Перейти к содержимому


Фото
- - - - -

Перенос Dr.Web ESS 13 с Windows на Linux Debian 11


  • Please log in to reply
13 ответов в этой теме

#1 Zenw1e

Zenw1e

    Newbie

  • Posters
  • 43 Сообщений:

Отправлено 04 Июль 2022 - 22:20

Приветствую!
Перенёс действующую БД с настройками и сертификатом с Windwows Server 2008 R2 на Linux Debian 11 как тут:
https://forum.drweb.com/index.php?showtopic=333286&hl=%D0%BF%D0%B5%D1%80%D0%B5%D0%BD%D0%BE%D1%81
Сервер запустился, настройки все скушал, все бы гуд, назначил новый IP новому серверу (192.168.0.18), пытаюсь перевести юзеров на него так:
На старом Win сервере зашёл:

Антивирусная сеть--- выбираем Everyone --- в управляющем меню выберите пункт Параметры подключения--- указываем нужный адрес сервера Dr.Web: 192.168.0.18 

Заходим в новый ЦУ2 Администрирование---Конфигурация Сервера Dr.Web--- Режим регистрации новичков ---Авто-матически разрешать доступ
Компы вроде "переехали" на новый сервер, но почему-то они все оранжевые вместо зеленых и вот что в логах самого сервера:


drwcsd.log
20220705.001725.63 ERR [00967 01009] wnt:4  [WEBMIN/Socket] exceptions_namespace::SSL_exception: unable to accept connection because of sslv3 alert certificate unknown (error 0x14094416 from ssl3_read_bytes (SSL routines))
20220705.001728.82 ERR [00967 01008] wnt:3  [WEBMIN/Socket] ssl://10.10.10.2:11085: unable to execute application receive handler because of 
20220705.001728.82 ERR [00967 01008] wnt:3  [WEBMIN/Socket] \ unable to accept connection because of 
20220705.001728.82 ERR [00967 01008] wnt:3  [WEBMIN/Socket] \ sslv3 alert certificate unknown (error 0x14094416 from ssl3_read_bytes (SSL routines))
20220705.001728.82 ERR [00967 01008] wnt:3  [WEBMIN/Socket] exceptions_namespace::SSL_exception: unable to accept connection because of sslv3 alert certificate unknown (error 0x14094416 from ssl3_read_bytes (SSL routines))
20220705.001731.86 ERR [00967 00980] wrk:3  [Server] Unable to create listener for endpoint "tcp://[::]:2193" because of 
20220705.001731.86 ERR [00967 00980] wrk:3  [Server] \ bind: Address already in use
20220705.001732.03 ERR [00967 01006] wnt:1  [WEBMIN/Socket] ssl://10.10.10.2:11087: unable to execute application receive handler because of 

Что это может быть и с чем связано?

P.S. старый сервер ESS был на Windows 2008 R2 который, в свою очередь, был в домене

Сообщение было изменено Zenw1e: 04 Июль 2022 - 22:25


#2 Afalin

Afalin

    Guru

  • Dr.Web Staff
  • 5 835 Сообщений:

Отправлено 05 Июль 2022 - 10:09

20220705.001725.63 ERR [00967 01009] wnt:4  [WEBMIN/Socket] exceptions_namespace::SSL_exception: unable to accept connection because of sslv3 alert certificate unknown (error 0x14094416 from ssl3_read_bytes (SSL routines))
20220705.001728.82 ERR [00967 01008] wnt:3  [WEBMIN/Socket] ssl://10.10.10.2:11085: unable to execute application receive handler because of
20220705.001728.82 ERR [00967 01008] wnt:3  [WEBMIN/Socket] \ unable to accept connection because of
20220705.001728.82 ERR [00967 01008] wnt:3  [WEBMIN/Socket] \ sslv3 alert certificate unknown (error 0x14094416 from ssl3_read_bytes (SSL routines))
20220705.001728.82 ERR [00967 01008] wnt:3  [WEBMIN/Socket] exceptions_namespace::SSL_exception: unable to accept connection because of sslv3 alert certificate unknown (error 0x14094416 from ssl3_read_bytes (SSL routines))

Это самоподписанный сертификат веб-сервера.

 

20220705.001731.86 ERR [00967 00980] wrk:3  [Server] Unable to create listener for endpoint "tcp://[::]:2193" because of
20220705.001731.86 ERR [00967 00980] wrk:3  [Server] \ bind: Address already in use

Это емнип sysctl net.ipv6.bindv6only = 0 так себя проявляет – [::] вешается и на IPv6 [::], и на IPv4 0.0.0.0. В настройках транспорта можно оставить что-то одно. Либо покрутить sysctl.

 

Компы вроде "переехали" на новый сервер, но почему-то они все оранжевые вместо зеленых и вот что в логах самого сервера:

А это надо смотреть в разделе "Состояние".


Семь раз отрежь – один раз проверь

#3 Zenw1e

Zenw1e

    Newbie

  • Posters
  • 43 Сообщений:

Отправлено 07 Июль 2022 - 16:14

 

20220705.001725.63 ERR [00967 01009] wnt:4  [WEBMIN/Socket] exceptions_namespace::SSL_exception: unable to accept connection because of sslv3 alert certificate unknown (error 0x14094416 from ssl3_read_bytes (SSL routines))
20220705.001728.82 ERR [00967 01008] wnt:3  [WEBMIN/Socket] ssl://10.10.10.2:11085: unable to execute application receive handler because of
20220705.001728.82 ERR [00967 01008] wnt:3  [WEBMIN/Socket] \ unable to accept connection because of
20220705.001728.82 ERR [00967 01008] wnt:3  [WEBMIN/Socket] \ sslv3 alert certificate unknown (error 0x14094416 from ssl3_read_bytes (SSL routines))
20220705.001728.82 ERR [00967 01008] wnt:3  [WEBMIN/Socket] exceptions_namespace::SSL_exception: unable to accept connection because of sslv3 alert certificate unknown (error 0x14094416 from ssl3_read_bytes (SSL routines))

Это самоподписанный сертификат веб-сервера.

 

 

 

20220705.001731.86 ERR [00967 00980] wrk:3  [Server] Unable to create listener for endpoint "tcp://[::]:2193" because of
20220705.001731.86 ERR [00967 00980] wrk:3  [Server] \ bind: Address already in use

Это емнип sysctl net.ipv6.bindv6only = 0 так себя проявляет – [::] вешается и на IPv6 [::], и на IPv4 0.0.0.0. В настройках транспорта можно оставить что-то одно. Либо покрутить sysctl.

 

 

 

Компы вроде "переехали" на новый сервер, но почему-то они все оранжевые вместо зеленых и вот что в логах самого сервера:

А это надо смотреть в разделе "Состояние".

 

С этим вроде бы разобрался, все ок, компуктеры "позеленели".
Но некоторые вообще серые (т.е. отключенные), и у них на компе если кликнуть на иконку "DrWeb", то написано "Мобильный режим".
Не могу в доке найти, как вызвать отчет на рабочих компьютерах, где установлен агент, чтобы он вывел инфу о подключении к серверу (к какому IP подключен и т.д.)?



#4 Afalin

Afalin

    Guru

  • Dr.Web Staff
  • 5 835 Сообщений:

Отправлено 07 Июль 2022 - 16:19

Но некоторые вообще серые (т.е. отключенные), и у них на компе если кликнуть на иконку "DrWeb", то написано "Мобильный режим".
Не могу в доке найти, как вызвать отчет на рабочих компьютерах, где установлен агент, чтобы он вывел инфу о подключении к серверу (к какому IP подключен и т.д.)?

Тут лучше идти сразу в логи, это будет es-service.log.


Семь раз отрежь – один раз проверь

#5 Zenw1e

Zenw1e

    Newbie

  • Posters
  • 43 Сообщений:

Отправлено 07 Июль 2022 - 16:29

 

Но некоторые вообще серые (т.е. отключенные), и у них на компе если кликнуть на иконку "DrWeb", то написано "Мобильный режим".
Не могу в доке найти, как вызвать отчет на рабочих компьютерах, где установлен агент, чтобы он вывел инфу о подключении к серверу (к какому IP подключен и т.д.)?

Тут лучше идти сразу в логи, это будет es-service.log.

 

Это на стороне сервера или клиента? Как сформировать лог?



#6 Kirill Polubelov

Kirill Polubelov

    Hr. Schreibikus

  • Dr.Web Staff
  • 4 347 Сообщений:

Отправлено 07 Июль 2022 - 16:33

Это на стороне агента, в %ProgramData%\Doctor Web\Logs\es-service.log

Уже сформирован, тёпленький.


(exit 0)

#7 Zenw1e

Zenw1e

    Newbie

  • Posters
  • 43 Сообщений:

Отправлено 07 Июль 2022 - 16:38

Запустил на клиенте файл C:\Program Files\DrWeb\dwsysinfo.exe, долго формировался файл-отчёт (около 35 мб), в нём нашёл логи файла "es-service.log" и что-то ему не нравится сервер...
Хотя, сервер отлично пингуется и доступен.

2022-Jul-07 18:18:55.500645 [ 4364] [INF] [components] on_connected error: negotiation error
2022-Jul-07 18:19:08.038830 [ 4364] [INF] [event-processor] Accumulate event because of not connected to server (116 events pending)
2022-Jul-07 18:19:08.039008 [ 4364] [INF] [event-processor] Starting timer (116 events pending)
2022-Jul-07 18:20:08.040404 [ 4364] [INF] [event-processor] Accumulate event because of not connected to server (116 events pending)
2022-Jul-07 18:20:08.040658 [ 4364] [INF] [event-processor] Starting timer (116 events pending)
2022-Jul-07 18:20:55.503564 [ 4352] [INF] [es-client] [TextProto/Client/A2S/Session] unconnected/dead: there is an error in previous connection, will try next server if it is
2022-Jul-07 18:20:57.510745 [ 4364] [ERR] [es-client] [Transport] unconnected: unable to connect to '192.168.0.18:2193' because of Подключение не установлено, т.к. конечный компьютер отверг запрос на подключение (code: 10061)
2022-Jul-07 18:20:57.510954 [ 4364] [ERR] [es-client] [TextProto/Client/A2S/Session] Unable to connect to "192.168.0.18" because of negotiation error (error: 2)
2022-Jul-07 18:20:57.511039 [ 4364] [WRN] [reconnector] ES connection error 2 'negotiation error'
2022-Jul-07 18:20:57.511466 [ 4364] [INF] [reconnector] retry ... 120 seconds
2022-Jul-07 18:20:57.511503 [ 4364] [INF] [components] on_connected
2022-Jul-07 18:20:57.511516 [ 4364] [INF] [components] on_connected error: negotiation error
2022-Jul-07 18:21:08.041977 [ 4364] [INF] [event-processor] Accumulate event because of not connected to server (116 events pending)
2022-Jul-07 18:21:08.042174 [ 4364] [INF] [event-processor] Starting timer (116 events pending)
2022-Jul-07 18:22:08.043629 [ 4364] [INF] [event-processor] Accumulate event because of not connected to server (116 events pending)
2022-Jul-07 18:22:08.043867 [ 4364] [INF] [event-processor] Starting timer (116 events pending)
2022-Jul-07 18:22:57.514650 [ 4352] [INF] [es-client] [TextProto/Client/A2S/Session] unconnected/dead: there is an error in previous connection, will try next server if it is
2022-Jul-07 18:22:59.522795 [ 4364] [ERR] [es-client] [Transport] unconnected: unable to connect to '192.168.0.18:2193' because of Подключение не установлено, т.к. конечный компьютер отверг запрос на подключение (code: 10061)
2022-Jul-07 18:22:59.523021 [ 4364] [ERR] [es-client] [TextProto/Client/A2S/Session] Unable to connect to "192.168.0.18" because of negotiation error (error: 2)
2022-Jul-07 18:22:59.523101 [ 4364] [WRN] [reconnector] ES connection error 2 'negotiation error'
2022-Jul-07 18:22:59.523550 [ 4364] [INF] [reconnector] retry ... 120 seconds
2022-Jul-07 18:22:59.523599 [ 4364] [INF] [components] on_connected
2022-Jul-07 18:22:59.523625 [ 4364] [INF] [components] on_connected error: negotiation error
2022-Jul-07 18:23:08.045198 [ 4364] [INF] [event-processor] Accumulate event because of not connected to server (116 events pending)
2022-Jul-07 18:23:08.045363 [ 4364] [INF] [event-processor] Starting timer (116 events pending)
2022-Jul-07 18:24:08.046715 [ 4364] [INF] [event-processor] Accumulate event because of not connected to server (116 events pending)
2022-Jul-07 18:24:08.046899 [ 4364] [INF] [event-processor] Starting timer (116 events pending)


#8 Zenw1e

Zenw1e

    Newbie

  • Posters
  • 43 Сообщений:

Отправлено 07 Июль 2022 - 16:54

Странные вещи...клиент пингует IP-адрес ESS сервера 192.168.0.18

C:\Users\client5>ping 192.168.0.18 -t
Обмен пакетами с 192.168.0.18 по с 32 байтами данных:
Ответ от 192.168.0.18: число байт=32 время<1мс TTL=64
Ответ от 192.168.0.18: число байт=32 время<1мс TTL=64
Ответ от 192.168.0.18: число байт=32 время<1мс TTL=64
Ответ от 192.168.0.18: число байт=32 время<1мс TTL=64
Ответ от 192.168.0.18: число байт=32 время<1мс TTL=64

Но телнет почему-то не проходит, 
C:\Users\client5>telnet 192.168.0.18 2193
Подключение к 192.168.0.18...Не удалось открыть подключение к этому узлу, на порт 2193: Сбой подключения
Хотя, со стороны сервера явно никаких ограничений не ставил, другие ведь из этой же локалки телнетятся на 2193 порт нормально

Сообщение было изменено Zenw1e: 07 Июль 2022 - 16:55


#9 Kirill Polubelov

Kirill Polubelov

    Hr. Schreibikus

  • Dr.Web Staff
  • 4 347 Сообщений:

Отправлено 07 Июль 2022 - 17:53

На проблемной машине включен какой-либо фаерволл?


(exit 0)

#10 Zenw1e

Zenw1e

    Newbie

  • Posters
  • 43 Сообщений:

Отправлено 07 Июль 2022 - 18:15

На проблемной машине включен какой-либо фаерволл?

Отключен



#11 Kirill Polubelov

Kirill Polubelov

    Hr. Schreibikus

  • Dr.Web Staff
  • 4 347 Сообщений:

Отправлено 07 Июль 2022 - 18:47

На проблемной машине, в комстроке от администратора:

netsh ipsec static show all | findstr /L 2193

 


(exit 0)

#12 Zenw1e

Zenw1e

    Newbie

  • Posters
  • 43 Сообщений:

Отправлено 07 Июль 2022 - 21:10

 

На проблемной машине, в комстроке от администратора:

netsh ipsec static show all | findstr /L 2193

Эту "проблемную" станцию уже только завтра смогу "домучать".
Вот еще проблема на другом ПК с Win 8.1
 

2022-Jul-07 22:59:20.972026 [ 1968] [INF] [es-client] [TextProto/Client/A2S/Session] <unbound>: there is an error in previous connection, will try next server if it is
2022-Jul-07 22:59:20.974076 [ 1976] [INF] [es-client] [TextProto/Client/A2S/Session] Connected to "tcp://192.168.0.18:2193"
2022-Jul-07 22:59:20.977187 [ 1976] [INF] [es-client] [TextProto/Client/C2S] tcp://192.168.0.18:2193/dead: There is an error in previous connection, automatically try next server if it is
2022-Jul-07 22:59:20.977290 [ 1968] [ERR] [es-client] [TextProto/Client/A2S/Session] Unable to connect to "192.168.0.18" because of  (error: 1)
2022-Jul-07 22:59:20.977335 [ 1968] [WRN] [reconnector] ES connection error 1 ''
2022-Jul-07 22:59:20.977675 [ 1968] [INF] [reconnector] retry ... 120 seconds
2022-Jul-07 22:59:20.977690 [ 1968] [INF] [components] on_connected
2022-Jul-07 22:59:20.977695 [ 1968] [INF] [components] on_connected error: 
 


#13 Zenw1e

Zenw1e

    Newbie

  • Posters
  • 43 Сообщений:

Отправлено 08 Июль 2022 - 00:39

В общем, само по себе каким-то чудом завелось, причем, на всех ПК

 

2022-Jul-08 02:17:47.691852 [ 1772] [INF] [es-client] [TextProto/Client/C2S] tcp://192.168.0.18:2193/dead: There is an error in previous connection, automatically try next server if it is
2022-Jul-08 02:17:47.692852 [ 1776] [ERR] [es-client] [TextProto/Client/A2S/Session] Unable to connect to "192.168.0.18" because of  (error: 1)
2022-Jul-08 02:17:47.692852 [ 1776] [WRN] [reconnector] ES connection error 1 ''
2022-Jul-08 02:17:47.693852 [ 1776] [INF] [reconnector] retry ... 120 seconds
2022-Jul-08 02:17:47.693852 [ 1776] [INF] [components] on_connected
2022-Jul-08 02:17:47.693852 [ 1776] [INF] [components] on_connected error: 
2022-Jul-08 02:18:46.873770 [ 1772] [INF] [event-processor] Accumulate event because of not connected to server (39 events pending)
2022-Jul-08 02:18:46.873770 [ 1772] [INF] [event-processor] Starting timer (39 events pending)
2022-Jul-08 02:19:16.281710 [ 1780] [INF] [updater] Updater stage 'Postupdating' completed successfully, ret = 0, err = 0
2022-Jul-08 02:19:18.767959 [ 1772] [INF] [components] process installed components
2022-Jul-08 02:19:18.861968 [ 1772] [INF] [components] comp: Scanner, date: 20210207190347000(1612724627)
2022-Jul-08 02:19:18.886971 [ 1772] [INF] [components] comp: NetFilterMail, date: 20210207190347000(1612724627)
2022-Jul-08 02:19:18.919974 [ 1772] [INF] [components] comp: AvService, date: 20210207190344000(1612724624)
2022-Jul-08 02:19:18.969979 [ 1772] [INF] [components] comp: EScanner, date: 20210207190344000
2022-Jul-08 02:19:18.994982 [ 1772] [INF] [components] comp: Appcontrol, date: 20210207190344000
2022-Jul-08 02:19:19.183000 [ 1772] [INF] [components] comp: MeshClient, date: 20210207190344000
2022-Jul-08 02:19:19.285011 [ 1772] [INF] [components] comp: NetFilterHttp, date: 20210207190344000(1612724624)
2022-Jul-08 02:19:19.378020 [ 1772] [INF] [components] comp: NetFilterParentalControl, date: 20210207190347000(1612724627)
2022-Jul-08 02:19:19.408023 [ 1772] [INF] [components] comp: SpamFilter, date: 20210207190342000(1612724622)
2022-Jul-08 02:19:19.435026 [ 1772] [INF] [components] comp: SpIDerGuardG3, date: 20210207190347000(1612724627)
2022-Jul-08 02:19:19.459028 [ 1772] [INF] [components] comp: OutlookPlugin, date: 20210207190347000(1612724627)
2022-Jul-08 02:19:19.486031 [ 1772] [INF] [components] comp: DwProt, date: 20210207190348000(1612724628)
2022-Jul-08 02:19:19.518034 [ 1772] [INF] [components] comp: PreventiveProtection, date: 20201105142739000(1604586459)
2022-Jul-08 02:19:33.102392 [ 1772] [INF] [esupdate] Updating repo info ...
2022-Jul-08 02:19:33.102392 [ 1772] [INF] [esupdate] Repo is not loaded. Load it.
2022-Jul-08 02:19:33.102392 [ 1772] [INF] [esupdate] Load repository file information.
2022-Jul-08 02:19:46.877770 [ 1776] [INF] [event-processor] Accumulate event because of not connected to server (39 events pending)
2022-Jul-08 02:19:46.877770 [ 1776] [INF] [event-processor] Starting timer (39 events pending)
2022-Jul-08 02:19:47.700852 [ 1776] [INF] [es-client] [TextProto/Client/A2S/Session] <unbound>: there is an error in previous connection, will try next server if it is
2022-Jul-08 02:19:48.201902 [ 1768] [INF] [es-client] [TextProto/Client/A2S/Session] Connected to "tcp://192.168.0.18:2193"
2022-Jul-08 02:19:50.916173 [ 1768] [INF] [reconnector] New credentials from server: id = 98f358b0-32f2-11e9-5d47-7cbb114c3caa
2022-Jul-08 02:19:51.096191 [ 1764] [INF] [reconnector] ES connected to 192.168.0.18:2193 'connected successfully'
2022-Jul-08 02:19:51.596241 [ 1764] [INF] [components] on_connected
2022-Jul-08 02:19:51.596241 [ 1764] [INF] [event-processor] Flush events on connect (39 events pending)
2022-Jul-08 02:19:51.596241 [ 1768] [INF] [reconnector] request settings for 4
2022-Jul-08 02:19:51.596241 [ 1768] [INF] [reconnector] request settings for 14
2022-Jul-08 02:19:51.597241 [ 1764] [INF] [reboot-manager] notify es of no restart required
2022-Jul-08 02:19:51.597241 [ 1764] [INF] [VdbCache] wait ANF_STATE for send vdb info
2022-Jul-08 02:19:51.597241 [ 1780] [INF] [components] Scanner (4) changed state to unknown
2022-Jul-08 02:19:51.597241 [ 1780] [INF] [components] NetFilterMail (14) changed state to started
2022-Jul-08 02:19:51.597241 [ 1764] [INF] [Scheduler] Need schedule cause connect
2022-Jul-08 02:19:51.597241 [ 1764] [INF] [Scheduler] Get schedule request
2022-Jul-08 02:19:51.598242 [ 1768] [INF] [reconnector] request settings for 30
2022-Jul-08 02:19:51.598242 [ 4952] [INF] [quarantine] Quarantine digest calculation started
2022-Jul-08 02:19:51.598242 [ 1768] [INF] [reconnector] request settings for 38
2022-Jul-08 02:19:51.598242 [ 1768] [INF] [reconnector] request settings for 54
2022-Jul-08 02:19:51.598242 [ 1768] [INF] [reconnector] request settings for 57
2022-Jul-08 02:19:51.598242 [ 1768] [INF] [reconnector] request settings for 103
2022-Jul-08 02:19:51.599242 [ 1768] [INF] [reconnector] request settings for 124
2022-Jul-08 02:19:51.599242 [ 1768] [INF] [reconnector] request settings for 144
2022-Jul-08 02:19:51.599242 [ 1768] [INF] [reconnector] request settings for 145
2022-Jul-08 02:19:51.599242 [ 1768] [INF] [reconnector] request settings for 149
2022-Jul-08 02:19:51.599242 [ 1764] [INF] [esloader] Connected to es server
2022-Jul-08 02:19:51.599242 [ 1764] [INF] [esloader] Update products-revisions map
2022-Jul-08 02:19:51.599242 [ 1764] [INF] [esloader]  ESproduct = 10-drwbases; revision = 130'20220707192831
2022-Jul-08 02:19:51.599242 [ 1764] [INF] [esloader]  ESproduct = 10-drwgatedb; revision = 130'20220311094223
2022-Jul-08 02:19:51.599242 [ 1764] [INF] [esloader]  ESproduct = 10-drwspamdb; revision = 130'20220311093541
2022-Jul-08 02:19:51.599242 [ 1764] [INF] [esloader]  ESproduct = 20-drwagent; revision = 130'20220311082201
2022-Jul-08 02:19:51.599242 [ 1764] [INF] [esloader] Sending ANF_STATE to server ...
2022-Jul-08 02:19:51.599242 [ 1768] [INF] [reconnector] request settings for 154
2022-Jul-08 02:19:51.599242 [ 1768] [INF] [reconnector] request settings for 156
2022-Jul-08 02:19:51.600242 [ 1764] [INF] [esloader]  EsProduct = 10-drwbases ; revision = 13020220707192831; state = S; force_update = no
2022-Jul-08 02:19:51.600242 [ 1764] [INF] [esloader]  EsProduct = 10-drwgatedb; revision = 13020220311094223; state = S; force_update = no
2022-Jul-08 02:19:51.600242 [ 1764] [INF] [esloader]  EsProduct = 10-drwspamdb; revision = 13020220311093541; state = S; force_update = no
2022-Jul-08 02:19:51.600242 [ 1764] [INF] [esloader]  EsProduct = 20-drwagent ; revision = 13020220311082201; state = S; force_update = no
2022-Jul-08 02:19:51.600242 [ 1764] [INF] [VdbCache] send vdb info after ANF_STATE
2022-Jul-08 02:19:51.619244 [ 1776] [INF] [reconnector] New Rights
2022-Jul-08 02:19:51.654247 [ 4952] [INF] [quarantine] Quarantine digest sent
2022-Jul-08 02:19:51.654247 [ 4952] [INF] [quarantine] Quarantine digest calculation finished
2022-Jul-08 02:19:51.672249 [ 1780] [INF] [components] AvService (30) changed state to started
2022-Jul-08 02:19:51.731255 [ 1780] [INF] [components] EScanner (37) changed state to unknown
2022-Jul-08 02:19:51.731255 [ 1780] [INF] [components] NetFilterHttp (38) changed state to started
2022-Jul-08 02:19:51.781260 [ 1768] [INF] [config] Rewrite es default connection settings
2022-Jul-08 02:19:51.785260 [ 1768] [INF] [config] Rewrite es default connection settings
2022-Jul-08 02:19:51.806262 [ 1780] [INF] [components] NetFilterParentalControl (54) changed state to started
2022-Jul-08 02:19:52.011283 [ 1780] [INF] [components] SpamFilter (55) changed state to unknown
2022-Jul-08 02:19:52.012283 [ 1780] [INF] [components] SpIDerGuardG3 (57) changed state to started
2022-Jul-08 02:19:52.222304 [ 1780] [INF] [components] OutlookPlugin (103) changed state to started
2022-Jul-08 02:19:52.431325 [ 1780] [INF] [components] DwProt (124) changed state to started
2022-Jul-08 02:19:52.466328 [ 1780] [INF] [components] PreventiveProtection (144) changed state to started
2022-Jul-08 02:19:52.640346 [ 1780] [INF] [components] Appcontrol (154) changed state to started
2022-Jul-08 02:19:52.903372 [ 1780] [INF] [components] MeshClient (156) changed state to paused
2022-Jul-08 02:19:52.988381 [ 1780] [INF] [components] process installed components
2022-Jul-08 02:19:53.025384 [ 1780] [INF] [components] comp: Scanner, date: 20210207190347000(1612724627)
2022-Jul-08 02:19:53.068389 [ 1780] [INF] [components] comp: NetFilterMail, date: 20210207190347000(1612724627)
2022-Jul-08 02:19:53.207402 [ 1780] [INF] [components] comp: AvService, date: 20210207190344000(1612724624)
2022-Jul-08 02:19:53.379420 [ 1780] [INF] [components] comp: EScanner, date: 20210207190344000
2022-Jul-08 02:19:53.458428 [ 1780] [INF] [components] comp: Appcontrol, date: 20210207190344000
2022-Jul-08 02:19:53.687450 [ 1780] [INF] [components] comp: MeshClient, date: 20210207190344000
2022-Jul-08 02:19:53.749457 [ 1780] [INF] [components] comp: NetFilterHttp, date: 20210207190344000(1612724624)
2022-Jul-08 02:19:53.969479 [ 1780] [INF] [components] comp: NetFilterParentalControl, date: 20210207190347000(1612724627)
2022-Jul-08 02:19:54.047486 [ 1780] [INF] [components] comp: SpamFilter, date: 20210207190342000(1612724622)
2022-Jul-08 02:19:54.094491 [ 1780] [INF] [components] comp: SpIDerGuardG3, date: 20210207190347000(1612724627)
2022-Jul-08 02:19:54.370519 [ 1780] [INF] [components] comp: OutlookPlugin, date: 20210207190347000(1612724627)
2022-Jul-08 02:19:54.482530 [ 1780] [INF] [components] comp: DwProt, date: 20210207190348000(1612724628)
2022-Jul-08 02:19:54.685550 [ 1780] [INF] [components] comp: PreventiveProtection, date: 20201105142739000(1604586459)
2022-Jul-08 02:20:01.602242 [ 1760] [INF] [devices] Send device tree on server (58 groups, 218 devices)
2022-Jul-08 02:20:09.533035 [ 1768] [INF] [esupdate] Recieve new policies.
2022-Jul-08 02:20:09.533035 [ 1760] [INF] [esupdate] Processing policies.
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] Run changing policies (change composition of components)
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] Product = Bases                     Revision = 20220707192831
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] Product = DrWebAgent                Revision = 20220311082201
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] Product = DrWebEsAgent              Revision = 20220311082201
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] Product = DrwBase                   Revision = 20220707192831
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] Product = DwsNetFilter              Revision = 20220311094223
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] Product = DwsParentalControl        Revision = 20220311094223
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] Product = ESAgentSetup              Revision = 20220311082201
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] Product = NetFilterHttp             Revision = 20220311082201
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] Product = NetFilterMail             Revision = 20220311082201
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] Product = NetFilterParentalControl  Revision = 20220311082201
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] Product = OutlookPlugin             Revision = 20220311082201
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] Product = ScannerSE                 Revision = 20220311082201
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] Product = SpamFilterOutlook         Revision = 20220311093541
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] Product = SpamFilterSpiderMail      Revision = 20220311093541
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] Product = SpiderG3Ws                Revision = 20220311082201
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] Product = Updater                   Revision = 20220311082201
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] new product policies:
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate] mesh mode is disable
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate]  Product = AVDAgentSetup             ( EsId =  503) CANNOT be installed! (0) (not suitable type)
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate]  Product = AntispamForExchangePlugin ( EsId =   55) MAY    be installed! (1) 
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate]  Product = AntispamForLotusPlugin    ( EsId =   55) MAY    be installed! (1) 
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate]  Product = Bases                     ( EsId =   30) MUST   be installed! (2) (installed)
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate]  Product = DrWebAgent                ( EsId =   30) MUST   be installed! (2) (installed)
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate]  Product = DrWebAvdAgent             ( EsId =   30) CANNOT be installed! (0) (not suitable type)
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate]  Product = DrWebEsAgent              ( EsId =   30) MUST   be installed! (2) (installed)
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate]  Product = DrwBase                   ( EsId =   30) MUST   be installed! (2) (installed)
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate]  Product = DwsNetFilter              ( EsId =   38) MAY    be installed! (1) (installed)
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate]  Product = DwsParentalControl        ( EsId =   54) MAY    be installed! (1) (installed)
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate]  Product = ESAgentSetup              ( EsId =  502) MUST   be installed! (2) (installed)
2022-Jul-08 02:20:09.534035 [ 1760] [INF] [esupdate]  Product = Firewall                  ( EsId =  105) MAY    be installed! (1) 
2022-Jul-08 02:20:09.535035 [ 1760] [INF] [esupdate]  Product = NetFilterHttp             ( EsId =   38) MAY    be installed! (1) (installed)
2022-Jul-08 02:20:09.535035 [ 1760] [INF] [esupdate]  Product = NetFilterMail             ( EsId =   14) MAY    be installed! (1) (installed)
2022-Jul-08 02:20:09.535035 [ 1760] [INF] [esupdate]  Product = NetFilterParentalControl  ( EsId =   54) MAY    be installed! (1) (installed)
2022-Jul-08 02:20:09.535035 [ 1760] [INF] [esupdate]  Product = OutlookPlugin             ( EsId =  103) MAY    be installed! (1) (installed)
2022-Jul-08 02:20:09.535035 [ 1760] [INF] [esupdate]  Product = ScannerSE                 ( EsId =    4) MAY    be installed! (1) (installed)
2022-Jul-08 02:20:09.535035 [ 1760] [INF] [esupdate]  Product = SpamFilterOutlook         ( EsId =   55) MAY    be installed! (1) (installed)
2022-Jul-08 02:20:09.535035 [ 1760] [INF] [esupdate]  Product = SpamFilterSpiderMail      ( EsId =   55) MAY    be installed! (1) (installed)
2022-Jul-08 02:20:09.535035 [ 1760] [INF] [esupdate]  Product = SpiderG3Ws                ( EsId =   57) MAY    be installed! (1) (installed)
2022-Jul-08 02:20:09.535035 [ 1760] [INF] [esupdate]  Product = Updater                   ( EsId =   30) MUST   be installed! (2) (installed)
2022-Jul-08 02:20:09.535035 [ 1760] [INF] [esupdate] nothing to change configuration
2022-Jul-08 02:20:09.535035 [ 1760] [INF] [esupdate] Run changing policies for proxy
2022-Jul-08 02:20:09.541036 [ 1760] [INF] [config] Rewrite es default connection settings
2022-Jul-08 02:20:12.217303 [ 1756] [INF] [Scheduler] SCHEDULE: 8 Action Class a566be50-2d6d-11e9-7a13-008b7a170eed 0 escan_job_t 0 Action Name a566be50-2d6d-11e9-7a13-008b7a170eed 0 Daily%Sscan 0 Action ScanMode a566be50-2d6d-11e9-7a13-008b7a170eed 0 ScanStartups%S1%SActionJokes%S2%SActionInfectedMail%S2%SMaxSizeToExtract%S524288%SRatioCheckThreshold%S1024%SScanNonet%S0%SScanIdle%S2%SActionDialers%S2%SActionInfectedBoot%S0%SScanHeuristic%S1%SActionHacktools%S2%SScanRootkit%S1%SActionAdware%S2%SActionInfectedContainer%S2%SScanRemovable%S0%SActionRiskware%S2%SIncurableFiles%S2%SActionInfectedArchive%S2%SMaxArchSize%S0%SScanShutdown%S0%SScanInteractive%S0%SScanMemory%S1%SInfectedFiles%S1%SCheckContainer%S1%SAutoAction%S0%SFollowSymbolicLinks%S0%SRebootMode%S0%SPauseOnBattery%S0%SCheckArchives%S1%SMaxArchLevel%S16%SMaxTimeMills%S0%SCheckEMailFiles%S1%SScanBoot%S1%SMaxCompressionRatio%S1000%SScanPriority%S50%SMaxEngineToUse%S0%SScanFixed%S1%SSuspiciousFiles%S2 0 Action ScanType a566be50-2d6d-11e9-7a13-008b7a170eed 0 full 0 Job State a566be50-2d6d-11e9-7a13-008b7a170eed 1 %Z 0 Time Class a566be50-2d6d-11e9-7a13-008b7a170eed 0 daily_job_t 0 Time Hour a566be50-2d6d-11e9-7a13-008b7a170eed 1 %Z 16 Time Minute a566be50-2d6d-11e9-7a13-008b7a170eed 1 %Z 0
2022-Jul-08 02:20:12.217303 [ 1756] [INF] [Scheduler] Restart enterprise scheduler
2022-Jul-08 02:20:12.217303 [ 1756] [INF] [Scheduler] Skipping disabled job with id a566be50-2d6d-11e9-7a13-008b7a170eed
2022-Jul-08 02:20:12.218303 [ 1756] [INF] [Scheduler] starting scheduler, now: 2022-Jul-08 02:20:12
2022-Jul-08 02:20:12.229304 [ 1752] [INF] [es-config] Apply for user S-1-5-21-2618070825-667055464-2655873035-1120 common settings
2022-Jul-08 02:20:12.938375 [ 1756] [INF] [config] Rewrite es default connection settings
2022-Jul-08 02:20:12.952377 [ 1760] [INF] [quarantine] Resync event
2022-Jul-08 02:20:12.953377 [ 4044] [INF] [quarantine] Quarantine sync started
2022-Jul-08 02:20:14.622544 [ 4044] [INF] [quarantine] Quarantine sync finished
2022-Jul-08 02:20:46.881769 [ 1776] [INF] [event-processor] Starting timer (0 events pending)
2022-Jul-08 02:21:46.885769 [ 1776] [INF] [event-processor] Starting timer (0 events pending)
2022-Jul-08 02:22:08.907971 [ 1772] [INF] [esupdate] Repo C:/ProgramData/Doctor Web/Updater/repo/ loaded successfully! 559 files!
2022-Jul-08 02:22:08.908971 [ 1780] [INF] [esloader] start downloading products: 10-drwbases; 10-drwgatedb; 10-drwspamdb; 20-drwagent; 
2022-Jul-08 02:22:08.911972 [ 1776] [INF] [esloader] Product: 10-drwbases. Current revision = 130'20220707192831. New revision = 130'20220707203820.
2022-Jul-08 02:22:08.913972 [ 1780] [INF] [esloader] Product: 10-drwgatedb. Current revision = 130'20220311094223. New revision = 130'20220707194533.
2022-Jul-08 02:22:08.913972 [ 1780] [INF] [esloader] Product: 10-drwspamdb. Current revision = 130'20220311093541. New revision = 130'20220707084015.
2022-Jul-08 02:22:08.917972 [ 1772] [INF] [esloader] Product: 20-drwagent. Current revision = 130'20220311082201. New revision = 130'20220707111549.
2022-Jul-08 02:22:09.894070 [ 1752] [INF] [esloader] Will be loaded 13 file(s) ( 18398696 byte(s) ) for product 10-drwbases
2022-Jul-08 02:22:09.894070 [ 1752] [INF] [esloader] Sending ARQ_UPDATE to server ...
2022-Jul-08 02:22:10.435124 [ 1756] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/av-engine/9/common/drwbase.db.lzma downloaded!
2022-Jul-08 02:22:10.449125 [ 1752] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/av-engine/9/script.lua.lzma downloaded!
2022-Jul-08 02:22:10.977178 [ 1752] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/drwbase/9/common/drwbase.db.lzma downloaded!
2022-Jul-08 02:22:10.993180 [ 1756] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/drwbase/9/revision.xml downloaded!
2022-Jul-08 02:22:11.028183 [ 1764] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/drwbase/9/script.lua.lzma downloaded!
2022-Jul-08 02:22:11.099190 [ 1756] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/av-engine/9/common/drw110bv.vdb.lzma downloaded!
2022-Jul-08 02:22:11.298210 [ 1764] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/av-engine/9/common/drw110c2.vdb.lzma downloaded!
2022-Jul-08 02:22:11.647245 [ 1752] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/av-engine/9/common/drw110c3.vdb.lzma downloaded!
2022-Jul-08 02:22:11.728253 [ 1772] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/av-engine/9/common/drwdaily.vdb.lzma downloaded!
2022-Jul-08 02:22:11.906271 [ 1772] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/av-engine/9/common/drweb32.dll.lzma downloaded!
2022-Jul-08 02:22:11.928273 [ 1756] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/av-engine/9/common/dwm11027.vdb.lzma downloaded!
2022-Jul-08 02:22:11.953276 [ 1780] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/av-engine/9/common/dwm11028.vdb.lzma downloaded!
2022-Jul-08 02:22:12.028283 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/av-engine/9/common/dwm11029.vdb.lzma downloaded!
2022-Jul-08 02:22:12.028283 [ 1768] [INF] [esloader] Download complete for Product = 10-drwbases. Revision = 130'20220707203820. Downloaded Size = 18398696
2022-Jul-08 02:22:13.018382 [ 1776] [INF] [esloader] Will be loaded 43 file(s) ( 48731090 byte(s) ) for product 10-drwgatedb
2022-Jul-08 02:22:13.018382 [ 1776] [INF] [esloader] Sending ARQ_UPDATE to server ...
2022-Jul-08 02:22:13.238404 [ 1756] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwffse00.dws.lzma downloaded!
2022-Jul-08 02:22:13.286409 [ 1776] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwffse01.dws.lzma downloaded!
2022-Jul-08 02:22:13.311411 [ 1764] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwffse02.dws.lzma downloaded!
2022-Jul-08 02:22:13.347415 [ 1780] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwffse03.dws.lzma downloaded!
2022-Jul-08 02:22:13.443425 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwffse04.dws.lzma downloaded!
2022-Jul-08 02:22:13.671447 [ 1752] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwffse05.dws.lzma downloaded!
2022-Jul-08 02:22:13.807461 [ 1772] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwffse07.dws.lzma downloaded!
2022-Jul-08 02:22:13.956476 [ 1756] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwffse08.dws.lzma downloaded!
2022-Jul-08 02:22:14.157496 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwffse09.dws.lzma downloaded!
2022-Jul-08 02:22:14.396520 [ 1756] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwffse10.dws.lzma downloaded!
2022-Jul-08 02:22:14.609541 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwffse11.dws.lzma downloaded!
2022-Jul-08 02:22:14.850565 [ 1780] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwffse12.dws.lzma downloaded!
2022-Jul-08 02:22:15.069587 [ 1780] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwffse13.dws.lzma downloaded!
2022-Jul-08 02:22:15.336614 [ 1756] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwffse14.dws.lzma downloaded!
2022-Jul-08 02:22:15.634644 [ 1752] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwffse16.dws.lzma downloaded!
2022-Jul-08 02:22:15.930673 [ 1780] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwffse17.dws.lzma downloaded!
2022-Jul-08 02:22:16.002681 [ 1752] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwffse18.dws.lzma downloaded!
2022-Jul-08 02:22:16.068687 [ 1776] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwffse_addon.dws.lzma downloaded!
2022-Jul-08 02:22:16.715752 [ 1756] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwfmlw03.dws.lzma downloaded!
2022-Jul-08 02:22:16.838764 [ 1756] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwfmlw05.dws.lzma downloaded!
2022-Jul-08 02:22:17.155796 [ 1764] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwfmlw10.dws.lzma downloaded!
2022-Jul-08 02:22:17.512832 [ 1772] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwfmlw11.dws.lzma downloaded!
2022-Jul-08 02:22:17.632844 [ 1772] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/dwfmlw12.dws.lzma downloaded!
2022-Jul-08 02:22:17.666847 [ 1780] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/white_dwffse.dws.lzma downloaded!
2022-Jul-08 02:22:17.732854 [ 1776] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-net-filter-http/9/common/white_dwfmlw.dws.lzma downloaded!
2022-Jul-08 02:22:17.832864 [ 1760] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-parental-control/9/common/dwfdrg00.dws.lzma downloaded!
2022-Jul-08 02:22:17.913872 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-parental-control/9/common/dwfgml20.dws.lzma downloaded!
2022-Jul-08 02:22:18.008881 [ 1772] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-parental-control/9/common/dwfheadhunters00.dws.lzma downloaded!
2022-Jul-08 02:22:18.023883 [ 1772] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-parental-control/9/common/dwfminers00.dws.lzma downloaded!
2022-Jul-08 02:22:18.041884 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-parental-control/9/common/dwfobs00.dws.lzma downloaded!
2022-Jul-08 02:22:18.057886 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-parental-control/9/common/dwfogm00.dws.lzma downloaded!
2022-Jul-08 02:22:18.360916 [ 1780] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-parental-control/9/common/dwfprn25.dws.lzma downloaded!
2022-Jul-08 02:22:18.473928 [ 1776] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-parental-control/9/common/dwfprn26.dws.lzma downloaded!
2022-Jul-08 02:22:18.508931 [ 1752] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-parental-control/9/common/dwfprn_addon.dws.lzma downloaded!
2022-Jul-08 02:22:18.575938 [ 1764] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-parental-control/9/common/dwfscl15.dws.lzma downloaded!
2022-Jul-08 02:22:18.625943 [ 1752] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-parental-control/9/common/dwfter00.dws.lzma downloaded!
2022-Jul-08 02:22:18.649945 [ 1776] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-parental-control/9/common/dwfvln01.dws.lzma downloaded!
2022-Jul-08 02:22:18.678948 [ 1776] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-parental-control/9/common/dwfwpn00.dws.lzma downloaded!
2022-Jul-08 02:22:18.694950 [ 1776] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-parental-control/9/common/white_dwfgml.dws.lzma downloaded!
2022-Jul-08 02:22:18.709951 [ 1776] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-parental-control/9/common/white_dwfobs.dws.lzma downloaded!
2022-Jul-08 02:22:18.722953 [ 1764] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-parental-control/9/common/white_dwfprn.dws.lzma downloaded!
2022-Jul-08 02:22:18.736954 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-parental-control/9/common/white_dwfwpn.dws.lzma downloaded!
2022-Jul-08 02:22:18.752956 [ 1776] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dws-parental-control/9/revision.xml downloaded!
2022-Jul-08 02:22:18.752956 [ 1776] [INF] [esloader] Download complete for Product = 10-drwgatedb. Revision = 130'20220707194533. Downloaded Size = 48731090
2022-Jul-08 02:22:18.859966 [ 1768] [INF] [esloader] Will be loaded 4 file(s) ( 13601065 byte(s) ) for product 10-drwspamdb
2022-Jul-08 02:22:18.859966 [ 1768] [INF] [esloader] Sending ARQ_UPDATE to server ...
2022-Jul-08 02:22:18.905971 [ 1764] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/antispam-revision.xml downloaded!
2022-Jul-08 02:22:20.284109 [ 1764] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/antispam/9/common/vrcpp.dll.lzma downloaded!
2022-Jul-08 02:22:20.296110 [ 1752] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/antispam/9/revision.xml downloaded!
2022-Jul-08 02:22:20.309111 [ 1764] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/antispam/9/script.lua.lzma downloaded!
2022-Jul-08 02:22:20.309111 [ 1764] [INF] [esloader] Download complete for Product = 10-drwspamdb. Revision = 130'20220707084015. Downloaded Size = 13601065
2022-Jul-08 02:22:21.826263 [ 1752] [INF] [esloader] Will be loaded 82 file(s) ( 45398803 byte(s) ) for product 20-drwagent
2022-Jul-08 02:22:21.826263 [ 1752] [INF] [esloader] Sending ARQ_UPDATE to server ...
2022-Jul-08 02:22:22.034284 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/amsi-plugin/9/revision.xml downloaded!
2022-Jul-08 02:22:22.046285 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/amsi-plugin/9/script.lua.lzma downloaded!
2022-Jul-08 02:22:22.282308 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/av-service/9/revision.xml downloaded!
2022-Jul-08 02:22:22.294310 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/av-service/9/script.lua.lzma downloaded!
2022-Jul-08 02:22:22.725353 [ 1764] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/av-service/9/x64/win/nt/common/dwservice.exe.lzma downloaded!
2022-Jul-08 02:22:22.737354 [ 1756] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/comps-revision.xml downloaded!
2022-Jul-08 02:22:22.750355 [ 1752] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/device-guard/9/revision.xml downloaded!
2022-Jul-08 02:22:22.762356 [ 1760] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/device-guard/9/script.lua.lzma downloaded!
2022-Jul-08 02:22:22.798360 [ 1752] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwl/9/common/ar-drweb.lng.lzma downloaded!
2022-Jul-08 02:22:22.813362 [ 1764] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwl/9/common/cn-drweb.lng.lzma downloaded!
2022-Jul-08 02:22:22.831363 [ 1760] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwl/9/common/de-drweb.lng.lzma downloaded!
2022-Jul-08 02:22:22.853366 [ 1772] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwl/9/common/es-drweb.lng.lzma downloaded!
2022-Jul-08 02:22:22.878368 [ 1756] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwl/9/common/et-drweb.lng.lzma downloaded!
2022-Jul-08 02:22:22.905371 [ 1764] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwl/9/common/fa-drweb.lng.lzma downloaded!
2022-Jul-08 02:22:22.924373 [ 1760] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwl/9/common/fr-drweb.lng.lzma downloaded!
2022-Jul-08 02:22:22.976378 [ 1780] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwl/9/common/it-drweb.lng.lzma downloaded!
2022-Jul-08 02:22:22.993380 [ 1764] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwl/9/common/ja-drweb.lng.lzma downloaded!
2022-Jul-08 02:22:23.009381 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwl/9/common/kk-drweb.lng.lzma downloaded!
2022-Jul-08 02:22:23.042384 [ 1764] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwl/9/common/lt-drweb.lng.lzma downloaded!
2022-Jul-08 02:22:23.058386 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwl/9/common/pl-drweb.lng.lzma downloaded!
2022-Jul-08 02:22:23.076388 [ 1764] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwl/9/common/pt-drweb.lng.lzma downloaded!
2022-Jul-08 02:22:23.100390 [ 1764] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwl/9/common/ru-drweb.lng.lzma downloaded!
2022-Jul-08 02:22:23.118392 [ 1752] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwl/9/common/tr-drweb.lng.lzma downloaded!
2022-Jul-08 02:22:23.135394 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwl/9/common/uk-drweb.lng.lzma downloaded!
2022-Jul-08 02:22:23.151395 [ 1752] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwl/9/common/zh-drweb.lng.lzma downloaded!
2022-Jul-08 02:22:23.184399 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwl/9/revision.xml downloaded!
2022-Jul-08 02:22:23.197400 [ 1752] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwprot/9/revision.xml downloaded!
2022-Jul-08 02:22:23.210401 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwprot/9/script.lua.lzma downloaded!
2022-Jul-08 02:22:23.274408 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/dwprot/9/x64/win/nt/common/dwprot.sys.lzma downloaded!
2022-Jul-08 02:22:23.290409 [ 1756] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/elam/9/revision.xml downloaded!
2022-Jul-08 02:22:23.307411 [ 1772] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/elam/9/script.lua.lzma downloaded!
2022-Jul-08 02:22:23.321412 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/es-components/9/revision.xml downloaded!
2022-Jul-08 02:22:23.334414 [ 1756] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/es-components/9/script.lua.lzma downloaded!
2022-Jul-08 02:22:23.355416 [ 1768] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/es-service/9/revision.xml downloaded!
2022-Jul-08 02:22:23.370417 [ 1756] [INF] [esloader] [writer] File C:/ProgramData/Doctor Web/Updater/TempES/90/es-service/9/script.lua.lzma downloaded!

Сообщение было изменено Zenw1e: 08 Июль 2022 - 00:40


#14 Kirill Polubelov

Kirill Polubelov

    Hr. Schreibikus

  • Dr.Web Staff
  • 4 347 Сообщений:

Отправлено 08 Июль 2022 - 12:30

Чуду хоть пиво поставьте )


(exit 0)


Читают тему: 0

0 пользователей, 0 гостей, 0 скрытых