Kaspersky Anti-Virus 6.0 for Windows Servers Enterprise Edition MP2 (builds 6.0.2. [551-555])

Tracing of Kaspersky Anti-Virus 6.0 for Windows Servers Enterprise Edition can be enabled either via the Anti-Virus Console or via the command prompt. When enabling trace via the Anti-Virus Console you can set tracing for the defined Anti-Virus components. Trace run via the command prompt is enabled for all Anti-Virus components.

To enable tracing in the Anti-Virus Console right-click Kaspersky Anti-Virus node > go to Properties > the Malfunction diagnosis tab:

Tracing log for each Anti-Virus component is saved to its own file in the folder defined in the Folder for trace field

Remember that:

1. the folder to save the trace files should be created before the trace starts;

2. do not save the trace into the folder on the server network discs and on the discs created with the help of the SUBST command;

3. mind the register when listing the Anti-Virus subsystems for which the trace should be collected (Subsystems to be traced);

4. subsystems should be comma-separated if you define more that one subsystem;

5. when the debug file reaches its maximum size, the tracing is logged to a new file, the previous file is saved;

6. depending on the trace detailing level and the time of its record, the size of the generated files may take a lot of space on the disc. That is why before enabling the trace check free space on the disc;

7. do not let the enabled tracing process run long time – it may influence the server rate!

Codes of the Anti-Virus subsystems

Subsystem code	Subsystem name	When tracing starts
*	All components (default)
gui	User interface subsystem, Anti-Virus plug-in in MMC	After the Console restart
AK_conn	Subsystem for integrating NAgent and Kaspersky Administration Kit.	After the restart of the Administration Agent
bl	Control process, handles Anti-Virus control tasks	Immediately after the trace parameters have been saved
wp	Work process, handles anti-virus protection tasks
blgate	Process for remote administration of Anti-Virus
ods	On-demand scan subsystem
oas	Real-time file protection subsystem
qb	Quarantine and Backup subsystem
scandll	Auxiliary module for anti-virus scans
core	Subsystem for basic anti-virus functionality
avscan	Anti-Virus processing subsystem
avserv	Subsystem for controlling the anti-virus kernel
prague	Subsystem for basic functionality
scsrv	Subsystem for dispatching prompts regarding script interception
script	Script interceptor
updater	Subsystem for updating databases and program modules

The gui code enables tracing only of the Console installed on the protected server! To enable tracing of the remote Console a new key should be added to the system registry of the computer and the Console should be restarted: 

• Microsoft Windows 32-bit (download the ready reg-file for 32-bit OS):

[HKEY_LOCAL_MACHINE\Software\KasperskyLab\KAVFSEE\6.0\Trace\] Configuration=sub-system=gui;level=info;sink=folder(<full_path_to_the_folder_for_trace_files>);roll=50000;layout=basic;logging=on 

• Microsoft Windows 64-bit (download the ready reg-file for 64-bit OS):

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\KasperskyLab\KAVFSEE\6.0\Trace\] Configuration=sub-system=gui;level=info;sink=folder(<full_path_to_the_folder_for_trace_files>);roll=50000;layout=basic;logging=on

If you enable tracing with ready reg-files, the trace logs are saved to the folder C:\Temp.