Pastein: administrator@astra:~$ sudo journalctl --since "20 minutes ago" | grep -i drweb сен 27 15:38:48 astra systemd[1]: /lib/systemd/system/drweb-configd.service:12: PIDFile= references path below lega

Загрузка данных
administrator@astra:~$ sudo journalctl --since "20 minutes ago" | grep -i drweb 
сен 27 15:38:48 astra systemd[1]: /lib/systemd/system/drweb-configd.service:12: PIDFile= references path below legacy directory /var/run/, updating /var/run/drweb-configd.pid → /run/drweb-configd.pid; please update the unit file accordingly.
сен 27 15:38:51 astra systemd[1]: /lib/systemd/system/drweb-configd.service:12: PIDFile= references path below legacy directory /var/run/, updating /var/run/drweb-configd.pid → /run/drweb-configd.pid; please update the unit file accordingly.
сен 27 15:38:52 astra drweb-configd[873]: PID file "/var/run/drweb-configd.pid"
сен 27 15:38:52 astra drweb-configd[873]: License number 153665829, expires 2026-Nov-03 13:29:21
сен 27 15:38:52 astra drweb-configd[873]: ConfigD 11.1.29.2603152017
сен 27 15:38:52 astra audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=0:63:0:0 msg='unit=drweb-configd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
сен 27 15:38:55 astra drweb-update[1688]: Update 11.1.11.2604212330: Ready for service
сен 27 15:38:55 astra drweb-spider[1689]: LinuxSpider 11.1.6.2604212330
сен 27 15:38:55 astra audit[1690]: NETFILTER_CFG table=nat family=2 entries=0 op=xt_register pid=1690 subj=0:63:0:0 comm="drweb-firewall."
сен 27 15:38:55 astra audit[1690]: SYSCALL arch=c000003e syscall=55 success=yes exit=0 a0=d a1=0 a2=40 a3=654ce5d34580 items=0 ppid=873 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="drweb-firewall." exe="/opt/drweb.com/bin/drweb-firewall.real" subj=0:63:0:0 key=(null)
сен 27 15:38:55 astra audit: PROCTITLE proctitle="/opt/drweb.com/bin/drweb-firewall.real"
сен 27 15:38:55 astra audit[1690]: NETFILTER_CFG table=mangle family=2 entries=0 op=xt_register pid=1690 subj=0:63:0:0 comm="drweb-firewall."
сен 27 15:38:55 astra audit[1690]: SYSCALL arch=c000003e syscall=55 success=yes exit=0 a0=d a1=0 a2=40 a3=654ce5d47360 items=0 ppid=873 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="drweb-firewall." exe="/opt/drweb.com/bin/drweb-firewall.real" subj=0:63:0:0 key=(null)
сен 27 15:38:55 astra audit: PROCTITLE proctitle="/opt/drweb.com/bin/drweb-firewall.real"
сен 27 15:38:56 astra drweb-filecheck[3086]: FileCheck 11.1.14.2605081640
сен 27 15:38:56 astra audit[1690]: NETFILTER_CFG table=drweb-firewall:2 family=2 entries=1 op=nft_register_table pid=1690 subj=0:63:0:0 comm="drweb-firewall."
сен 27 15:38:56 astra audit[1690]: SYSCALL arch=c000003e syscall=46 success=yes exit=80 a0=f a1=7ffd8fd0f918 a2=0 a3=654ce5d04010 items=0 ppid=873 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="drweb-firewall." exe="/opt/drweb.com/bin/drweb-firewall.real" subj=0:63:0:0 key=(null)
сен 27 15:38:56 astra audit: PROCTITLE proctitle="/opt/drweb.com/bin/drweb-firewall.real"
сен 27 15:38:56 astra audit[1690]: NETFILTER_CFG table=drweb-firewall:3 family=2 entries=4 op=nft_register_chain pid=1690 subj=0:63:0:0 comm="drweb-firewall."
сен 27 15:38:56 astra audit[1690]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=f a1=7ffd8fd0f918 a2=0 a3=0 items=0 ppid=873 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="drweb-firewall." exe="/opt/drweb.com/bin/drweb-firewall.real" subj=0:63:0:0 key=(null)
сен 27 15:38:56 astra audit: PROCTITLE proctitle="/opt/drweb.com/bin/drweb-firewall.real"
сен 27 15:38:56 astra audit[1690]: NETFILTER_CFG table=drweb-firewall:4 family=2 entries=8 op=nft_register_rule pid=1690 subj=0:63:0:0 comm="drweb-firewall."
сен 27 15:38:56 astra audit[1690]: SYSCALL arch=c000003e syscall=46 success=yes exit=5324 a0=f a1=7ffd8fd0f918 a2=0 a3=76d5112caa30 items=0 ppid=873 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="drweb-firewall." exe="/opt/drweb.com/bin/drweb-firewall.real" subj=0:63:0:0 key=(null)
сен 27 15:38:56 astra audit: PROCTITLE proctitle="/opt/drweb.com/bin/drweb-firewall.real"
сен 27 15:38:56 astra audit[1690]: NETFILTER_CFG table=nat family=2 entries=5 op=xt_replace pid=1690 subj=0:63:0:0 comm="drweb-firewall."
сен 27 15:38:56 astra audit[1690]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=10 a1=0 a2=40 a3=654ce5d49730 items=0 ppid=873 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="drweb-firewall." exe="/opt/drweb.com/bin/drweb-firewall.real" subj=0:63:0:0 key=(null)
сен 27 15:38:56 astra audit: PROCTITLE proctitle="/opt/drweb.com/bin/drweb-firewall.real"
сен 27 15:38:56 astra drweb-firewall[1690]: Cannot uninstall local delivery route (table 100, metric 2147483647): NETLINK error received: No such process [system:3]
сен 27 15:38:56 astra drweb-firewall[1690]: Cannot uninstall local delivery routing policy (table 100, fwmark 1): NETLINK error received: No such file or directory [system:2]
сен 27 15:38:56 astra drweb-firewall[1690]: LinuxFirewall 11.1.9.2606091444: Ready for service
сен 27 15:38:56 astra drweb-se[3229]: ScanEngine 11.1.15.2512261534
сен 27 15:38:56 astra drweb-se[3229]: Core engine 7.00.76.08280 (700) API 2.2, shell API 2.2
сен 27 15:38:56 astra drweb-se[3229]: Core engine with shared bases support
сен 27 15:38:56 astra drweb-se[3229]: Loading bases from /var/opt/drweb.com/bases
сен 27 15:38:56 astra drweb-se[3229]: drw11020.vdb 11.00 8477d4518100edfd76e3c66fd8da439b 2026/05/04 09:08,  106535 records
сен 27 15:38:57 astra drweb-se[3229]: drw11007.vdb 11.00 a1a12854172f2fb207bdb7083cc005ee 2024/06/03 13:01, 1289673 records
сен 27 15:38:57 astra drweb-se[3229]: drw11000.vdb 11.00 b14a7ac037620aa86c0912b25eb7e53a 2016/04/01 07:00,  764486 records
сен 27 15:38:58 astra drweb-se[3229]: drw11008.vdb 11.00 2640f326b72d0c930d9e088c949f55e3 2024/06/03 13:01,  846833 records
сен 27 15:38:58 astra drweb-se[3229]: dwm11002.vdb 11.00 26cd02d52a1d60aca5b869a8ee24382e 2026/05/26 09:28,   13702 records
сен 27 15:38:58 astra drweb-se[3229]: drw11018.vdb 11.00 4e87579af5d5765034ccd04af92f8192 2026/03/02 15:40,   42520 records
сен 27 15:38:58 astra drweb-se[3229]: drw11012.vdb 11.00 7a867cffc5286d3806c71d7eef7191e8 2025/09/01 09:10,  175095 records
сен 27 15:38:58 astra drweb-se[3229]: drw11019.vdb 11.00 abe042d4079b6221c593bc2293a77cf8 2026/04/06 09:13,   63805 records
сен 27 15:38:58 astra drweb-se[3229]: drwrisky.vdb 11.00 adec5211ad537e6cbfd8fcfe17d90fc3 2016/04/01 04:00,   47915 records
сен 27 15:38:59 astra drweb-se[3229]: drw11006.vdb 11.00 d190660b9484e66f75a0674cda82df96 2024/06/03 13:00, 1448692 records
сен 27 15:38:59 astra drweb-se[3229]: dwr11000.vdb 11.00 386a880b78d40264782679e2dba925a9 2016/04/26 14:55,   27725 records
сен 27 15:38:59 astra drweb-se[3229]: dwntoday.vdb 11.00 80a6a6fb1ba81c0aaad2c1235dc14d04 2026/09/26 19:30,     700 records
сен 27 15:38:59 astra drweb-se[3229]: drw11009.vdb 11.00 425cfd60788f0778659b31bb0c6721c9 2024/06/03 13:01,  879821 records
сен 27 15:38:59 astra drweb-se[3229]: drw11016.vdb 11.00 3fe26b1b46ed0e2e5c815cde8ddd889d 2026/01/05 09:09,  170658 records
сен 27 15:38:59 astra drweb-se[3229]: drw11014.vdb 11.00 cb2aa546069421fab5fad53d19b4389c 2025/11/03 09:15,   71375 records
сен 27 15:38:59 astra drweb-se[3229]: dwn11000.vdb 11.00 07bbbf72d5c6f1f28b02fade72deb4e4 2016/04/26 14:45,   92327 records
сен 27 15:38:59 astra drweb-se[3229]: drw11002.vdb 11.00 dd053c96420b026d42767a8abf075f55 2016/04/01 09:00,  485414 records
сен 27 15:38:59 astra drweb-se[3229]: drw11011.vdb 11.00 a20cb8a64e82a48091b76606f20c4d86 2024/07/01 09:12,  330314 records
сен 27 15:38:59 astra drweb-se[3229]: drw11003.vdb 11.00 023a2b362d4939739b85526282738b2b 2016/04/01 10:00,  329923 records
сен 27 15:39:00 astra drweb-se[3229]: drw11024.vdb 11.00 ed5066ec2d51e6228624d24e0be7bced 2026/09/07 09:20,  165457 records
сен 27 15:39:00 astra drweb-se[3229]: dwm11000.vdb 11.00 31bf55e39dbeb4ecf2dd2af00a6cab99 2016/04/01 05:00,  267369 records
сен 27 15:39:00 astra drweb-se[3229]: drw11005.vdb 11.00 4449e9fb463aa467d4179d86993d02d9 2016/04/01 12:00,  679517 records
сен 27 15:39:00 astra drweb-se[3229]: drw11004.vdb 11.00 db110d9209e9f580603dd38f1c9ea8ee 2016/04/01 11:00,  934358 records
сен 27 15:39:00 astra drweb-se[3229]: dwp11000.vdb 11.00 4bc0d2a810057e547c8a45eb54cf32aa 2016/04/01 01:00,     739 records
сен 27 15:39:00 astra drweb-se[3229]: drwdaily.vdb 11.00 508858ae0f275c3f3c8c0a736a0d0aa5 2026/09/26 09:04,   35315 records
сен 27 15:39:00 astra drweb-se[3229]: dwmtoday.vdb 11.00 f2c5cd7c6b4c9f22c242b94205076b99 2026/09/26 19:30,    8933 records
сен 27 15:39:01 astra drweb-se[3229]: drw11001.vdb 11.00 e8fb1b8ac9a2f86093a784cabba5a026 2016/04/01 08:00,  874545 records
сен 27 15:39:01 astra drweb-se[3229]: drw11010.vdb 11.00 05baa4dc01b95f4f95480c75dc16f1c1 2024/06/03 13:02,  700461 records
сен 27 15:39:01 astra drweb-se[3229]: dwn11001.vdb 11.00 4feeae306e3dc89e9054ac776497d4a0 2025/12/08 09:29,    5722 records
сен 27 15:39:01 astra drweb-se[3229]: dwf11000.vdb 11.00 ee8eef163bd6c843036a452798461101 2024/06/03 13:03,   10340 records
сен 27 15:39:01 astra drweb-se[3229]: drwebase.vdb 11.00 ed098543f717de705a4cbf2af535b441 2016/04/01 06:00,  935362 records
сен 27 15:39:01 astra drweb-se[3229]: dwm11003.vdb 11.00 b779ec0d4fe7108826631a3314486926 2026/08/04 09:29,   12246 records
сен 27 15:39:01 astra drweb-se[3229]: drwnasty.vdb 11.00 726cf31c9ac77aa39aa22f6c35131581 2016/04/01 03:00,  128429 records
сен 27 15:39:01 astra drweb-se[3229]: drwtoday.vdb 11.00 7d5c907d3b705ca157911f8ba94f0adf 2026/09/26 19:29,    5085 records
сен 27 15:39:01 astra drweb-se[3229]: drw11023.vdb 11.00 9cc10eea83b153d83a70a4dca0838436 2026/08/03 09:13,  181283 records
сен 27 15:39:01 astra drweb-se[3229]: dwrtoday.vdb 11.00 9faf2c73f624f1d572ee84812b9a8bd8 2026/09/26 19:30,    2237 records
сен 27 15:39:01 astra drweb-se[3229]: drw11022.vdb 11.00 fc1dc46b3befb0a6187041e0a9e515b4 2026/07/06 09:10,   59729 records
сен 27 15:39:02 astra drweb-se[3229]: drw11015.vdb 11.00 2e0a708dc7c38486b68efa77c142ac64 2025/12/01 09:08,   87199 records
сен 27 15:39:02 astra drweb-se[3229]: drw11013.vdb 11.00 b3ab69fe3be1727d4bc4b4bc79db30be 2025/10/06 09:13,   59791 records
сен 27 15:39:02 astra drweb-se[3229]: drw11021.vdb 11.00 6b152664c7a250c23a11c2d620471783 2026/06/01 09:14,   56224 records
сен 27 15:39:02 astra drweb-se[3229]: drw11017.vdb 11.00 e0b444ce11b32b151dca74aed82e9d4c 2026/02/02 09:11,   66014 records
сен 27 15:39:02 astra drweb-se[3229]: dwm11001.vdb 11.00 ab0b97300ea28a39a8b260d9896e4445 2026/03/10 09:28,   31816 records
сен 27 15:39:02 astra drweb-se[3229]: Using 12495684 virus records in 42 loaded bases
сен 27 15:39:02 astra drweb-spider[1689]: Mode Fanotify
сен 27 15:39:02 astra drweb-update[1688]: Downloaded timestamp (10 bytes)
сен 27 15:39:03 astra drweb-update[1688]: Downloaded drwdaily.vdb (907722 bytes)
сен 27 15:39:05 astra drweb-update[1688]: Downloaded drwtoday.vdb (229544 bytes)
сен 27 15:39:06 astra drweb-update[1688]: Downloaded dwmtoday.vdb (361100 bytes)
сен 27 15:39:07 astra drweb-update[1688]: Downloaded dwntoday.vdb (27231 bytes)
сен 27 15:39:08 astra drweb-update[1688]: Downloaded dwrtoday.vdb (142125 bytes)
сен 27 15:39:09 astra drweb-update[1688]: Downloaded timestamp (10 bytes)
сен 27 15:39:10 astra drweb-update[1688]: Downloaded dwfdrg01.dws.lzma (657159 bytes)
сен 27 15:39:11 astra drweb-update[1688]: Downloaded dwffse_addon.dws.lzma (34639 bytes)
сен 27 15:39:12 astra drweb-update[1688]: Downloaded dwfgml73.dws.lzma (593783 bytes)
сен 27 15:39:13 astra drweb-update[1688]: Downloaded dwfmlw_addon.dws.lzma (21124 bytes)
сен 27 15:39:14 astra drweb-update[1688]: Downloaded white_dwffse.dws.lzma (202104 bytes)
сен 27 15:39:16 astra drweb-update[1688]: Downloaded white_dwfmlw.dws.lzma (419530 bytes)
сен 27 15:39:19 astra drweb-update[1688]: Downloaded kwa.kwo (2964760 bytes)
сен 27 15:39:19 astra drweb-update[1688]: All downloads finished
сен 27 15:39:19 astra drweb-configd[873]: Update: placed "/var/opt/drweb.com/bases/timestamp"
сен 27 15:39:19 astra drweb-configd[873]: Update: placed "/var/opt/drweb.com/bases/drwdaily.vdb"
сен 27 15:39:19 astra drweb-configd[873]: Update: placed "/var/opt/drweb.com/bases/drwtoday.vdb"
сен 27 15:39:19 astra drweb-configd[873]: Update: placed "/var/opt/drweb.com/bases/dwmtoday.vdb"
сен 27 15:39:19 astra drweb-configd[873]: Update: placed "/var/opt/drweb.com/bases/dwntoday.vdb"
сен 27 15:39:19 astra drweb-configd[873]: Update: placed "/var/opt/drweb.com/bases/dwrtoday.vdb"
сен 27 15:39:19 astra drweb-configd[873]: Update: placed "/var/opt/drweb.com/dws/timestamp"
сен 27 15:39:19 astra drweb-configd[873]: Update: placed "/var/opt/drweb.com/dws/dwfdrg01.dws"
сен 27 15:39:19 astra drweb-configd[873]: Update: placed "/var/opt/drweb.com/dws/dwffse_addon.dws"
сен 27 15:39:19 astra drweb-configd[873]: Update: placed "/var/opt/drweb.com/dws/dwfgml73.dws"
сен 27 15:39:19 astra drweb-configd[873]: Update: placed "/var/opt/drweb.com/dws/dwfmlw_addon.dws"
сен 27 15:39:19 astra drweb-configd[873]: Update: placed "/var/opt/drweb.com/dws/white_dwffse.dws"
сен 27 15:39:19 astra drweb-configd[873]: Update: placed "/var/opt/drweb.com/dws/white_dwfmlw.dws"
сен 27 15:39:19 astra drweb-configd[873]: Update: placed "/var/opt/drweb.com/antispam/kwa.kwo"
сен 27 15:39:19 astra drweb-configd[873]: Update: placed "/var/opt/drweb.com/drl/bases/version2.lst"
сен 27 15:39:19 astra drweb-configd[873]: Update: placed "/var/opt/drweb.com/drl/dws/version2.lst"
сен 27 15:39:19 astra drweb-configd[873]: Update: placed "/var/opt/drweb.com/drl/antispam/version2.lst"
сен 27 15:39:19 astra drweb-se[3229]: SIGHUP received, config will be ordered from ConfigD
сен 27 15:39:19 astra drweb-se[3229]: dwntoday.vdb 11.00 63fe309f8752d474255a93df7883a483 2026/09/27 14:31,     700 records
сен 27 15:39:19 astra drweb-se[3229]: drwdaily.vdb 11.00 c2878167736229af132d93d121ce55bf 2026/09/27 09:04,   38033 records
сен 27 15:39:19 astra drweb-se[3229]: dwmtoday.vdb 11.00 f0aca5340e529672a2a015ead104be78 2026/09/27 14:31,    8966 records
сен 27 15:39:19 astra drweb-se[3229]: drwtoday.vdb 11.00 29190f9da19fa2f642aebde4f9f02398 2026/09/27 14:30,    3578 records
сен 27 15:39:19 astra drweb-se[3229]: dwrtoday.vdb 11.00 419bbc351754883bb317b17b2fc828c9 2026/09/27 14:31,    2237 records
сен 27 15:39:19 astra drweb-se[3229]: After reload 12496928 virus records
сен 27 15:41:12 astra audit[3086]: SYSCALL arch=c000003e syscall=257 success=yes exit=23 a0=ffffff9c a1=5cc6042f4768 a2=800 a3=0 items=1 ppid=873 pid=3086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="drweb-filecheck" exe="/opt/drweb.com/bin/drweb-filecheck.real" subj=0:63:0:0 key="parsec-f"
сен 27 15:41:12 astra audit: PROCTITLE proctitle="/opt/drweb.com/bin/drweb-filecheck.real"
сен 27 15:41:13 astra drweb-filecheck[3086]: Scan #1: Proc traverse: canonical: No such file or directory [generic:2]: "/proc/3400/exe"
сен 27 15:41:13 astra drweb-filecheck[3086]: Scan #1: Proc traverse: open: No such file or directory [system:2]: "/proc/3400/maps"
сен 27 15:41:13 astra audit[3086]: SYSCALL arch=c000003e syscall=257 success=yes exit=27 a0=ffffff9c a1=5cc6042f4768 a2=800 a3=0 items=1 ppid=873 pid=3086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="drweb-filecheck" exe="/opt/drweb.com/bin/drweb-filecheck.real" subj=0:63:0:0 key="parsec-f"
сен 27 15:41:13 astra audit: PROCTITLE proctitle="/opt/drweb.com/bin/drweb-filecheck.real"
сен 27 15:41:13 astra audit[3086]: SYSCALL arch=c000003e syscall=257 success=yes exit=27 a0=ffffff9c a1=5cc6042f4768 a2=800 a3=0 items=1 ppid=873 pid=3086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="drweb-filecheck" exe="/opt/drweb.com/bin/drweb-filecheck.real" subj=0:63:0:0 key="parsec-f"
сен 27 15:41:13 astra audit: PROCTITLE proctitle="/opt/drweb.com/bin/drweb-filecheck.real"
сен 27 15:41:14 astra audit[3086]: SYSCALL arch=c000003e syscall=257 success=yes exit=45 a0=ffffff9c a1=5cc6042f4768 a2=800 a3=0 items=1 ppid=873 pid=3086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="drweb-filecheck" exe="/opt/drweb.com/bin/drweb-filecheck.real" subj=0:63:0:0 key="parsec-f"
сен 27 15:41:14 astra audit: PROCTITLE proctitle="/opt/drweb.com/bin/drweb-filecheck.real"
сен 27 15:41:27 astra drweb-filecheck[3086]: Threats: LinuxGUI-3732: "/home/administrator/Загрузки/eicar.com" - infected with EICAR Test File (NOT a Virus!)
сен 27 15:41:27 astra drweb-filecheck[3086]: Cure failed: Cannot be cured: "/home/administrator/Загрузки/eicar.com"
сен 27 15:41:27 astra drweb-filecheck[3086]: Quarantined: "/home/administrator/Загрузки/eicar.com"
сен 27 15:47:52 astra sudo[4006]: administrator : TTY=pts/0 ; PWD=/home/administrator ; USER=root ; COMMAND=/usr/bin/grep -i drweb /var/log/syslog
Больше возможностей при регистрации:
