PDA

View Full Version : DrWeb and loading Virus Base


TAG97
October 25th, 2002, 08:23 PM
I always found it annoying that SpIDer Guard from DrWeb would never load the Virus Base that one had just updated.I received this E-mail from Boris B Zhmurov which help a great deal. Here is part of it.
I ask if SpIDer Guard would detect a new virus that was just covered in the new Virus Base that I just downloaded? I always thought I had to reboot to load the new Virus Base.
Boris responded:
" Yes. SpIDer will catch new virus. But only in one hour. If You want,
that SpIDer load new bases faster, you may change parameter:

UpdatePeriod = 60m

in drweb32.ini. "60m" mean - 60 minutes. Change this parameter to "10m",
and SpIDer will load new bases after every 10 minutes."

I think DrWeb support is second to none. They respond in hours instead of days. And they respond in person :)
Thanks DrWeb and Boris B. Zhmurov :)
Regards
Tim

Scotcov
October 25th, 2002, 09:30 PM
Thanks for that post, Tag97. I too thought I had to reboot, and that has been my only complaint against this GREAT antivirus. And you're right about the support.

Scotcov

steve
October 25th, 2002, 09:53 PM
What if you don't have a file drweb32.ini. Do you just creat it and add the setting to it?

root
October 25th, 2002, 10:02 PM
Cool! Thanks for the info.

Scotcov
October 25th, 2002, 10:16 PM
Steve,
To the best of my knowledge you WILL have the DrWeb32.ini file. It will be in the main DrWeb directory.

steve
October 25th, 2002, 11:31 PM
-{ Quote: " quoting: Scotcov link=board=24;threadid=4428;start=0#28911 date=1035598575]
Steve,
To the best of my knowledge you WILL have the DrWeb32.ini file. It will be in the main DrWeb directory.
" }-
Not here, and if I create it and add the setting I get an error.

Scotcov
October 26th, 2002, 12:26 AM
I can't understand why you don't have the .ini file, since that's the configuration file. Maybe someone here can explain it.
In my .ini file it had "UpdatePeriod = 60". I changed it to "UpdatePeriod = 10m", and I too got an error after a reboot. I changed it to "UpdatePeriod = 10", and it works. Try leaving off the "m".

Scotcov

Technodrome
October 26th, 2002, 09:13 AM
If you download DrWeb32 from http://www.drweb.ru , during installation you will be asked for th base refreshing time!

If your configuration is working, you should have the drweb.ini file in DrWeb directory…


Technodrome

root
October 26th, 2002, 01:35 PM
Steve, do a search for Drweb32.ini. You have to have it or DrWeb wouldn't be working.

MickeyTheMan
October 26th, 2002, 04:41 PM
If you installed in default directory, then most likely it will be in your directory C:\Program Files\DrWeb for Windows

Even a search for drweb will bring the file up.

steve
October 26th, 2002, 08:52 PM
I swear, I don't have the file. I created it in the drweb directory, this time when I added the setting I left off the "m" and that solved the error problem. Since the only setting I have is the one I just added, is there anything else that needs to be in the .ini file? I'm not having any problems that I know of.

steve
October 26th, 2002, 08:57 PM
-{ Quote: " quoting: steve link=board=24;threadid=4428;start=0#29097 date=1035679967]
this time when I added the setting I left off the "m" and that solved the error problem.
" }-
I spoke too soon, I just tried to update and I get an error for invalid line in drweb32.ini for this setting UpdatePeriod = 10. Does it need quotes around that setting? Thanks.

LowWaterMark
October 26th, 2002, 09:09 PM
Perhaps someone with this file can post its contents here (as long as there's nothing in there that's private).

root
October 26th, 2002, 09:36 PM
Ok, here's the contents of the Drweb32.ini file. I don't see how his copy could work without it.

-------------------------------------------------------------------------
[Windows]
LngFileName = ""
FilesTypes = EXE,COM,DLL,SYS,VXD,OV?,BAT,BIN,DRV,PRG,BOO,SCR,CMD,386,FON,DO?
FilesTypes = XL?,WIZ,RTF,CL*,HT*,VB*,JS*,INF,PP?,OBJ,LIB,PIF,AR?,ZIP,R??,GZ
FilesTypes = Z,TGZ,TAR,TAZ,CAB,HLP,MD?,INI,MBR,IMG,CSC,CPL,MBP,SH,SHB,SHS,SHT*
FilesTypes = MSG,CHM,XML,PRC,ASP,LSP,MSO,OBD,THE*,EML,NWS,SWF,MPP,TBB
UserMasks = "*.EXE","*.COM","*.DLL","*.SYS","*.VXD","*.OV?","*.BAT","*.BIN"
UserMasks = "*.DRV","*.PRG","*.BOO","*.SCR","*.CMD","*.386","*.FON","*.DO?"
UserMasks = "*.XL?","*.WIZ","*.RTF","*.CL*","*.HT*","*.VB*","*.JS*","*.INF"
UserMasks = "*.PP?","*.OBJ","*.LIB","*.PIF","*.AR?","*.ZIP","*.R??","*.GZ"
UserMasks = "*.Z","*.TGZ","*.TAR","*.TAZ","*.CAB","*.HLP","*.MD?","*.INI"
UserMasks = "*.MBR","*.IMG","*.CSC","*.CPL","*.MBP","*.SH","*.SHB","*.SHS"
UserMasks = "*.SHT*","*.MSG","*.CHM","*.XML","*.PRC","*.ASP","*.LSP","*.MSO"
UserMasks = "*.OBD","*.THE*","*.EML","*.NWS","*.SWF","*.MPP","*.TBB"
ScanFiles = ByFormat
HeuristicAnalysis = Yes
CheckPackedFiles = Yes
CheckArchives = Yes
CheckEMailFiles = No
InfectedFiles = Cure
SuspiciousFiles = Report
IncurableFiles = Move
ActionInfectedArchive = Move
ActionInfectedMail = Report
ActionInfectedContainer = Report
RenameFilesTo = #??
MoveFilesTo = "infected.!!!"
ExcludePaths = "C:\Program Files\Diamond Computer Systems"
VirusBase = "*.vdb"
LogToFile = Yes
OverwriteLog = Yes
LogScanned = No
LogPacked = Yes
LogArchived = Yes
LogFileName = "Drweb32w.log"
LogFormat = ANSI
ShowProgressBar = Yes
ScanPriority = 25
TestMemory = Yes
TestStartup = Yes
AutoSaveSettings = Yes
ScanSubDirectories = Yes
TestBootSectors = Yes
PromptFloppy = Yes
PromptOnAction = Yes
PromptOnInfectedAction = Yes
PromptOnIncurableAction = Yes
PromptOnSuspiciousAction = Yes
PromptOnInfectedArchiveAction = Yes
PromptOnInfectedMailAction = Yes
PromptOnInfectedContainerAction = Yes
PlaySounds = Yes
UseDiskForSwap = Yes
AlertWav = "C:\Program Files\DrWeb\ALERT.WAV"
CuredWav = "cured.wav"
DeletedWav = "deleted.wav"
RenamedWav = "renamed.wav"
MovedWav = "moved.wav"
FinishWav = "finish.wav"
ErrorWav = "error.wav"
UpdateAllFiles = No
OnUpdateRun = ""
ScanFDD = No
ScanHDD = Yes
ScanCD = No
ScanNet = No
LimitLog = Yes
MaxLogSize = 1512
RestoreAccessDate = No
WaitAfterScan = No
LogStatistics = Yes
EnableDeleteArchiveAction = No

[SpIDerGuardNT]
LngFileName = ""
FilesTypes = EXE,COM,DLL,SYS,VXD,OV?,BAT,BIN,DRV,PRG,BOO,SCR,CMD,386,FON,DO?
FilesTypes = XL?,WIZ,RTF,CL*,HT*,VB*,JS*,INF,PP?,OBJ,LIB,PIF,AR?,ZIP,R??,GZ
FilesTypes = Z,TGZ,TAR,TAZ,CAB,HLP,MD?,INI,MBR,IMG,CSC,CPL,MBP,SH,SHB,SHS,SHT*
FilesTypes = MSG,CHM,XML,PRC,ASP,LSP,MSO,OBD,THE*,EML,NWS,SWF
UserMasks = "*.EXE","*.COM","*.DLL","*.SYS","*.VXD","*.OV?","*.BAT","*.BIN"
UserMasks = "*.DRV","*.PRG","*.BOO","*.SCR","*.CMD","*.386","*.FON","*.DO?"
UserMasks = "*.XL?","*.WIZ","*.RTF","*.CL*","*.HT*","*.VB*","*.JS*","*.INF"
UserMasks = "*.PP?","*.OBJ","*.LIB","*.PIF","*.AR?","*.ZIP","*.R??","*.GZ"
UserMasks = "*.Z","*.TGZ","*.TAR","*.TAZ","*.CAB","*.HLP","*.MD?","*.INI"
UserMasks = "*.MBR","*.IMG","*.CSC","*.CPL","*.MBP","*.SH","*.SHB","*.SHS"
UserMasks = "*.SHT*","*.MSG","*.CHM","*.XML","*.PRC","*.ASP","*.LSP","*.MSO"
UserMasks = "*.OBD","*.THE*","*.EML","*.NWS","*.SWF"
ScanFiles = All
HeuristicAnalysis = Yes
CheckPackedFiles = Yes
CheckArchives = No
CheckEMailFiles = No
InfectedFiles = Report
SuspiciousFiles = Report
IncurableFiles = Report
ActionInfectedArchive = Report
ActionInfectedMail = Rename
ActionInfectedContainer = Report
RenameFilesTo = #??
MoveFilesTo = "infected.!!!"
ExcludePaths =
VirusBase = "*.vdb"
LogToFile = Yes
OverwriteLog = Yes
LogScanned = No
LogPacked = Yes
LogArchived = Yes
LogFileName = "SpiderNT.log"
LogFormat = ANSI
TestMemory = Yes
PromptOnAction = Yes
PromptOnInfectedAction = Yes
PromptOnIncurableAction = Yes
PromptOnSuspiciousAction = Yes
PromptOnInfectedArchiveAction = Yes
PromptOnInfectedMailAction = Yes
PromptOnInfectedContainerAction = Yes
PlaySounds = Yes
UseDiskForSwap = Yes
LimitLog = Yes
MaxLogSize = 512
RestoreAccessDate = No
UpdateFlags = "drwtoday.vdb"
UpdatePeriod = 10
GuardMode = Smart
VirusActivityControl = Yes
ScanBootOnShutDown = Yes
DisableIDTHook = Yes
LogStatistics = Yes
Acknowledge = No
EnableDeleteArchiveAction = No

[DOS]
LngFileName=""

root
October 26th, 2002, 09:40 PM
Steve, I would get hold of DrWeb tech support and ask them what's going on. As you can see, the ini file contains the instructions for the program to work. I don't understand how you could have a functional copy of DrWeb without it.

steve
October 26th, 2002, 10:12 PM
-{ Quote: " quoting: root link=board=24;threadid=4428;start=0#29108 date=1035682817]
Steve, I would get hold of DrWeb tech support and ask them what's going on. As you can see, the ini file contains the instructions for the program to work. I don't understand how you could have a functional copy of DrWeb without it.
" }-
Thanks, I copied all the contents you posted and created the ini file again and now no errors are reported. Here's some info I just found in drweb32.txt

"The configuration settings are contained in DRWEB32.INI. This file is located
in the same directory as DrWeb32W and SpIDer programs. If the configuration
file is missing, the program will use default settings."

So that explains how it was still working, but doesn't explain why it wasn't there to begin with. Anyway, it's working fine now, I tested it and any changes I make in the UI get saved to the .ini. I feel better now. Thanks everyone for the help.

MickeyTheMan
October 26th, 2002, 10:52 PM
Very strange indeed.
I have renamed my drweb32.ini file.
After reboot and starting program, the file was re-created so still doesn't explain why it wasn't on your sys.

TAG97
November 2nd, 2002, 11:55 AM
Steve:
That file is also name :DrWeb32
Configuration settings
5KB