (38) changed state to started
2024-Apr-02 08:56:27.948605 [ 1628] [INF] [components] NetFilterParentalControl (54) changed state to started
2024-Apr-02 08:56:28.122614 [ 1628] [INF] [components] SpamFilter (55) changed state to not_installed
2024-Apr-02 08:56:28.222620 [ 1628] [INF] [components] SpIDerGuardG3 (57) changed state to started
2024-Apr-02 08:56:28.256622 [ 1628] [INF] [components] OutlookPlugin (103) changed state to started
2024-Apr-02 08:56:28.331626 [ 1628] [INF] [components] DwProt (124) changed state to started
2024-Apr-02 08:56:28.397630 [ 1628] [INF] [components] PreventiveProtection (144) changed state to started
2024-Apr-02 08:56:28.439633 [ 1628] [INF] [components] Appcontrol (154) changed state to started
2024-Apr-02 08:56:28.505636 [ 1628] [INF] [components] MeshClient (156) changed state to started
2024-Apr-02 08:56:28.572640 [ 1628] [INF] [components] RansomwareProtection (159) changed state to started
2024-Apr-02 08:56:28.647645 [ 1628] [INF] [components] BehaviorAnalysis (160) changed state to started
2024-Apr-02 08:56:28.739650 [ 1628] [INF] [components] ExploitPrevention (161) changed state to started
2024-Apr-02 08:56:28.940661 [ 1628] [INF] [components] process installed components
2024-Apr-02 08:56:29.207677 [ 1628] [INF] [components] comp: Scanner, date: 20221220114437000(1671536677)
2024-Apr-02 08:56:29.255679 [ 1628] [INF] [components] comp: AvService, date: 20221220114312000(1671536592)
2024-Apr-02 08:56:29.355685 [ 1628] [INF] [components] comp: EScanner, date: 20221220114312000
2024-Apr-02 08:56:29.490693 [ 1628] [INF] [components] comp: Appcontrol, date: 20221220114312000
2024-Apr-02 08:56:29.597699 [ 1628] [INF] [components] comp: MeshClient, date: 20221220114312000
2024-Apr-02 08:56:29.640701 [ 1628] [INF] [components] comp: NetFilterHttp, date: 20221220114402000(1671536642)
2024-Apr-02 08:56:29.697705 [ 1628] [INF] [components] comp: NetFilterParentalControl, date: 20221220114437000(1671536677)
2024-Apr-02 08:56:29.730706 [ 1628] [INF] [components] comp: SpamFilter, date: 20221220114335000(1671536615)
2024-Apr-02 08:56:29.774709 [ 1628] [INF] [components] comp: SpIDerGuardG3, date: 20221220114438000(1671536678)
2024-Apr-02 08:56:29.805711 [ 1628] [INF] [components] comp: OutlookPlugin, date: 20221220114436000(1671536676)
2024-Apr-02 08:56:29.857714 [ 1628] [INF] [components] comp: DwProt, date: 20221220114331000(1671536611)
2024-Apr-02 08:56:29.897716 [ 1628] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592). Skip sending to unsupported server.
2024-Apr-02 08:56:29.897716 [ 1628] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592)
2024-Apr-02 08:56:29.930718 [ 1628] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592)
2024-Apr-02 08:56:29.980721 [ 1628] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592)
2024-Apr-02 08:56:31.677818 [ 1628] [INF] [components] process installed components
2024-Apr-02 08:56:31.787824 [ 1628] [INF] [components] comp: Scanner, date: 20221220114437000(1671536677)
2024-Apr-02 08:56:31.840827 [ 1628] [INF] [components] comp: AvService, date: 20221220114312000(1671536592)
2024-Apr-02 08:56:31.938833 [ 1628] [INF] [components] comp: EScanner, date: 20221220114312000
2024-Apr-02 08:56:31.980835 [ 1628] [INF] [components] comp: Appcontrol, date: 20221220114312000
2024-Apr-02 08:56:32.021838 [ 1628] [INF] [components] comp: MeshClient, date: 20221220114312000
2024-Apr-02 08:56:32.073840 [ 1628] [INF] [components] comp: NetFilterHttp, date: 20221220114402000(1671536642)
2024-Apr-02 08:56:32.138844 [ 1628] [INF] [components] comp: NetFilterParentalControl, date: 20221220114437000(1671536677)
2024-Apr-02 08:56:32.173846 [ 1628] [INF] [components] comp: SpamFilter, date: 20221220114335000(1671536615)
2024-Apr-02 08:56:32.217849 [ 1628] [INF] [components] comp: SpIDerGuardG3, date: 20221220114438000(1671536678)
2024-Apr-02 08:56:32.238850 [ 1628] [INF] [components] comp: OutlookPlugin, date: 20221220114436000(1671536676)
2024-Apr-02 08:56:32.283852 [ 1628] [INF] [components] comp: DwProt, date: 20221220114331000(1671536611)
2024-Apr-02 08:56:32.313854 [ 1628] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592). Skip sending to unsupported server.
2024-Apr-02 08:56:32.313854 [ 1628] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592)
2024-Apr-02 08:56:32.346856 [ 1628] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592)
2024-Apr-02 08:56:32.380858 [ 1628] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592)
2024-Apr-02 08:56:53.718078 [ 1632] [INF] [esupdate] Load repository file information.
2024-Apr-02 08:57:23.391776 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 08:57:23.392776 [ 1636] [INF] [Scheduler] Restart enterprise scheduler
2024-Apr-02 08:57:23.393776 [ 1636] [INF] [Scheduler] Skipping disabled job with id 0f0fe560-e333-11ec-59d4-74bf353f3be0
2024-Apr-02 08:57:23.393776 [ 1636] [INF] [Scheduler] starting scheduler, now: 2024-Apr-02 08:57:23
2024-Apr-02 08:57:23.393776 [ 1636] [INF] [Scheduler] Job dd137cd0-e665-11ec-6006-4c385f32b97a scheduled afresh for 2024-Apr-02 13:00:00, now = 2024-Apr-02 08:57:23
2024-Apr-02 08:57:23.610788 [ 1636] [INF] [Scheduler] time until next wakeup: 00:30:00
2024-Apr-02 08:57:44.705995 [ 1636] [WRN] [es-client] [Environ] Unable to apply container because of get history items because of Unknown error 0x80240007 (COM error)
2024-Apr-02 08:58:08.593361 [ 1632] [INF] [esupdate] Repo C:/ProgramData/Doctor Web/Updater/repo/ loaded successfully! 595 files!
2024-Apr-02 08:58:08.594361 [ 1632] [INF] [esloader] start downloading products: 10-drwbases; 10-drwspamdb;
2024-Apr-02 08:58:08.597361 [ 1624] [INF] [esloader] Product: 10-drwbases. Current revision = 130'20240401151719. New revision = 130'20240402045409.
2024-Apr-02 08:58:08.597361 [ 1620] [INF] [esloader] Product: 10-drwspamdb. Current revision = 130'20240401142052. New revision = 130'20240401191417.
2024-Apr-02 08:58:08.741370 [ 1624] [INF] [esloader] Will be loaded 1 file(s) ( 698 byte(s) ) for product 10-drwbases
2024-Apr-02 08:58:08.741370 [ 1624] [INF] [esloader] Sending ARQ_UPDATE to server ...
2024-Apr-02 08:58:08.755370 [ 1616] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/vdb-revision.xml downloaded!
2024-Apr-02 08:58:08.755370 [ 1616] [INF] [esloader] Download complete for Product = 10-drwbases. Revision = 130'20240402045409. Downloaded Size = 698
2024-Apr-02 08:58:08.855376 [ 1624] [INF] [esloader] Will be loaded 4 file(s) ( 384451 byte(s) ) for product 10-drwspamdb
2024-Apr-02 08:58:08.855376 [ 1624] [INF] [esloader] Sending ARQ_UPDATE to server ...
2024-Apr-02 08:58:08.894378 [ 1620] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/antispam-revision.xml downloaded!
2024-Apr-02 08:58:08.959382 [ 1632] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/antispam/9/common/vrpatch-1.kwo.lzma downloaded!
2024-Apr-02 08:58:08.971383 [ 1632] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/antispam/9/common/vrpatch.list.lzma downloaded!
2024-Apr-02 08:58:08.982383 [ 1640] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/antispam/9/revision.xml downloaded!
2024-Apr-02 08:58:08.982383 [ 1640] [INF] [esloader] Download complete for Product = 10-drwspamdb. Revision = 130'20240401191417. Downloaded Size = 384451
2024-Apr-02 08:58:08.982383 [ 1612] [INF] [esloader] All files downloaded
2024-Apr-02 08:58:23.393208 [ 1632] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 08:58:25.824347 [ 1632] [INF] [esupdate] Reload updater configuration
2024-Apr-02 08:58:25.824347 [ 1632] [INF] [esupdate] Load products.xml from C:/ProgramData/Doctor Web/Updater/repo/90\products.xml
2024-Apr-02 08:58:25.826347 [ 1632] [INF] [esupdate] Products.xml contains 4 groups, 27 products, 40 components
2024-Apr-02 08:58:26.380378 [ 1632] [INF] [esloader] Update products-revisions map
2024-Apr-02 08:58:26.380378 [ 1632] [INF] [esloader] ESproduct = 10-drwbases; revision = 130'20240402045409
2024-Apr-02 08:58:26.380378 [ 1632] [INF] [esloader] ESproduct = 10-drwspamdb; revision = 130'20240401191417
2024-Apr-02 08:58:26.380378 [ 1632] [INF] [esloader] ESproduct = 20-drwagent; revision = 130'20240401100342
2024-Apr-02 08:58:26.381379 [ 1632] [INF] [esloader] Sending ANF_STATE to server ...
2024-Apr-02 08:58:26.380378 [ 1616] [INF] [esupdate] Updating repo info ...
2024-Apr-02 08:58:26.382379 [ 1632] [INF] [esloader] EsProduct = 10-drwbases ; revision = 13020240402045409; state = S; force_update = no
2024-Apr-02 08:58:26.382379 [ 1632] [INF] [esloader] EsProduct = 10-drwspamdb; revision = 13020240401191417; state = S; force_update = no
2024-Apr-02 08:58:26.382379 [ 1632] [INF] [esloader] EsProduct = 20-drwagent ; revision = 13020240401100342; state = S; force_update = no
2024-Apr-02 08:58:26.412380 [ 1616] [INF] [esupdate] Repo info updated successfully: 6 add(update) files, 0 remove files.
2024-Apr-02 08:58:28.785516 [ 1624] [INF] [components] process installed components
2024-Apr-02 08:58:28.821518 [ 1624] [INF] [components] comp: Scanner, date: 20221220114437000(1671536677)
2024-Apr-02 08:58:28.958526 [ 1624] [INF] [components] comp: AvService, date: 20221220114312000(1671536592)
2024-Apr-02 08:58:29.001528 [ 1624] [INF] [components] comp: EScanner, date: 20221220114312000
2024-Apr-02 08:58:29.043531 [ 1624] [INF] [components] comp: Appcontrol, date: 20221220114312000
2024-Apr-02 08:58:29.101534 [ 1624] [INF] [components] comp: MeshClient, date: 20221220114312000
2024-Apr-02 08:58:29.143536 [ 1624] [INF] [components] comp: NetFilterHttp, date: 20221220114402000(1671536642)
2024-Apr-02 08:58:29.182539 [ 1624] [INF] [components] comp: NetFilterParentalControl, date: 20221220114437000(1671536677)
2024-Apr-02 08:58:29.207540 [ 1624] [INF] [components] comp: SpamFilter, date: 20221220114335000(1671536615)
2024-Apr-02 08:58:29.244542 [ 1624] [INF] [components] comp: SpIDerGuardG3, date: 20221220114438000(1671536678)
2024-Apr-02 08:58:29.274544 [ 1624] [INF] [components] comp: OutlookPlugin, date: 20221220114436000(1671536676)
2024-Apr-02 08:58:29.300545 [ 1624] [INF] [components] comp: DwProt, date: 20221220114331000(1671536611)
2024-Apr-02 08:58:29.332547 [ 1624] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592). Skip sending to unsupported server.
2024-Apr-02 08:58:29.332547 [ 1624] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592)
2024-Apr-02 08:58:29.368549 [ 1624] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592)
2024-Apr-02 08:58:29.399551 [ 1624] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592)
2024-Apr-02 08:59:23.394639 [ 1632] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:00:23.396071 [ 1640] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:01:23.397503 [ 1632] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:02:23.398935 [ 1640] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:03:23.400367 [ 1616] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:04:23.401799 [ 1616] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:04:24.311851 [ 1640] [INF] [esloader] start downloading products: 10-drwbases;
2024-Apr-02 09:04:24.315851 [ 1628] [INF] [esloader] Product: 10-drwbases. Current revision = 130'20240402045409. New revision = 130'20240402054823.
2024-Apr-02 09:04:24.393856 [ 1612] [INF] [esloader] We have nothing to download for product: 10-drwbases
2024-Apr-02 09:04:24.393856 [ 1612] [INF] [esloader] Download complete for Product = 10-drwbases. Revision = 130'20240402054823. Downloaded Size = 0
2024-Apr-02 09:04:24.393856 [ 1628] [INF] [esloader] All files downloaded
2024-Apr-02 09:04:29.284135 [ 1636] [INF] [esupdate] Updating repo info ...
2024-Apr-02 09:04:29.284135 [ 1612] [INF] [esupdate] Reload updater configuration
2024-Apr-02 09:04:29.284135 [ 1612] [INF] [esupdate] Load products.xml from C:/ProgramData/Doctor Web/Updater/repo/90\products.xml
2024-Apr-02 09:04:29.286135 [ 1612] [INF] [esupdate] Products.xml contains 4 groups, 27 products, 40 components
2024-Apr-02 09:04:29.287136 [ 1612] [INF] [esloader] Update products-revisions map
2024-Apr-02 09:04:29.287136 [ 1612] [INF] [esloader] ESproduct = 10-drwbases; revision = 130'20240402054823
2024-Apr-02 09:04:29.287136 [ 1612] [INF] [esloader] ESproduct = 10-drwspamdb; revision = 130'20240401191417
2024-Apr-02 09:04:29.287136 [ 1612] [INF] [esloader] ESproduct = 20-drwagent; revision = 130'20240401100342
2024-Apr-02 09:04:29.287136 [ 1612] [INF] [esloader] Sending ANF_STATE to server ...
2024-Apr-02 09:04:29.289136 [ 1612] [INF] [esloader] EsProduct = 10-drwbases ; revision = 13020240402054823; state = S; force_update = no
2024-Apr-02 09:04:29.289136 [ 1612] [INF] [esloader] EsProduct = 10-drwspamdb; revision = 13020240401191417; state = S; force_update = no
2024-Apr-02 09:04:29.289136 [ 1612] [INF] [esloader] EsProduct = 20-drwagent ; revision = 13020240401100342; state = S; force_update = no
2024-Apr-02 09:04:32.013291 [ 1612] [INF] [components] process installed components
2024-Apr-02 09:04:32.054294 [ 1612] [INF] [components] comp: Scanner, date: 20221220114437000(1671536677)
2024-Apr-02 09:04:32.090296 [ 1612] [INF] [components] comp: AvService, date: 20221220114312000(1671536592)
2024-Apr-02 09:04:32.121298 [ 1612] [INF] [components] comp: EScanner, date: 20221220114312000
2024-Apr-02 09:04:32.146299 [ 1612] [INF] [components] comp: Appcontrol, date: 20221220114312000
2024-Apr-02 09:04:32.171300 [ 1612] [INF] [components] comp: MeshClient, date: 20221220114312000
2024-Apr-02 09:04:32.206302 [ 1612] [INF] [components] comp: NetFilterHttp, date: 20221220114402000(1671536642)
2024-Apr-02 09:04:32.246305 [ 1612] [INF] [components] comp: NetFilterParentalControl, date: 20221220114437000(1671536677)
2024-Apr-02 09:04:32.271306 [ 1612] [INF] [components] comp: SpamFilter, date: 20221220114335000(1671536615)
2024-Apr-02 09:04:32.297308 [ 1612] [INF] [components] comp: SpIDerGuardG3, date: 20221220114438000(1671536678)
2024-Apr-02 09:04:32.329310 [ 1612] [INF] [components] comp: OutlookPlugin, date: 20221220114436000(1671536676)
2024-Apr-02 09:04:32.396313 [ 1612] [INF] [components] comp: DwProt, date: 20221220114331000(1671536611)
2024-Apr-02 09:04:32.423315 [ 1612] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592). Skip sending to unsupported server.
2024-Apr-02 09:04:32.423315 [ 1612] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592)
2024-Apr-02 09:04:32.446316 [ 1612] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592)
2024-Apr-02 09:04:32.471318 [ 1612] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592)
2024-Apr-02 09:05:23.403231 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:06:23.404663 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:07:23.406095 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:08:23.407526 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:09:23.408958 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:10:23.410390 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:11:23.411822 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:12:23.413254 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:13:23.414686 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:14:23.416118 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:15:23.417550 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:16:23.418982 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:17:23.420413 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:18:23.421845 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:19:23.423277 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:20:23.424709 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:21:23.426141 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:22:23.427573 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:23:23.429005 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:24:23.430437 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:25:23.431869 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:26:23.433300 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:27:23.434732 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:27:23.641744 [ 1628] [INF] [Scheduler] Timer expired, will check jobs, now: 2024-Apr-02 09:27:23
2024-Apr-02 09:27:23.641744 [ 1628] [INF] [Scheduler] time until next wakeup: 00:30:00
2024-Apr-02 09:28:23.436164 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:29:23.437596 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:30:23.439028 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:31:23.440460 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:32:23.441892 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:33:23.443324 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:34:23.444755 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:35:23.446187 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:36:23.447619 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:37:23.449051 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:38:23.450483 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:39:23.451915 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:40:23.453347 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:41:23.454779 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:42:23.456211 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:43:23.457642 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:44:23.459074 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:45:23.460506 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:46:23.461938 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:47:23.463370 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:48:23.464802 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:49:23.466234 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:50:23.467666 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:51:23.469098 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:52:23.470529 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:53:23.471961 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:54:23.473393 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:55:23.474825 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:56:23.476257 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:56:24.956342 [ 1628] [WRN] [statistics] failed to process statistics for 103: Object was not found; (OutlookPlugin:Statistics)
2024-Apr-02 09:57:23.477689 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:57:23.671700 [ 1628] [INF] [Scheduler] Timer expired, will check jobs, now: 2024-Apr-02 09:57:23
2024-Apr-02 09:57:23.671700 [ 1628] [INF] [Scheduler] time until next wakeup: 00:30:00
2024-Apr-02 09:58:23.479121 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 09:59:23.480553 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:00:23.481984 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:01:23.483416 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:02:23.484848 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:03:23.486280 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:04:23.487712 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:05:23.489144 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:05:28.930455 [ 1632] [INF] [esloader] start downloading products: 10-drwbases;
2024-Apr-02 10:05:28.934455 [ 1628] [INF] [esloader] Product: 10-drwbases. Current revision = 130'20240402054823. New revision = 130'20240402064515.
2024-Apr-02 10:05:28.999459 [ 1620] [INF] [esloader] We have nothing to download for product: 10-drwbases
2024-Apr-02 10:05:28.999459 [ 1620] [INF] [esloader] Download complete for Product = 10-drwbases. Revision = 130'20240402064515. Downloaded Size = 0
2024-Apr-02 10:05:28.999459 [ 1628] [INF] [esloader] All files downloaded
2024-Apr-02 10:05:32.769675 [ 1628] [INF] [esupdate] Reload updater configuration
2024-Apr-02 10:05:32.769675 [ 1620] [INF] [esupdate] Updating repo info ...
2024-Apr-02 10:05:32.769675 [ 1628] [INF] [esupdate] Load products.xml from C:/ProgramData/Doctor Web/Updater/repo/90\products.xml
2024-Apr-02 10:05:32.771675 [ 1628] [INF] [esupdate] Products.xml contains 4 groups, 27 products, 40 components
2024-Apr-02 10:05:32.772675 [ 1628] [INF] [esloader] Update products-revisions map
2024-Apr-02 10:05:32.772675 [ 1628] [INF] [esloader] ESproduct = 10-drwbases; revision = 130'20240402064515
2024-Apr-02 10:05:32.772675 [ 1628] [INF] [esloader] ESproduct = 10-drwspamdb; revision = 130'20240401191417
2024-Apr-02 10:05:32.772675 [ 1628] [INF] [esloader] ESproduct = 20-drwagent; revision = 130'20240401100342
2024-Apr-02 10:05:32.772675 [ 1628] [INF] [esloader] Sending ANF_STATE to server ...
2024-Apr-02 10:05:32.772675 [ 1628] [INF] [esloader] EsProduct = 10-drwbases ; revision = 13020240402064515; state = S; force_update = no
2024-Apr-02 10:05:32.772675 [ 1628] [INF] [esloader] EsProduct = 10-drwspamdb; revision = 13020240401191417; state = S; force_update = no
2024-Apr-02 10:05:32.772675 [ 1628] [INF] [esloader] EsProduct = 20-drwagent ; revision = 13020240401100342; state = S; force_update = no
2024-Apr-02 10:05:34.665783 [ 1628] [INF] [components] process installed components
2024-Apr-02 10:05:34.702785 [ 1628] [INF] [components] comp: Scanner, date: 20221220114437000(1671536677)
2024-Apr-02 10:05:34.727787 [ 1628] [INF] [components] comp: AvService, date: 20221220114312000(1671536592)
2024-Apr-02 10:05:34.752788 [ 1628] [INF] [components] comp: EScanner, date: 20221220114312000
2024-Apr-02 10:05:34.785790 [ 1628] [INF] [components] comp: Appcontrol, date: 20221220114312000
2024-Apr-02 10:05:34.810791 [ 1628] [INF] [components] comp: MeshClient, date: 20221220114312000
2024-Apr-02 10:05:34.835793 [ 1628] [INF] [components] comp: NetFilterHttp, date: 20221220114402000(1671536642)
2024-Apr-02 10:05:34.860794 [ 1628] [INF] [components] comp: NetFilterParentalControl, date: 20221220114437000(1671536677)
2024-Apr-02 10:05:34.894796 [ 1628] [INF] [components] comp: SpamFilter, date: 20221220114335000(1671536615)
2024-Apr-02 10:05:34.920798 [ 1628] [INF] [components] comp: SpIDerGuardG3, date: 20221220114438000(1671536678)
2024-Apr-02 10:05:34.952800 [ 1628] [INF] [components] comp: OutlookPlugin, date: 20221220114436000(1671536676)
2024-Apr-02 10:05:34.979801 [ 1628] [INF] [components] comp: DwProt, date: 20221220114331000(1671536611)
2024-Apr-02 10:05:35.010803 [ 1628] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592). Skip sending to unsupported server.
2024-Apr-02 10:05:35.010803 [ 1628] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592)
2024-Apr-02 10:05:35.044805 [ 1628] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592)
2024-Apr-02 10:05:35.069806 [ 1628] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592)
2024-Apr-02 10:06:23.490576 [ 1632] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:07:23.492008 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:08:23.493440 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:09:23.494871 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:10:23.496303 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:11:23.497735 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:12:23.499167 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:13:23.500599 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:14:23.502031 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:15:23.503463 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:16:23.504895 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:17:23.506327 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:18:23.507758 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:19:23.509190 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:20:23.510622 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:21:23.512054 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:22:23.513486 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:23:23.514918 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:24:23.516350 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:25:23.517782 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:26:23.519214 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:27:23.520645 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:27:23.701656 [ 1620] [INF] [Scheduler] Timer expired, will check jobs, now: 2024-Apr-02 10:27:23
2024-Apr-02 10:27:23.701656 [ 1620] [INF] [Scheduler] time until next wakeup: 00:30:00
2024-Apr-02 10:28:23.522077 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:29:23.523509 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:30:23.524941 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:31:23.526373 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:32:23.527805 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:33:23.529237 [ 1632] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:34:23.530669 [ 1632] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:35:23.532100 [ 1632] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:36:23.533532 [ 1632] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:37:23.534964 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:38:23.536396 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:39:23.537828 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:40:23.539260 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:41:23.540692 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:42:23.542124 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:43:23.543556 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:44:23.544987 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:45:23.546419 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:46:23.547851 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:47:23.549283 [ 1632] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:48:23.550715 [ 1632] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:49:23.552147 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:50:23.553579 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:51:23.555011 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:52:23.556443 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:53:23.557874 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:54:23.559306 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:55:23.560738 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:56:23.562170 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:56:24.954250 [ 1628] [WRN] [statistics] failed to process statistics for 103: Object was not found; (OutlookPlugin:Statistics)
2024-Apr-02 10:57:23.563602 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:57:23.731612 [ 1612] [INF] [Scheduler] Timer expired, will check jobs, now: 2024-Apr-02 10:57:23
2024-Apr-02 10:57:23.731612 [ 1612] [INF] [Scheduler] time until next wakeup: 00:30:00
2024-Apr-02 10:58:23.565034 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 10:59:23.566466 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 11:00:23.567898 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 11:01:23.569330 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 11:02:23.570761 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 11:03:23.572193 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 11:04:23.573625 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 11:05:23.575057 [ 1612] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 11:06:23.576489 [ 1620] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 11:07:03.720785 [ 1612] [INF] [esloader] start downloading products: 10-drwbases; 10-drwspamdb;
2024-Apr-02 11:07:03.724785 [ 1632] [INF] [esloader] Product: 10-drwbases. Current revision = 130'20240402064515. New revision = 130'20240402073921.
2024-Apr-02 11:07:03.725785 [ 1632] [INF] [esloader] Product: 10-drwspamdb. Current revision = 130'20240401191417. New revision = 130'20240402074752.
2024-Apr-02 11:07:03.789789 [ 1620] [INF] [esloader] We have nothing to download for product: 10-drwbases
2024-Apr-02 11:07:03.789789 [ 1620] [INF] [esloader] Download complete for Product = 10-drwbases. Revision = 130'20240402073921. Downloaded Size = 0
2024-Apr-02 11:07:03.810790 [ 1632] [INF] [esloader] We have nothing to download for product: 10-drwspamdb
2024-Apr-02 11:07:03.810790 [ 1632] [INF] [esloader] Download complete for Product = 10-drwspamdb. Revision = 130'20240402074752. Downloaded Size = 0
2024-Apr-02 11:07:03.810790 [ 1620] [INF] [esloader] All files downloaded
2024-Apr-02 11:07:08.834078 [ 1620] [INF] [esupdate] Reload updater configuration
2024-Apr-02 11:07:08.835078 [ 1620] [INF] [esupdate] Load products.xml from C:/ProgramData/Doctor Web/Updater/repo/90\products.xml
2024-Apr-02 11:07:08.837078 [ 1620] [INF] [esupdate] Products.xml contains 4 groups, 27 products, 40 components
2024-Apr-02 11:07:09.388109 [ 1620] [INF] [esloader] Update products-revisions map
2024-Apr-02 11:07:09.388109 [ 1620] [INF] [esloader] ESproduct = 10-drwbases; revision = 130'20240402073921
2024-Apr-02 11:07:09.388109 [ 1620] [INF] [esloader] ESproduct = 10-drwspamdb; revision = 130'20240402074752
2024-Apr-02 11:07:09.388109 [ 1620] [INF] [esloader] ESproduct = 20-drwagent; revision = 130'20240401100342
2024-Apr-02 11:07:09.389109 [ 1620] [INF] [esloader] Sending ANF_STATE to server ...
2024-Apr-02 11:07:09.389109 [ 1628] [INF] [esupdate] Updating repo info ...
2024-Apr-02 11:07:09.390109 [ 1620] [INF] [esloader] EsProduct = 10-drwbases ; revision = 13020240402073921; state = S; force_update = no
2024-Apr-02 11:07:09.390109 [ 1620] [INF] [esloader] EsProduct = 10-drwspamdb; revision = 13020240402074752; state = S; force_update = no
2024-Apr-02 11:07:09.390109 [ 1620] [INF] [esloader] EsProduct = 20-drwagent ; revision = 13020240401100342; state = S; force_update = no
2024-Apr-02 11:07:09.416111 [ 1628] [INF] [esupdate] Repo info updated successfully: 6 add(update) files, 0 remove files.
2024-Apr-02 11:07:10.452170 [ 1628] [INF] [components] process installed components
2024-Apr-02 11:07:10.491172 [ 1628] [INF] [components] comp: Scanner, date: 20221220114437000(1671536677)
2024-Apr-02 11:07:10.523174 [ 1628] [INF] [components] comp: AvService, date: 20221220114312000(1671536592)
2024-Apr-02 11:07:10.558176 [ 1628] [INF] [components] comp: EScanner, date: 20221220114312000
2024-Apr-02 11:07:10.598178 [ 1628] [INF] [components] comp: Appcontrol, date: 20221220114312000
2024-Apr-02 11:07:10.631180 [ 1628] [INF] [components] comp: MeshClient, date: 20221220114312000
2024-Apr-02 11:07:10.665182 [ 1628] [INF] [components] comp: NetFilterHttp, date: 20221220114402000(1671536642)
2024-Apr-02 11:07:10.708185 [ 1628] [INF] [components] comp: NetFilterParentalControl, date: 20221220114437000(1671536677)
2024-Apr-02 11:07:10.740187 [ 1628] [INF] [components] comp: SpamFilter, date: 20221220114335000(1671536615)
2024-Apr-02 11:07:10.767188 [ 1628] [INF] [components] comp: SpIDerGuardG3, date: 20221220114438000(1671536678)
2024-Apr-02 11:07:10.798190 [ 1628] [INF] [components] comp: OutlookPlugin, date: 20221220114436000(1671536676)
2024-Apr-02 11:07:10.835192 [ 1628] [INF] [components] comp: DwProt, date: 20221220114331000(1671536611)
2024-Apr-02 11:07:10.865194 [ 1628] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592). Skip sending to unsupported server.
2024-Apr-02 11:07:10.865194 [ 1628] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592)
2024-Apr-02 11:07:10.902196 [ 1628] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592)
2024-Apr-02 11:07:10.931197 [ 1628] [INF] [components] comp: PreventiveProtection, date: 20221220114312000(1671536592)
2024-Apr-02 11:07:23.577921 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 11:08:23.579353 [ 1624] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 11:09:23.580785 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 11:10:23.582216 [ 1624] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 11:11:23.583648 [ 1628] [INF] [event-processor] Starting timer (0 events pending)
2024-Apr-02 11:12:23.585080 [ 1624] [INF] [event-processor] Starting timer (0 events pending)