Update tries to download same file over and over and over

Discussion in 'NOD32 version 2 Forum' started by nSpectre, Dec 28, 2007.

Thread Status:
Not open for further replies.
  1. nSpectre

    nSpectre Registered Member

    Joined:
    Mar 10, 2006
    Posts:
    7
    What does it mean when a brand new installation keeps trying to download the same file over and over? It gets most of the way through the download then switches to another server and starts downloading it all over again. Ad nauseum.

    I've seen it do this continously on ntbaseen.nup and on engine0.nup.

    http://www.trogalicious.com/misc/nod32_update_err.png

    Code:
    NOD32 antivirus system information
    Virus signature database version:	2257 (20070511)
    Dated:	Friday, May 11, 2007
    Virus signature database build:	9806
    
    Information on other scanner support parts
    Advanced heuristics module version:	1.057 (20070415)
    Advanced heuristics module build:	1151
    Internet filter version:	1.002 (20040708)
    Internet filter build:	1013
    Archive support module version:	1.052 (20070115)
    Archive support module build version:	1179
    
    Information about installed components
    NOD32 For Windows NT/2000/XP/2003/Vista/x64 - Administrative tools
    Version:	2.70.39
    NOD32 For Windows NT/2000/XP/2003/Vista/x64 - Base
    Version:	2.70.39
    NOD32 For Windows NT/2000/XP/2003/Vista/x64 - Internet support
    Version:	2.70.39
    NOD32 for Windows NT/2000/XP/2003/Vista/x64 - Standard component
    Version:	2.70.39
    
    Operating system information
    Platform:	Microsoft Windows 2000
    Version:	5.0.2195 Service Pack 4
    Version of common control components:	5.81.4968
    RAM:	1024 MB
    Processor:	Intel(R) Xeon(TM) CPU 2.20GHz (2192 MHz)
     
  2. proactivelover

    proactivelover Registered Member

    Joined:
    Apr 7, 2006
    Posts:
    840
    Location:
    Near Wilders Forums
    do you use networking connection
     
  3. ASpace

    ASpace Guest

  4. mlb

    mlb Registered Member

    Joined:
    Jan 29, 2004
    Posts:
    6
    I've seen it do this continously on ntbaseen.nup and on engine0.nup.

    I'm having the same problem a new installation, and there are temp files in both locations Nod just seems to be continually trying to up date but never finnishing, I left the internet connection open all night and still not finnished only need to download 8902kbs
     
    Last edited by a moderator: Dec 30, 2007
  5. nSpectre

    nSpectre Registered Member

    Joined:
    Mar 10, 2006
    Posts:
    7
    That all checks out fine. Shouldn't be any rights issues on the administrator account.

    Enterprise Edition (Windows and RA) - 25 User
     
  6. ASpace

    ASpace Guest

    You are entitled a free updated to ESET Antivirus 3.0 Business edition

    http://www.eset.com/products/nod32.php
    http://www.eset.com/products/nod32.php#biz

    http://www.eset.com/download/business.php

    Uninstall v2.7 and download EAV 3.0.621 Business . Install it and try to update it


    N.B. If you install 3.0 and make it provide updates , you should know that 3.0's updates are incompatiable with 2.7's so you must update all your 25 computers to v3 .

    If you don't want to upgrade to v3 , you can try to install LanUpdate edition on another computer in your network and make that computer update from the internet and all others from this one with the Mirror . This computer only needs to be visible to all other machines and to have internet access at least for 1-2 hours daily
     
  7. nSpectre

    nSpectre Registered Member

    Joined:
    Mar 10, 2006
    Posts:
    7
    Looking at things a bit closer:

    The root volume has 1.5 gigs of available space.
    D: (where NOD32 is installed) has 8 gigs available.

    As displayed in this image, the size of the file being downloaded may change. It is usually 10224KB, but may also be 18972KB, even from the same server.

    http://www.trogalicious.com/misc/nod32_err2.jpg

    Letting it run a while from random servers I see it first gets update.ver and then tried downloading ntbaseen.upd and it'll die in almost the same place each time:

    2098KB from an IP address
    2078KB from u45
    2089KB from u49
    2110KB from u48
    2107KB from an IP address
    No response from u30
    2089KB from u23

    It always fails right at 2 megs.

    Monitoring both TEMP folders, no temporary files appear when the download is initiated.

    However, In D:\ESET\updfiles I will see a randomly named file appear (image below) and its size will increase up to 2 megs, whereupon it will be deleted and a new randomly named file will appear as the download starts all over again.

    http://www.trogalicious.com/misc/nod32_err3.jpg
     
    Last edited: Jan 2, 2008
  8. nSpectre

    nSpectre Registered Member

    Joined:
    Mar 10, 2006
    Posts:
    7
    Not working.

    V3 installed (eavbe_nt32_enu.msi) but it looks like a stand-alone version. Even going into Advanced Config I don't see "I Am A Server"-type config options, such as setting it up for mirroring to clients, login credentials, etc.

    The remote admin console installed (era_console_nt32_enu.msi) but won't talk to the the server because the RA Server won't install:

    Installing the RA Server it appears to get to starting a service, pauses, then rolls back the installation and displays an error message. The log doesn't give much to go on:
    Code:
    [2008-01-03 16:14:53] Global setup flag ERA_SETUP_ACTIVE was enabled
    [2008-01-03 16:14:53] Setup exclusive lock <<ENABLED>>
    [2008-01-03 16:14:53] SetupInitialize: Entered (Initialize)
    [2008-01-03 16:14:53] MSI database: C:\Temp\era_server_nt32_enu.msi
    [2008-01-03 16:14:53] Installing product: ERA SERVER
    [2008-01-03 16:14:53] Current directory: C:\WINNT\system32
    [2008-01-03 16:14:53] Retrieving OS information...
    [2008-01-03 16:14:53] Windows 2000 Advanced Server Service Pack 4 (build 2195)
    [2008-01-03 16:14:53] Property TerminalServer = ""
    [2008-01-03 16:14:53] ProductCode: {MYCODE}
    [2008-01-03 16:14:53] UpgradeCode: {MYCODE}
    [2008-01-03 16:14:53] Local cache: (unavailable)
    [2008-01-03 16:14:53] Property Privileged is enabled
    [2008-01-03 16:14:53] Property MsiRunningElevated is disabled
    [2008-01-03 16:14:53] InitUserSidProperty: Entered
    [2008-01-03 16:14:53] User context: "MYDOMAIN\administrator"
    [2008-01-03 16:14:54] Current user is administrator
    [2008-01-03 16:14:54] User SID: MYSID
    [2008-01-03 16:14:54] Global setup flag ERA_SETUP_PROGRESS was enabled
    [2008-01-03 16:14:54] RetrieveVersionInfo
    [2008-01-03 16:14:54] Cannot open service [ERA_SERVER] (code=1060)
    [2008-01-03 16:14:54] Cannot open service [NOD32RA] (code=1060)
    [2008-01-03 16:14:54] Prior installation of RA server was not found
    [2008-01-03 16:14:54] Cannot detect prior version
    [2008-01-03 16:14:54] Current product version is 2.0.33
    [2008-01-03 16:14:55] CheckOdbc: Entered
    [2008-01-03 16:14:55] MS Access driver is present
    [2008-01-03 16:14:56] RetrieveMsiTexts: Entered
    [2008-01-03 16:14:58] PrepareXmlConfig: Entered
    [2008-01-03 16:14:59] ImportServerConfig
    [2008-01-03 16:15:00] LoadProperties: Entered
    [2008-01-03 16:15:00] LoadPropertiesFromXml: CfgFile=C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1\RADEFCFG.TMP
    [2008-01-03 16:15:00] LoadPropertiesFromXml: CfgFile=C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1\RAXMLCFG.TMP
    [2008-01-03 16:15:24] CheckLicKeyFile: Entered
    [2008-01-03 16:15:26] SelectFile: Entered
    [2008-01-03 16:15:29] SelectFile: D:\Temp\License.lic
    [2008-01-03 16:15:29] CheckLicKeyFile: Entered
    [2008-01-03 16:15:36] CheckLicKeyFile: Entered
    [2008-01-03 16:17:41] SetPwdValue: Entered
    [2008-01-03 16:17:41] Var=CFG_UPDATE_USER_PWD
    [2008-01-03 16:17:50] SaveProperties: Entered
    [2008-01-03 16:17:50] Saving properties to "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1\RAXMLCFG.TMP"
    [2008-01-03 16:17:51] SaveProperties: Done
    [2008-01-03 16:17:53] ExecuteBegin: Entered
    [2008-01-03 16:17:53] UI LEVEL  = "5"
    [2008-01-03 16:17:53] COMN DATA = "C:\Documents and Settings\All Users\Application Data\"
    [2008-01-03 16:17:53] APP DIR   = "D:\ESET\ESET Remote Administrator\Server\"
    [2008-01-03 16:17:53] Accessing global data via SID
    [2008-01-03 16:17:53] Account context: "MYDOMAIN\administrator"
    [2008-01-03 16:17:53] Current context has administrator privileges
    [2008-01-03 16:17:54] LogInstallInfo: AppDir=D:\ESET\ESET Remote Administrator\Server\
    [2008-01-03 16:17:54] LogInstallInfo: StorageDir=D:\ESET\ESET Remote Administrator\Server\storage\
    [2008-01-03 16:17:54] LogInstallInfo: DatabaseDir=D:\ESET\ESET Remote Administrator\Server\database\
    [2008-01-03 16:18:01] CopyLicKey: Entered
    [2008-01-03 16:18:01] Licence key (installed): C:\Documents and Settings\All Users\Application Data\ESET\ESET Remote Administrator\Server\license\License.lic
    [2008-01-03 16:18:01] Product: ESET Remote Administrator
    [2008-01-03 16:18:01] Customer: My Company, Inc.
    [2008-01-03 16:18:01] Valid to: 2/6/2008
    [2008-01-03 16:18:02] CreateCfgFiles: Entered
    [2008-01-03 16:18:02] CreateXmlCfg: C:\Documents and Settings\All Users\Application Data\ESET\ESET Remote Administrator\Server\configuration\era.xml
    [2008-01-03 16:18:02] CreateXmlCfg: C:\Documents and Settings\All Users\Application Data\ESET\ESET Remote Administrator\Server\configuration\era_private.xml
    [2008-01-03 16:18:02] CreateCfgFiles: Configuration successfully saved
    [2008-01-03 16:18:03] MigrateData: Entered
    [2008-01-03 16:18:05] Instaling services
    [2008-01-03 16:18:07] RunService: Entered
    [2008-01-03 16:18:07] Attempt to start no 1
    [2008-01-03 16:18:08] Starting service failed
    [2008-01-03 16:18:08] InstallAbort: Entered
    [2008-01-03 16:18:09] Installed file "C:\Documents and Settings\All Users\Application Data\ESET\ESET Remote Administrator\Server\license\License.lic" was deleted
    [2008-01-03 16:18:09] Installed file "C:\Documents and Settings\All Users\Application Data\ESET\ESET Remote Administrator\Server\configuration\era.xml" was deleted
    [2008-01-03 16:18:09] Installed file "C:\Documents and Settings\All Users\Application Data\ESET\ESET Remote Administrator\Server\configuration\era_private.xml" was deleted
    So where to now?


    Personally, I'd prefer to handle the actual v2.7 problem at hand, considering you have two customers in this one thread with the exact same problem and nothing in the knowledge-base addressing it.

    I'd like to save playing with the v3 product until ESET has had some time to iron out the wrinkles with this new version (and Yes, I know there are wrinkles. Even an ESET employee warned me off this version for a month or two.)
     
  9. mlb

    mlb Registered Member

    Joined:
    Jan 29, 2004
    Posts:
    6
    Nod did eventually update all 8019kb, that was yesterday and i checked by hitting the update and was give the not nessesary to up date as Nod is up to date...... BUT today i find it trying all over again all 8019kb............ It gets so far and starts all over again. tried Nod 3 earlier did'nt like it slowed my system down to much Could'nt get email... would like to perservere with 2.7 but, and i did clean all of 3 out even the registry
     
  10. nSpectre

    nSpectre Registered Member

    Joined:
    Mar 10, 2006
    Posts:
    7
    After installing v3, on multiple ocassions my users reported they were unable to access Sage Pro ERP, the main application hosted on this server with MS-SQL 2000.

    Upon inspection I find the server running incredibly slowly, taking in excess of 15 minutes for the admin to login. Once logged in, some functions run speedily, such as loading and using an MMC. But bringing up Windows Explorer took in excess of 10 minutes to display the drives. Then any drive or folder I clicked on took in excess of 5 minutes to complete the command. As far as I could tell, most disk access related functions were crippled in this manner.

    After uninstalling V3 the problem has disappeared.

    Next step?
     
  11. nSpectre

    nSpectre Registered Member

    Joined:
    Mar 10, 2006
    Posts:
    7
    I should probably note that while this problem was ocurring the application log was regularly being populated with the following two errors:
    Code:
    Event Type:	Error
    Event Source:	Userenv
    Event Category:	None
    Event ID:	1000
    Date:		1/4/2008
    Time:		1:20:43 PM
    User:		NT AUTHORITY\SYSTEM
    Computer:	GRIZZLY
    Description:
    Windows cannot access the file gpt.ini for GPO  The file must be present at the location <>. (). Group Policy processing aborted. 
    
    followed by
    
    Event Type:	Error
    Event Source:	Userenv
    Event Category:	None
    Event ID:	1000
    Date:		1/4/2008
    Time:		1:20:43 PM
    User:		NT AUTHORITY\SYSTEM
    Computer:	GRIZZLY
    Description:
    Windows cannot query for the list of Group Policy objects . A message that describes the reason for this was previously logged by this policy engine. 
    None of the solutions I researched for these log entries were applicable to this case.

    Upon un-installing V3 my log files are now clean.

    Hope that helps.
     
Thread Status:
Not open for further replies.