Update tries to download same file over and over and over

What does it mean when a brand new installation keeps trying to download the same file over and over? It gets most of the way through the download then switches to another server and starts downloading it all over again. Ad nauseum.

I've seen it do this continously on ntbaseen.nup and on engine0.nup.

http://www.trogalicious.com/misc/nod32_update_err.png

Code:

NOD32 antivirus system information
Virus signature database version:	2257 (20070511)
Dated:	Friday, May 11, 2007
Virus signature database build:	9806

Information on other scanner support parts
Advanced heuristics module version:	1.057 (20070415)
Advanced heuristics module build:	1151
Internet filter version:	1.002 (20040708)
Internet filter build:	1013
Archive support module version:	1.052 (20070115)
Archive support module build version:	1179

Information about installed components
NOD32 For Windows NT/2000/XP/2003/Vista/x64 - Administrative tools
Version:	2.70.39
NOD32 For Windows NT/2000/XP/2003/Vista/x64 - Base
Version:	2.70.39
NOD32 For Windows NT/2000/XP/2003/Vista/x64 - Internet support
Version:	2.70.39
NOD32 for Windows NT/2000/XP/2003/Vista/x64 - Standard component
Version:	2.70.39

Operating system information
Platform:	Microsoft Windows 2000
Version:	5.0.2195 Service Pack 4
Version of common control components:	5.81.4968
RAM:	1024 MB
Processor:	Intel(R) Xeon(TM) CPU 2.20GHz (2192 MHz)

 

do you use networking connection

 

@nSpectre , you can try this:
https://www.wilderssecurity.com/showpost.php?p=863309

Your screenshot shows you are trying to download files needed for the Mirror of NOD32 . What kind of license do you use and how many machines it covers?

 

I've seen it do this continously on ntbaseen.nup and on engine0.nup.

I'm having the same problem a new installation, and there are temp files in both locations Nod just seems to be continually trying to up date but never finnishing, I left the internet connection open all night and still not finnished only need to download 8902kbs

 

That all checks out fine. Shouldn't be any rights issues on the administrator account.

Enterprise Edition (Windows and RA) - 25 User

 

You are entitled a free updated to ESET Antivirus 3.0 Business edition

http://www.eset.com/products/nod32.php
http://www.eset.com/products/nod32.php#biz

http://www.eset.com/download/business.php

Uninstall v2.7 and download EAV 3.0.621 Business . Install it and try to update it


N.B. If you install 3.0 and make it provide updates , you should know that 3.0's updates are incompatiable with 2.7's so you must update all your 25 computers to v3 .

If you don't want to upgrade to v3 , you can try to install LanUpdate edition on another computer in your network and make that computer update from the internet and all others from this one with the Mirror . This computer only needs to be visible to all other machines and to have internet access at least for 1-2 hours daily

 

Looking at things a bit closer:

The root volume has 1.5 gigs of available space.
D: (where NOD32 is installed) has 8 gigs available.

As displayed in this image, the size of the file being downloaded may change. It is usually 10224KB, but may also be 18972KB, even from the same server.

http://www.trogalicious.com/misc/nod32_err2.jpg

Letting it run a while from random servers I see it first gets update.ver and then tried downloading ntbaseen.upd and it'll die in almost the same place each time:

2098KB from an IP address
2078KB from u45
2089KB from u49
2110KB from u48
2107KB from an IP address
No response from u30
2089KB from u23

It always fails right at 2 megs.

Monitoring both TEMP folders, no temporary files appear when the download is initiated.

However, In D:\ESET\updfiles I will see a randomly named file appear (image below) and its size will increase up to 2 megs, whereupon it will be deleted and a new randomly named file will appear as the download starts all over again.

http://www.trogalicious.com/misc/nod32_err3.jpg

 

Not working.

V3 installed (eavbe_nt32_enu.msi) but it looks like a stand-alone version. Even going into Advanced Config I don't see "I Am A Server"-type config options, such as setting it up for mirroring to clients, login credentials, etc.

The remote admin console installed (era_console_nt32_enu.msi) but won't talk to the the server because the RA Server won't install:

Installing the RA Server it appears to get to starting a service, pauses, then rolls back the installation and displays an error message. The log doesn't give much to go on:

Code:

[2008-01-03 16:14:53] Global setup flag ERA_SETUP_ACTIVE was enabled
[2008-01-03 16:14:53] Setup exclusive lock <<ENABLED>>
[2008-01-03 16:14:53] SetupInitialize: Entered (Initialize)
[2008-01-03 16:14:53] MSI database: C:\Temp\era_server_nt32_enu.msi
[2008-01-03 16:14:53] Installing product: ERA SERVER
[2008-01-03 16:14:53] Current directory: C:\WINNT\system32
[2008-01-03 16:14:53] Retrieving OS information...
[2008-01-03 16:14:53] Windows 2000 Advanced Server Service Pack 4 (build 2195)
[2008-01-03 16:14:53] Property TerminalServer = ""
[2008-01-03 16:14:53] ProductCode: {MYCODE}
[2008-01-03 16:14:53] UpgradeCode: {MYCODE}
[2008-01-03 16:14:53] Local cache: (unavailable)
[2008-01-03 16:14:53] Property Privileged is enabled
[2008-01-03 16:14:53] Property MsiRunningElevated is disabled
[2008-01-03 16:14:53] InitUserSidProperty: Entered
[2008-01-03 16:14:53] User context: "MYDOMAIN\administrator"
[2008-01-03 16:14:54] Current user is administrator
[2008-01-03 16:14:54] User SID: MYSID
[2008-01-03 16:14:54] Global setup flag ERA_SETUP_PROGRESS was enabled
[2008-01-03 16:14:54] RetrieveVersionInfo
[2008-01-03 16:14:54] Cannot open service [ERA_SERVER] (code=1060)
[2008-01-03 16:14:54] Cannot open service [NOD32RA] (code=1060)
[2008-01-03 16:14:54] Prior installation of RA server was not found
[2008-01-03 16:14:54] Cannot detect prior version
[2008-01-03 16:14:54] Current product version is 2.0.33
[2008-01-03 16:14:55] CheckOdbc: Entered
[2008-01-03 16:14:55] MS Access driver is present
[2008-01-03 16:14:56] RetrieveMsiTexts: Entered
[2008-01-03 16:14:58] PrepareXmlConfig: Entered
[2008-01-03 16:14:59] ImportServerConfig
[2008-01-03 16:15:00] LoadProperties: Entered
[2008-01-03 16:15:00] LoadPropertiesFromXml: CfgFile=C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1\RADEFCFG.TMP
[2008-01-03 16:15:00] LoadPropertiesFromXml: CfgFile=C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1\RAXMLCFG.TMP
[2008-01-03 16:15:24] CheckLicKeyFile: Entered
[2008-01-03 16:15:26] SelectFile: Entered
[2008-01-03 16:15:29] SelectFile: D:\Temp\License.lic
[2008-01-03 16:15:29] CheckLicKeyFile: Entered
[2008-01-03 16:15:36] CheckLicKeyFile: Entered
[2008-01-03 16:17:41] SetPwdValue: Entered
[2008-01-03 16:17:41] Var=CFG_UPDATE_USER_PWD
[2008-01-03 16:17:50] SaveProperties: Entered
[2008-01-03 16:17:50] Saving properties to "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1\RAXMLCFG.TMP"
[2008-01-03 16:17:51] SaveProperties: Done
[2008-01-03 16:17:53] ExecuteBegin: Entered
[2008-01-03 16:17:53] UI LEVEL  = "5"
[2008-01-03 16:17:53] COMN DATA = "C:\Documents and Settings\All Users\Application Data\"
[2008-01-03 16:17:53] APP DIR   = "D:\ESET\ESET Remote Administrator\Server\"
[2008-01-03 16:17:53] Accessing global data via SID
[2008-01-03 16:17:53] Account context: "MYDOMAIN\administrator"
[2008-01-03 16:17:53] Current context has administrator privileges
[2008-01-03 16:17:54] LogInstallInfo: AppDir=D:\ESET\ESET Remote Administrator\Server\
[2008-01-03 16:17:54] LogInstallInfo: StorageDir=D:\ESET\ESET Remote Administrator\Server\storage\
[2008-01-03 16:17:54] LogInstallInfo: DatabaseDir=D:\ESET\ESET Remote Administrator\Server\database\
[2008-01-03 16:18:01] CopyLicKey: Entered
[2008-01-03 16:18:01] Licence key (installed): C:\Documents and Settings\All Users\Application Data\ESET\ESET Remote Administrator\Server\license\License.lic
[2008-01-03 16:18:01] Product: ESET Remote Administrator
[2008-01-03 16:18:01] Customer: My Company, Inc.
[2008-01-03 16:18:01] Valid to: 2/6/2008
[2008-01-03 16:18:02] CreateCfgFiles: Entered
[2008-01-03 16:18:02] CreateXmlCfg: C:\Documents and Settings\All Users\Application Data\ESET\ESET Remote Administrator\Server\configuration\era.xml
[2008-01-03 16:18:02] CreateXmlCfg: C:\Documents and Settings\All Users\Application Data\ESET\ESET Remote Administrator\Server\configuration\era_private.xml
[2008-01-03 16:18:02] CreateCfgFiles: Configuration successfully saved
[2008-01-03 16:18:03] MigrateData: Entered
[2008-01-03 16:18:05] Instaling services
[2008-01-03 16:18:07] RunService: Entered
[2008-01-03 16:18:07] Attempt to start no 1
[2008-01-03 16:18:08] Starting service failed
[2008-01-03 16:18:08] InstallAbort: Entered
[2008-01-03 16:18:09] Installed file "C:\Documents and Settings\All Users\Application Data\ESET\ESET Remote Administrator\Server\license\License.lic" was deleted
[2008-01-03 16:18:09] Installed file "C:\Documents and Settings\All Users\Application Data\ESET\ESET Remote Administrator\Server\configuration\era.xml" was deleted
[2008-01-03 16:18:09] Installed file "C:\Documents and Settings\All Users\Application Data\ESET\ESET Remote Administrator\Server\configuration\era_private.xml" was deleted

So where to now?


Personally, I'd prefer to handle the actual v2.7 problem at hand, considering you have two customers in this one thread with the exact same problem and nothing in the knowledge-base addressing it.

I'd like to save playing with the v3 product until ESET has had some time to iron out the wrinkles with this new version (and Yes, I know there are wrinkles. Even an ESET employee warned me off this version for a month or two.)

 

Nod did eventually update all 8019kb, that was yesterday and i checked by hitting the update and was give the not nessesary to up date as Nod is up to date...... BUT today i find it trying all over again all 8019kb............ It gets so far and starts all over again. tried Nod 3 earlier did'nt like it slowed my system down to much Could'nt get email... would like to perservere with 2.7 but, and i did clean all of 3 out even the registry

 

After installing v3, on multiple ocassions my users reported they were unable to access Sage Pro ERP, the main application hosted on this server with MS-SQL 2000.

Upon inspection I find the server running incredibly slowly, taking in excess of 15 minutes for the admin to login. Once logged in, some functions run speedily, such as loading and using an MMC. But bringing up Windows Explorer took in excess of 10 minutes to display the drives. Then any drive or folder I clicked on took in excess of 5 minutes to complete the command. As far as I could tell, most disk access related functions were crippled in this manner.

After uninstalling V3 the problem has disappeared.

Next step?

 

I should probably note that while this problem was ocurring the application log was regularly being populated with the following two errors:

Code:

Event Type:	Error
Event Source:	Userenv
Event Category:	None
Event ID:	1000
Date:		1/4/2008
Time:		1:20:43 PM
User:		NT AUTHORITY\SYSTEM
Computer:	GRIZZLY
Description:
Windows cannot access the file gpt.ini for GPO  The file must be present at the location <>. (). Group Policy processing aborted. 

followed by

Event Type:	Error
Event Source:	Userenv
Event Category:	None
Event ID:	1000
Date:		1/4/2008
Time:		1:20:43 PM
User:		NT AUTHORITY\SYSTEM
Computer:	GRIZZLY
Description:
Windows cannot query for the list of Group Policy objects . A message that describes the reason for this was previously logged by this policy engine. 

None of the solutions I researched for these log entries were applicable to this case.

Upon un-installing V3 my log files are now clean.

Hope that helps.