Event Log

Dr.Web registers the following information in the Windows Event Log:

•Plug-in starts and stops

•License key file parameters including validity, licensed period

•Parameters of the plug-in components including scanner, core, virus databases (information is registered when the plug-in starts or components are updated)

•License invalidity notifications if the license key file is missing, some of the plug-in components are not licensed, license is blocked or license key file is corrupted (information is registered when the plug-in checks the license)

•License expiration notifications (a message is registered in 30, 15, 7, 3, 2 and 1 days before expiration)

•Information on the malicious objects and spam detection (see the Notifications section)

Dr.Web events are registered in the Application and Doctor Web logs.

To view Event Log

1.On the Control Panel, double-click Administrative Tools and then double-click Event Viewer.

2.In the tree view, select Application (or Doctor Web).

3.The application Event Log displays in the right pane. The source for the plug-in events are the applications Dr.Web Scanning Engine, Dr.Web CMS, Dr.Web CMS Web Console, Dr.Web for MSP Scanning Service, Dr.Web for MSP Component Host and Dr.Web for MSP Requests Queue.

Redirect Dr.Web events

To redirect  Dr.Web events to the specified event log, do the following:

1.In Dr.Web CMS Web Console, select the DrWebScanSrv_1.0 -> Application Settings group.

2.Specify the name of a log where Dr.Web events will be registered as a value of the EventLog variable, for example, Doctor Web.

3.Restart Dr.Web for MSP Scanning Service.

4.Delete Dr.Web for Exchange Server event source from the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\application.

5.Restart the operating system.