

                   Doctor Web, Ltd.

                Dr.Web(R) for FreeBSD
          Updating programs and virus bases

                Administrator Manual

                    Version 4.33

====================================================================
The material published herein is the property of Doctor Web, Ltd.
and may not be reproduced in any form without written permission of
Doctor Web, Ltd. and proper attribution.

Dr.Web is a registered trademark of Doctor Web, Ltd.

Other product names mentioned herein are trademarks or registered
trademarks of their respective companies.

There might be further improvements and changes in the software not
described in this manual. The corrected and supplemented versions of
this manual are available at www.drweb.com.
====================================================================

(C) Doctor Web, Ltd., 2005
Russia, Moscow - Saint Petersburg
http://www.drweb.com/


          CONTENTS

1. INTRODUCTION    
2. UPDATING SCRIPT OF THE PROGRAM AND THE VIRUS BASES
  2.1. Running the updating script. Command line options
  2.2. Configuration file. Updating parameters
3. CONTACTS



                       1. INTRODUCTION

As any other antivirus package the Dr.Web antivirus requires regular
updating of the virus bases of the known viruses. This task is
implemented in the following way. The virus bases contain several
*.vdb files, representing separate parts of it. When new viruses
appear, small (of one or several Kb) files, which contain the base
fragments describing these viruses, are released.

The add-ons are files (uniform for all supported platforms) presented
as drwtoday.vdb (daily "hot" add-ons) and drwXXXXX.vdb (regular
updates, usually issued weekly). To add the add-on to the main virus
base place this file to /var/drweb/bases directory or to any
other directory specified in the configuration file.

Periodically (as brand new viruses and antivirus techniques appear),
new versions of the antivirus package containing the updated
algorithms, implemented in the virus kernel, are released.
Simultaneously, all released add-ons are brought together and the new
version is completed with the main updated base, bearing the
descriptions of all viruses known for the moment of their appearance.
Usually, when upgrading the package the succession of the bases 
is preserved, i.e. new bases can be linked up to the old kernel. This,
however, does not secure detection or curing of new viruses, as it
will require upgraded algorithms of the antivirus kernel.

Regular updating of the add-ons of package's virus bases predetermines
the following structure:

- drwebase.vdb - main base, received with the new version of the
  package;
- drwXXXXX.vdb - regular (weekly) virus bases updates;
- drwtoday.vdb - "hot" add-ons issued daily or several times a day.

The peculiarity of the installation of "hot" add-ons lies in the fact,
that during the interval between the regular (numbered) add-ons
release the drwtoday.vdb file is replenished with the new entries,
i.e. it should be installed instead of the previous file. When the
next regular add-on is released, all entries from this file are copied
to the regular add-on, the file itself gets cleaned (the drwtoday.vdb
file becomes clear of any entry of the base) is released.

Consequently, when updating the bases manually, you should install all
missing regular updates and after that write the "hot" add-on file
(instead of the previous file).

For automatic receipt and installation of the virus bases' add-ons you
should use a special script described in details below.


                     
          2. UPDATING SCRIPT OF THE PROGRAM AND THE VIRUS BASES

2.1. Running the updating script. Command line options

The script which automatically updates the program and the virus bases
is called update.pl and resides in the directory with executable
files. To run the script use the following command:

> /usr/local/drweb/update.pl [options]

The name and the location of the Dr.Web configuration file and of the
program's components (the scanner or the daemon) subject to updating
can be specified as the command line options.

NOTE. For the updating it is advisable to specify the program's
component when the daemon and the scanner have different version
numbers, or when they are installed into different directories. If
this option is no specified, the information from the configuration
file is used (read below).

At present, two versions of the command line options formats of the
updating script are supported. In first version (elder) only one
option can be specified (unnamed) - full name of the program's
configuration file. In second version (newer) the following options
can be specified in any order (or any of them):

--ini=configuration_file__full_name

--what=component_for_updating

If the configuration filename is not specified,
/usr/local/etc/drweb/drweb32.ini is used. The scanner or the daemon can
be specified as the component for updaing.

The updating is made in the following way:

- The script reads the ini-file.

- The following parameters are read from the ini-file:
  
  EnginePath (serves both to determine the daemon's version and to
     specify the directory the received file drweb32.dll is placed to),

  VirusBase (the first mask of this parameter specifies where the
     received bases will be placed to),

  UpdatePath (the location of all other received files),

  PidFile (the drwebd process identifier used for the daemon's reload
     is read from this file),

  updating procedure parameters (should be specified in the [Updater]
     section, read below).

- The files are received and placed to the directories as it is
  described above (all files for the current Dr.Web version are
  accepted; if the sections of outdated versions are found in the
  add-on list, only *.vdb will be received).


2.2. Configuration file. Updating parameters

The configuration file is a text file (can be edited by any text
editor) that has the following arrangement:

--- Beginning of file ---
[Name of section 1]
Parameter1 = value1, ..., valueK
.....
ParameterM = value1, ..., valueK

......

[Name of section X]
Parameter1 = value1, ..., valueK
.....
ParameterY = value1, ..., valueK
--- end of file ---

If the line begins with ";" or "#", it is considered a line of
comments; such lines are skipped by the scanner when reading
parameters from the ini-file.

If some parameter of the scanner is not specified, this does not mean
the parameter has no value, - the default value will be used (a common
mistake when setting the scanner up). Only some parameters are
optional or have no default values, which will be specially mentioned
below. The values can be included in brackets (they must be included
in brackets if contain blanks). Some parameters can have several
values, the "," (comma) plays the role of the separator; in the
parameter description it will be explicitly stated. If the values are
included in {} in the parameter value field in this description, it
means the parameter may take only one of these values.

Updating script settings section name - [Updater].

The parameters will be described as follows:

ParameterName = ParameterPseudoValue
        Parameter description
        May have or not several values
        Default value:
                {value | unspecified}

Parameters description in their sequence order in the configuration
file created when setting up the program.

Section = {Daemon | Scanner}
        Specifies the settings of a section to be used for
        determination of the program version, paths to virus bases,
        etc. The setting can be modified at the script launch by the
        --what= command line option.
        Default value:
                Daemon

CronSummary = {Yes | No}
        If Yes is specified, the updating script displays message on
        each session results in stdout. The mode can be used for
        notification of an administrator by email, if the script is
        run by the cron daemon.
        Default value:
                Yes

DrlFile = {path to a file}
        The path to a file containing list of accessible Dr.Web
        updating servers. The script selects the server for updating
        by random order from this list. This file is signed by
        Doctor Web, Ltd. and should not be modified by a user. If
        necessary, it is automatically corrected by the updating script.
        Default value:
                /var/drweb/bases/update.drl

ProgramPath = {path to file}
        The path to the daemon/scanner. It is used by the Dr.Web
        Updating System for getting the product version and API
        information of the installed binary.
        Default value:
                /usr/local/drweb/drwebd

SignedReader = {path to file}
        This program is used by the Dr.Web Updating System for
        reading signed files.
        Default value:
                /usr/local/drweb/read_signed

Below goes the description of the configuration file parameters used
by the updating script for managing the wget system utility.

Timeout = {number in seconds}
        Sets the --timeout parameter value of the wget utility. The
        value is actual for one download session, not for the whole
        updating procedure. The empty value or the absence of the
        parameter mean unspecified value of the timeout.
        Default value:
                30

ProxyLogin = {name}
        Sets the --proxy-user parameter value of the wget utility.
        Default value:
                empty (the proxy is not used)

ProxyPassword = {password}
        Sets the --proxy-passwd parameter value of the wget utility.
        Default value:
                empty

Below go the updating log settings.

LogFileName = {filename}
        Updating log filename.
        Default value:
                /var/drweb/log/updater.log

LogLevel = {Debug | Verbose | Info | Warning | Error}
        The log level degree.
        Default value:
                Verbose



                         3. CONTACTS

Dr.Web program gets constantly developed, for fresh updating
information and news please visit our site:
http://www.drweb.com

Marketing dept.:
http://buy.drweb.com
e-mail: sales@drweb.com

Support:
http://support.drweb.com
E-Mail: support@drweb.com

Please include following information in your problem report:

- full name and version of your unix distribution
- Dr.Web version that is logged during program start.
