[Global]
#eProtStateNormal = 0
#eProtStateWarn = 1
#eProtStateCrit = 2
#eVulnerabilityDetected = 0x01
#ePheashingDetected = 0x02
#eAttackBlocked = 0x04
#eAllTreated = 0x08
#eAntiSpamNeedTraining = 0x10
#eThreatsNeedReboot = 0x40
#eThreatsMalwareUntreated = 0x80
#eThreatsRiskwareUntreated = 0x100
#eOnBatteriesScanOff = 0x01
#eScanRunning = 0x02
#eTasksNotRunning = 0x08
#eTasksDisabled = 0x10
#eTasksMalfunction = 0x20
#eProtectionNotRunnig = 0x40
#eProtectionDisabled = 0x80
#eProtectionSafeMode = 0x100
#eProtectionNotInstalled = 0x200
; Product states
#ProdStateProductNews = 1
#ProdStateProductNotAutoRun = 2
#ProdStateProductAdminPolicy = 3
#ProdStateProductNotProtected = 4
#ProdStateTasksDisabledByPolicy = 5
#ProdStateProductIsBeta = 6
#ProdStateProductNeedRestart = 7
#ProdStateProductNoEula = 8
; License states
#ProdStateKeyTrial = 33
#ProdStateLicenseNotificationWarning = 34
#ProdStateKeyWillBeExpired = 35
#ProdStateKeyGracePeriod = 36
#ProdStateKeyAboutExpiration = 37
#ProdStateKeyExpired = 38
#ProdStateKeyTrialExpired = 39
#ProdStateKeyBlocked = 40
#ProdStateNoKeys = 41
#ProdStateKeyInvalid = 42
#ProdStateKeyLimited = 43
#ProdStateLicenseNotificationCritical = 44
#ProdStateKeyUpdateFailed = 45
#ProdStatePreinstalledCodeWaitActivationCritical = 46
#ProdStateKeySuspended = 47
#ProdStateKeyWaitReservedActivationCritical = 48
#ProdStateKeyReservedActivationProblem = 49
#ProdStateKeyInvalidReserveCode = 50
#ProdStateKeyWaitReservedActivationInfo = 51
#ProdStateLicenseNotificationInfo = 52
#ProdStatePreinstalledCodeWaitActivationInfo = 53
#ProdStatePreinstalledCodeActivationProblem = 54
; Protection state
#ProdStateFirewallBlockAll = 65
#ProdStateTasksNotRunning = 67
#ProdStateTasksDisabled = 68
#ProdStateTasksMalfunction = 69
#ProdStateProtectionNotRunning = 70
#ProdStateProtectionDisabled = 71
#ProdStateProtectionSafeMode = 72
#ProdStateProtectionNotInstalled = 73
#ProdStateHighRiskTasksNotRunning = 74
#ProdStateHighRiskTasksDisabled = 75
; Update state
#ProdStateUpdateNotAuto = 97
#ProdStateSomeBasesNeedUpdate = 98
#ProdStateBasesVeryOldGrace = 99
#ProdStateBasesVeryOld = 100
#ProdStateBasesOldGrace = 101
#ProdStateBasesOld = 102
#ProdStateUpdateNeedReboot = 103
#ProdStateBasesCorrupted = 104
#ProdStateBackupNoTasks = 110
#ProdStateBackupTaskNotFinished = 111
#ProdStateBackupTaskFailed = 112
#ProdStateBackupTaskRunning = 113
; Threats state
#ProdStateAntiSpamNeedTraining = 129
#ProdStateThreatsNeedReboot = 130
#ProdStateThreatsMalwareUntreated = 131
#ProdStateThreatsRiskwareUntreated = 132
#ProdStateThreatsSuspiciousUntreated = 133
; Parental control state
#ProdStateParctlNeverRun = 161
#ProdStateParctlNotRunning = 162
#ProdStateParctlNoPass = 163
#ProdStateMax = 224
#ProdStateSomeSkipped = 10000
#ProdStateAllOk = 0
ProductStateSeverity = s_ProdStateSeverity(nVal1)
GadgetProtectionStateText = s_ProdState_Threats(s_ProdStateSeverity(nVal1), nVal1)
$IsActiveGreenPeriod = ( $IsActiveKeyTrial && bindok("product.SupportCustom.GreenPeriod") && (product.LicInfo.LicUsageDays <= product.SupportCustom.GreenPeriod ) )
#eNotifySeverityCritical = 1
#eNotifySeverityError = 2
#eNotifySeverityImportant = 3
#eNotifySeverityNotImportant = 4
$NotifyEventSeverity = s_VerdictIcon2ProdStateSeverity(s_VerdictIcon(Verdict))
$IsBasesOk = (global.UpdateState <= #eUpdateNotAuto || f_isGracePeriodForUpdateState(global.UpdateState))
$DetectTypeEx = (DetectType == #DETYPE_VULNERABILITY ? f_VulnerUrl(DetectName) : ((ObjectType == #ObjectURL) ? capitalize(s_DetectTypeShort(DetectType)) : (DetectName ? DetectName : objfile(ObjectName))))
; ePasswordConfirmReason
#pwdc_CheckAlways = -1
#pwdc_OpenWindow = 0
#pwdc_SaveSettings = 1
#pwdc_StopTask = 2
#pwdc_Exit = 3
#pwdc_StopService = 4
#pwdc_Activate = 5
#pwdc_SaveStateAndSettings = 6
#pwdc_StartTask = 7
#pwdc_OpenBackup = 8
#pwdc_OpenConsole = 9
#pwdc_OpenParctl = 10
; f_GetTypeOfTime - ��������� �������, ��� ����������
#ePeriodDay = 0
#ePeriodWeek = 1
#ePeriodMonth = 2
#ePeriodYear = 3
$TreatIcon_High = "ObjectStatus,3"
$TreatIcon_Med = "ObjectStatus,2"
$TreatIcon_Inactive = "ObjectStatus,0"
$TreatIcon_Clean = "ObjectStatus,0"
$TreatIcon_Cured = "ObjectStatus,0"
$TreatIcon_CuredDelayed = "ObjectStatus,1"
$IsSandBoxNotification = (PID && PID != #PIDProduct && PID != #PIDSystem && f_isSandboxed(PID))
QBOperationError = s_QBOperationsError(OperationCode)
ProductEventSeverityText = s_ProductEventSeverityText(Severity) + ": "
; alert macro cAskObjectAction::Actions
#AlertActionActiveDetect = 0xf0804
#AlertActionDisinfect = 0xf0800
$AlertAppLink = (appID ? "" + s_AppName(appID) + "" : $UnknownApp)
$AlertImgPathLink = "" + objfile(sImagePath) + ""
$AlertAppInfoStruct = nDestPID > 0 ? f_ProcessInfo(nDestPID).Module : appInfo(@1)
; Please don't extend this heap of shit. Instead, specify #ACTION_ADD_EXCLUDE in ActionsAll
$ActionUseToExclude = s_IsUseableToExclude(TaskType) && (nActionID != #AlertActionActiveDetect)
$ActionNoEx = (TaskType == "pdm" && Action == #PDM2_ACTION_BLOCKED_APP_START)
$UseApplyToAll = !(ApplyToAll & #APPLYTOALL_NONE) && ($ActionNoEx || TaskType=="ods" || TaskType=="avs" || (TaskID!=#eTASK_AP && (nPID == 0 || DetectType!=#DETYPE_RISKWARE))) && (TaskType!="SW2") && (TaskType!="InstallKey")
$g_phish1 = (f_IsStateRunningOK(Web_Monitoring.state) && httpscan.HTTPSettings.UseAntiphishing)
$g_phish2 = (f_IsStateRunningOK(IM_Monitoring.state) && IM_Monitoring.UseAntiphishing)
$g_phish3 = (f_IsStateRunningOK(Anti_Spam.state) && Anti_Spam.UseAntiphishing)
$g_antiphishInstall = f_isInstalled("IM_Monitoring") || f_isInstalled("Web_Monitoring") || f_isInstalled("Anti_Spam")
;$g_antiphishAll = ($g_phish1 || !f_isInstalled("Web_Monitoring")) && ($g_phish2 || !f_isInstalled("IM_Monitoring")) && ($g_phish3 || !f_isInstalled("Anti_Spam")) && $g_antiphishInstall
$g_antiphishAll = (!f_isInstalled("Web_Monitoring") || $g_phish1) && (!f_isInstalled("IM_Monitoring") || $g_phish2) && (!f_isInstalled("Anti_Spam") || $g_phish3)
$g_antiphishAny = $g_phish1 || $g_phish2 || $g_phish3
#green = 1
#gray = 2
#red = 3
#warn = 4
#INV_EVENT_TYPE_FILE_OPEN = 1
#INV_EVENT_TYPE_FILE_CLOSE = 2
#INV_EVENT_TYPE_FILE_DELETE = 3
#INV_EVENT_TYPE_FILE_RENAME = 4
#INV_EVENT_TYPE_PROCESS_CREATE = 5
#INV_EVENT_TYPE_PROCESS_EXIT = 6
#INV_EVENT_TYPE_PROCESS_TERMINATE = 7
#INV_EVENT_TYPE_REGYSTRY_KEY_CREATE = 8
#INV_EVENT_TYPE_REGYSTRY_KEY_DELETE = 9
#INV_EVENT_TYPE_REGYSTRY_VALUE_SET = 10
#INV_EVENT_TYPE_REGYSTRY_VALUE_DELETE = 11
#INV_FLAG_CREATE = 0x1
#INV_FLAG_MODIFY = 0x2
$HasKsnInfo = UseKSN && f_isHipsGroup() && !s_HipsSelfAction(Action)
$AlertDialogAppInfo = dialog("AppRulesEdit", p_appID(appID), p_pid(nPID), p_image(sImagePath))
$PdmDriverObject = TaskType == "pdm" && 0 == nPID
$IsExactDetect = if(TaskType == "pdm", false, #DETDANGER_HIGH == DetectDanger)
; Warning! The following string contains special Unicode symbol, invisible in normal text.
; temporarily comment out to fix TFS bug #59256
;$LtrMark = ""
$LtrMark = ""
[f_isGracePeriodForUpdateState]
ret = (global.UpdateState & (#eBasesVeryOldGrace | #eBasesOldGrace))
[f_antiphishOnOff]
$l_phishWebFail = (Web_Monitoring.state == #StateFailed && httpscan.HTTPSettings.UseAntiphishing)
$l_phishIMFail = (IM_Monitoring.state == #StateFailed && IM_Monitoring.UseAntiphishing)
$l_phishASFail = (Anti_Spam.state == #StateFailed && Anti_Spam.UseAntiphishing)
$l_antiphishAllFail = ($l_phishWebFail || !f_isInstalled("Web_Monitoring")) && ($l_phishIMFail || !f_isInstalled("IM_Monitoring")) && ($l_phishASFail || !f_isInstalled("Anti_Spam"))
;$l_antiphishAllOff = (!($g_phish1) || !f_isInstalled("Web_Monitoring")) && (!($g_phish2) || !f_isInstalled("IM_Monitoring")) && (!($g_phish3) || !f_isInstalled("Anti_Spam"))
$l_antiphishAllOff = ((!$g_phish1) && (!$g_phish2) && (!$g_phish3))
ret = $l_antiphishAllFail ? #red : ($g_antiphishAll ? #green : ($l_antiphishAllOff ? #gray : #warn) )
[f_IsAntiphishStateRunning]
ret = var nState; nState = f_antiphishOnOff(); nState == #green || nState == #red
[s_EnableAntiPhishing]
#red = httpscan.HTTPSettings.UseAntiphishing = false;IM_Monitoring.UseAntiphishing = false;Anti_Spam.UseAntiphishing = false;enable(false, "IM_Monitoring"); enable(false,"Web_Monitoring"); enable(false,"Anti_Spam")
#green = httpscan.HTTPSettings.UseAntiphishing = false;IM_Monitoring.UseAntiphishing = false;Anti_Spam.UseAntiphishing = false
#warn = httpscan.HTTPSettings.UseAntiphishing = false;IM_Monitoring.UseAntiphishing = false;Anti_Spam.UseAntiphishing = false
#gray = httpscan.HTTPSettings.UseAntiphishing = true;IM_Monitoring.UseAntiphishing = true;Anti_Spam.UseAntiphishing = true;enable(true, "IM_Monitoring"); enable(true,"Web_Monitoring"); enable(true,"Anti_Spam")
def = @
[s_IsUseableToExclude]
pdm = s_PdmActionToExclude(Action)
oas
ods
avs = 0 != nPID && !($IsExactDetect)
SW2 = Action != #PDM2_ACTION_ROLLBACK
default = false
[s_PdmActionToExclude]
#PDM2_ACTION_ROLLBACK
#PDM2_ACTION_BLOCKED_APP_START
; in KIS2011 'Allow' add to excludes when Action == #evtDrvStart
#evtDrvStart = false
default = s_PdmEventToExclude(EventType)
[s_PdmEventToExclude]
; always no
#PDM2_EVENT_NEGATIVE_PID
#PDM2_EVENT_HIDDEN_OBJ = false
;always yes
#PDM2_EVENT_IRP_TABLE_CHANGED
#PDM2_EVENT_KEYLOGGER = true
;depends Action
default = 0 != nPID && DetectType==#DETYPE_RISKWARE
[s_VerdictPathMask]
pdm = AdditionalInfo
[s_VerdictIcon2ProdStateSeverity]
crit = #eProtStateCrit
med = #eProtStateWarn
def = #eProtStateNormal
[s_IsEventObjClickable]
#evtPrtStgAccess =
#evtUseBITS =
#evtUseDNS = 0
default = !Verdict
[s_TrayProductStateList]
#ProdStateProtectionDisabled
[s_ProductStateList]
#ProdStateProductNoEula
#ProdStateKeyBlocked
#ProdStateKeyInvalid
#ProdStateKeyLimited
#ProdStateKeyTrialExpired
#ProdStateKeyExpired
#ProdStateKeySuspended
#ProdStateKeyUpdateFailed
#ProdStateNoKeys
#ProdStatePreinstalledCodeActivationProblem
#ProdStatePreinstalledCodeWaitActivationCritical
#ProdStateKeyWaitReservedActivationCritical
#ProdStateKeyReservedActivationProblem
#ProdStateKeyInvalidReserveCode
#ProdStateThreatsNeedReboot
;#ProdStateProductAdminPolicy
#ProdStateThreatsMalwareUntreated
#ProdStateBasesCorrupted
#ProdStateBasesVeryOld
#ProdStateKeyAboutExpiration
#ProdStateLicenseNotificationCritical
#ProdStateKeyGracePeriod
#ProdStateTasksMalfunction
#ProdStateHighRiskTasksDisabled
#ProdStateHighRiskTasksNotRunning
#ProdStateProtectionNotRunning
#ProdStateProtectionDisabled
#ProdStateFirewallBlockAll
#ProdStateProductNotProtected
#ProdStateUpdateNeedReboot
#ProdStateProductNeedRestart
#ProdStateBasesOld
#ProdStateThreatsSuspiciousUntreated
#ProdStateThreatsRiskwareUntreated
#ProdStateTasksDisabled
#ProdStateTasksNotRunning
#ProdStateKeyWillBeExpired
#ProdStateLicenseNotificationWarning
#ProdStateBasesVeryOldGrace
#ProdStateBasesOldGrace
#ProdStateSomeBasesNeedUpdate
#ProdStateKeyWaitReservedActivationInfo
#ProdStateLicenseNotificationInfo
#ProdStatePreinstalledCodeWaitActivationInfo
#ProdStateKeyTrial
#ProdStateProductNotAutoRun
#ProdStateUpdateNotAuto
#ProdStateProtectionSafeMode
#ProdStateBackupTaskFailed
#ProdStateBackupTaskRunning
#ProdStateBackupTaskNotFinished
#ProdStateAntiSpamNeedTraining
#ProdStateProductIsBeta
#ProdStateBackupNoTasks
#ProdStateParctlNeverRun
#ProdStateParctlNotRunning
#ProdStateParctlNoPass
#ProdStateSomeSkipped
[s_ProductStateList_Threats]
#ProdStateThreatsMalwareUntreated
#ProdStateThreatsRiskwareUntreated
#ProdStateThreatsNeedReboot
[s_ProductProtectionStateList]
#ProdStateThreatsNeedReboot
#ProdStateThreatsMalwareUntreated
#ProdStateBasesCorrupted
#ProdStateBasesNotActual = !$IsBasesGreenPeriod
#ProdStateTasksMalfunction
#ProdStateHighRiskTasksDisabled
#ProdStateHighRiskTasksNotRunning
#ProdStateProtectionNotRunning
#ProdStateProtectionDisabled
#ProdStateFirewallBlockAll
#ProdStateProductNotProtected
#ProdStateUpdateNeedReboot
#ProdStateBasesOutOfDate = !$IsBasesGreenPeriod
#ProdStateThreatsRiskwareUntreated
#ProdStateTasksDisabled
#ProdStateTasksNotRunning
#ProdStateProductNotAutoRun
#ProdStateUpdateNotAuto
#ProdStateThreatsNeedFullScanAfterAD
#ProdStateThreatsNeedAVZCleanupAfterAD
#ProdStateProtectionSafeMode
#ProdStateBasesNotActual = $IsBasesGreenPeriod
#ProdStateBasesOutOfDate = $IsBasesGreenPeriod
#ProdStateAntiSpamNeedTraining
[s_ProductBackupStateList]
#ProdStateBackupNoTasks
#ProdStateBackupTaskNotFinished
#ProdStateBackupTaskFailed
#ProdStateBackupTaskRunning
[s_ProductParctlStateList]
#ProdStateParctlNeverRun
#ProdStateParctlNotRunning
#ProdStateParctlNoPass
[s_IsLicInvalidReason_NeedUpdate]
#ekirInvalidBlacklist
#ekirInconsistentUpdate = 1
default = 0
[s_ProductLinkText]
#ProdStateProductNoEula = $LinkAcceptEula
#ProdStateProductNeedRestart = $LinkRestartProduct
#ProdStateKeyBlocked = $LinkTechnicalSupport
#ProdStateKeyInvalid = s_IsLicInvalidReason_NeedUpdate(LicInfo.InvalidReason) ? if(f_isInstalled("Updater"), $LinkUpdateNow) : $LinkMoreDetails
#ProdStateKeyLimited = $LicenseManager
#ProdStateKeyTrialExpired
#ProdStateKeyExpired
#ProdStateNoKeys = $LinkActivate
#ProdStateKeySuspended
#ProdStateKeyUpdateFailed = $LinkUpdateSubsriptionStatus
#ProdStateProtectionSafeMode
#ProdStateThreatsNeedReboot
#ProdStateUpdateNeedReboot = if(product.Local, $LinkRestartComputer)
#ProdStateThreatsMalwareUntreated
#ProdStateThreatsSuspiciousUntreated
#ProdStateThreatsRiskwareUntreated = if(product.Local, $LinkMoreDetails)
#ProdStateProductNotProtected = $LinkProtect
#ProdStateProductNotAutoRun = $LinkAutoRun
#ProdStateBasesCorrupted
#ProdStateSomeBasesNeedUpdate
#ProdStateBasesVeryOldGrace
#ProdStateBasesVeryOld
#ProdStateBasesOldGrace
#ProdStateBasesOld = $IsKAT ? $LinkProductBundleDownload : (s_IsFunctionalityLevel_Updater(getUpdaterLevel()) ? if(f_isInstalled("Updater"), $LinkUpdateNow) : $LinkActivate)
#ProdStateKeyWillBeExpired
#ProdStateKeyGracePeriod
#ProdStateKeyAboutExpiration = $LicensingSubsystem
#ProdStateLicenseNotificationInfo
#ProdStateLicenseNotificationWarning
#ProdStateLicenseNotificationCritical = activeLicNotif(#ActiveLicNotifActionName) ? activeLicNotif(#ActiveLicNotifActionName) : $LicensingSubsystem
#ProdStateTasksMalfunction = if(product.Local, $LinkRepairInstall)
#ProdStateProtectionNotRunning
#ProdStateProtectionDisabled = $LinkProtectionTurnOn
#ProdStateHighRiskTasksDisabled
#ProdStateTasksDisabled = $LinkServicesTurnOn
#ProdStateHighRiskTasksNotRunning
#ProdStateTasksNotRunning = $LinkServicesResume
#ProdStateKeyTrial = $LinkGetFullLicense
#ProdStateAntiSpamNeedTraining = if(product.Local, $LinkStartAntiSpamTrainingWizard)
#ProdStateFirewallBlockAll = $LinkFirewallUnBlock
#ProdStateProductIsBeta = if(!$IsRD, $BetaForumLinkCaption)
#ProdStateSomeSkipped = $LinkProdStateSomeSkipped
#ProdStateUpdateNotAuto = $LinkAutoUpdateTurnOn
#ProdStateBackupTaskNotFinished
#ProdStateBackupTaskFailed = $ProductLinkText_Backup_RunNotCompletedTasks
#ProdStateBackupNoTasks = if(product.Local, $ProductLinkText_Backup_OpenBackup, "")
#ProdStateBackupTaskRunning = if(product.Local, $ProductLinkText_Backup_OpenBackup, "")
#ProdStatePreinstalledCodeActivationProblem
#ProdStatePreinstalledCodeWaitActivationInfo
#ProdStatePreinstalledCodeWaitActivationCritical
#ProdStateKeyWaitReservedActivationInfo
#ProdStateKeyWaitReservedActivationCritical
#ProdStateKeyReservedActivationProblem
#ProdStateKeyInvalidReserveCode = $LinkMoreDetails
[s_ProductLinkClick]
#ProdStateProductNoEula = $ShowEulaEx
#ProdStateProductNeedRestart = f_RestartApp()
#ProdStateKeyBlocked = url($SupportLink)
#ProdStateKeyInvalid = s_IsLicInvalidReason_NeedUpdate(LicInfo.InvalidReason) ? f_StartUpdater() : $ShowLicenseManager
#ProdStateKeyLimited = $ShowLicenseManager
#ProdStateKeyTrialExpired
#ProdStateKeyExpired
#ProdStateNoKeys
#ProdStateKeySuspended = $IsSubscription? $ShowLicenseManager : f_Activate()
#ProdStateKeyUpdateFailed = $IsSubscription? update_subscr_status() : f_Activate()
#ProdStateProtectionSafeMode
#ProdStateThreatsNeedReboot
#ProdStateUpdateNeedReboot = f_RestartOs()
#ProdStateThreatsMalwareUntreated
#ProdStateThreatsSuspiciousUntreated
#ProdStateThreatsRiskwareUntreated = window("QMLProblemList")
#ProdStateProductNotProtected = f_TurnSelfProtectionOn()
#ProdStateProductNotAutoRun = f_RunAtStartup()
#ProdStateBasesCorrupted
#ProdStateSomeBasesNeedUpdate
#ProdStateBasesVeryOldGrace
#ProdStateBasesVeryOld
#ProdStateBasesOldGrace
#ProdStateBasesOld = $IsKAT ? url(env("ProductBundleDownloadLink")) : (s_IsFunctionalityLevel_Updater(getUpdaterLevel()) ? f_StartUpdater() : f_Activate())
#ProdStateKeyWillBeExpired = $ShowLicenseManager
#ProdStateKeyGracePeriod
#ProdStateKeyAboutExpiration = $ShowLicenseManager
#ProdStateLicenseNotificationInfo
#ProdStateLicenseNotificationCritical
#ProdStateLicenseNotificationWarning = activeLicNotif(#ActiveLicNotifActionName) ? f_licenseAction(activeLicNotif(#ActiveLicNotifActionType), activeLicNotif(#ActiveLicNotifURL)) : $ShowLicenseManager
#ProdStateTasksMalfunction = f_repairProduct()
#ProdStateProtectionNotRunning = setstate(#TASK_REQUEST_RUN, "Protection")
#ProdStateHighRiskTasksDisabled
#ProdStateTasksDisabled
#ProdStateProtectionDisabled
#ProdStateHighRiskTasksNotRunning
#ProdStateTasksNotRunning = enable(true, "Protection"); setstate(#TASK_REQUEST_RUN, "Protection")
#ProdStateKeyTrial = buy()
#ProdStateAntiSpamNeedTraining = f_StartAntiSpamTrainingWizard()
#ProdStateFirewallBlockAll = Hips.FirewallSettings.WorkingMode = #fwAllow
#ProdStateProductIsBeta = url(env("ForumLink") + "//index.php?showforum=" + $BetaForumLinkSuffix)
#ProdStateSomeSkipped = prodStateEnable(-1)
#ProdStateUpdateNotAuto = autoUpdatesOn()
#ProdStateBackupTaskNotFinished
#ProdStateBackupTaskFailed = runNotCompletedTasks("backup")
#ProdStateBackupNoTasks = if(checkPassword(#pwdc_OpenBackup), window("BackupMainWindow_Dlg"))
#ProdStateBackupTaskRunning = if(checkPassword(#pwdc_OpenBackup), window("BackupMainWindow_Dlg"))
#ProdStatePreinstalledCodeActivationProblem
#ProdStatePreinstalledCodeWaitActivationInfo
#ProdStatePreinstalledCodeWaitActivationCritical
#ProdStateKeyWaitReservedActivationInfo
#ProdStateKeyWaitReservedActivationCritical
#ProdStateKeyReservedActivationProblem
#ProdStateKeyInvalidReserveCode = $ShowLicenseManager
[s_ProductLinkText2]
#ProdStateThreatsMalwareUntreated
#ProdStateThreatsSuspiciousUntreated
#ProdStateThreatsRiskwareUntreated = $LinkMoreDetails
#ProdStateTasksMalfunction = $LinkSupport
#ProdStateBackupTaskNotFinished
;#ProdStateBackupTaskRunning
#ProdStateBackupTaskFailed = if(product.Local, $ProductLinkText_Backup_OpenBackup, "")
[s_ProductLinkClick2]
#ProdStateThreatsMalwareUntreated
#ProdStateThreatsSuspiciousUntreated
#ProdStateThreatsRiskwareUntreated = window("MainReport:Threats")
#ProdStateTasksMalfunction = url($SupportLink)
#ProdStateBackupTaskNotFinished
#ProdStateBackupTaskRunning
#ProdStateBackupTaskFailed = if(checkPassword(#pwdc_OpenBackup), window("BackupMainWindow_Dlg"))
; For testing product status color
;[s_ProdStateSeverity]
;def = #eProtStateNormal
[s_ProdStateSeverity]
#ProdStateKeyAboutExpiration
#ProdStateLicenseNotificationCritical = $IsActiveGreenPeriod? #eProtStateNormal : #eProtStateCrit
#ProdStateKeyBlocked
#ProdStateKeyInvalid
#ProdStateKeyLimited
#ProdStateKeyTrialExpired
#ProdStateKeyExpired
#ProdStateKeySuspended
#ProdStateKeyUpdateFailed
#ProdStatePreinstalledCodeActivationProblem
#ProdStatePreinstalledCodeWaitActivationCritical
#ProdStateKeyWaitReservedActivationCritical
#ProdStateKeyReservedActivationProblem
#ProdStateKeyInvalidReserveCode
#ProdStateNoKeys
#ProdStateThreatsNeedReboot
#ProdStateBasesCorrupted
#ProdStateBasesVeryOld
#ProdStateKeyGracePeriod
#ProdStateThreatsMalwareUntreated
#ProdStateHighRiskTasksDisabled
#ProdStateHighRiskTasksNotRunning
#ProdStateProtectionNotRunning
#ProdStateProtectionDisabled
#ProdStateTasksMalfunction
#ProdStateProductNoEula = #eProtStateCrit
#ProdStateKeyTrial
#ProdStateKeyWillBeExpired
#ProdStateLicenseNotificationWarning = $IsActiveGreenPeriod? #eProtStateNormal : #eProtStateWarn
#ProdStateThreatsRiskwareUntreated
#ProdStateThreatsSuspiciousUntreated
#ProdStateUpdateNeedReboot
#ProdStateProductNeedRestart
#ProdStateBasesOld
#ProdStateTasksDisabled
#ProdStateTasksNotRunning
#ProdStateProductNotProtected
#ProdStateProductNotAutoRun
#ProdStateFirewallBlockAll
#ProdStateBackupTaskFailed
#ProdStateBackupTaskNotFinished
#ProdStateProtectionSafeMode = #eProtStateWarn
default = #eProtStateNormal
[s_NotifySeverity2ProdStateSeverity]
#eNotifySeverityCritical
#eNotifySeverityError = #eProtStateCrit
#eNotifySeverityImportant = #eProtStateWarn
def = #eProtStateNormal
[s_MainProtectionBannerBg]
#eProtStateNormal = "MainProtectionBanner,0"
#eProtStateWarn = "MainProtectionBanner,1"
#eProtStateCrit = "MainProtectionBanner,2"
[s_ProtectionBannerDetailsBtnBg_L]
#eProtStateNormal = "BtnGlass26Left,0,3,4,2,4,2"
#eProtStateWarn = "BtnGlass26YellowLeft,0,3,4,2,4,2"
#eProtStateCrit = "BtnGlass26RedLeft,0,3,4,2,4,2"
[s_ProtectionBannerDetailsBtnBg_M]
#eProtStateNormal = "BtnGlass26Middle,0,3,4,2,4,2"
#eProtStateWarn = "BtnGlass26YellowMiddle,0,3,4,2,4,2"
#eProtStateCrit = "BtnGlass26RedMiddle,0,3,4,2,4,2"
[s_ProtectionBannerDetailsBtnBg_R]
#eProtStateNormal = "BtnGlass26Right,0,3,4,2,4,2"
#eProtStateWarn = "BtnGlass26YellowRight,0,3,4,2,4,2"
#eProtStateCrit = "BtnGlass26RedRight,0,3,4,2,4,2"
[s_ProtectionMediumBannerRsBg]
#eProtStateNormal = "ProtectionMediumBannerRs,0"
#eProtStateWarn = "ProtectionMediumBannerRs,1"
#eProtStateCrit = "ProtectionMediumBannerRs,2"
[s_ProtectionSmallBannerBg]
#eProtStateNormal = "ProtectionBannerGreen"
#eProtStateWarn = "ProtectionBannerYellow"
#eProtStateCrit = "ProtectionBannerRed"
[s_ProtectionSmallBannerRsBg]
#eProtStateNormal = "ProtectionSmallBannerRs,0"
#eProtStateWarn = "ProtectionSmallBannerRs,1"
#eProtStateCrit = "ProtectionSmallBannerRs,2"
[s_MainWindowProtectionLight]
#eProtStateNormal = "LightGreen" + ",0,0,1,0,0,1"
#eProtStateWarn = "LightYellow" + ",0,0,1,0,0,1"
#eProtStateCrit = "LightRed" + ",0,0,1,0,0,1"
[s_ProtectionLightSmall]
#eProtStateNormal = "LightsSmall" + ",0,0,0,0,0,1"
#eProtStateWarn = "LightsSmall" + ",2,2,2,2,2,3"
#eProtStateCrit = "LightsSmall" + ",4,4,4,4,4,5"
; fix button
[s_ButtonFixBg_L]
#eProtStateNormal
#eProtStateWarn = "BtnGlassFix_y_l,0,2,1,0,0,1"
#eProtStateCrit = "BtnGlassFix_r_l,0,2,1,0,0,1"
[s_ButtonFixBg_M]
#eProtStateNormal
#eProtStateWarn = "BtnGlassFix_y_c,0,2,1,0,0,1"
#eProtStateCrit = "BtnGlassFix_r_c,0,2,1,0,0,1"
[s_ButtonFixBg_R]
#eProtStateNormal
#eProtStateWarn = "BtnGlassFix_y_r,0,2,1,0,0,1"
#eProtStateCrit = "BtnGlassFix_r_r,0,2,1,0,0,1"
[s_ProtectionBannerBGFont]
#eProtStateNormal = "ProtBannerNormBg"
#eProtStateWarn = "ProtBannerWarnBg"
#eProtStateCrit = "ProtBannerCritBg"
[s_ProtectionBannerDscBGFont]
#eProtStateNormal = "ProtBannerDscNormBg"
#eProtStateWarn = "ProtBannerDscWarnBg"
#eProtStateCrit = "ProtBannerDscCritBg"
[s_ProtectionBannerSmFont]
#eProtStateNormal = "ProtBannerSmGreen"
#eProtStateWarn = "ProtBannerSmYellow"
#eProtStateCrit = "ProtBannerSm"
[s_ProtectionBannerSmBGFont]
#eProtStateNormal = "ProtBannerSmNormBg"
#eProtStateWarn = "ProtBannerSmWarnBg"
#eProtStateCrit = "ProtBannerSmCritBg"
[s_ProtectionBannerSmBGFontNew]
#eProtStateNormal = "ProtBannerSmNormBgWhite"
#eProtStateWarn = "ProtBannerSmNormBgWhite"
#eProtStateCrit = "ProtBannerSmCritBg"
[s_ProtectionBannerBtnBGFont]
#eProtStateNormal = "ProtBannerBtnNormBg"
#eProtStateWarn = "ProtBannerBtnWarnBg"
#eProtStateCrit = "ProtBannerBtnCritBg"
[f_ProductPostfix]
ret = $IsKIS ? "_KIS" : ($IsKAV? "_KAV" : "")
[s_NotifyWindowColor]
#eProtStateCrit = "Red"
#eProtStateWarn = "Yellow"
def = "Green"
[s_NotifyWindowBannerFGFont]
#eProtStateNormal
#eProtStateCrit = "Header1White"
#eProtStateWarn = "Header1"
[s_NotifyWindowBannerBGFont]
#eProtStateNormal
#eProtStateCrit = "Header1"
#eProtStateWarn = "Header1White"
[s_MainProtStatusFont]
#eProtStateCrit = "MainProtStatusCrit"
#eProtStateWarn = "MainProtStatusWarn"
def = "MainProtStatusNormal"
[s_MainProtStatusIcon]
#eProtStateCrit = "crit"
#eProtStateWarn = "med"
def = "low"
[s_ProductNewsIcon]
#eNotifySeverityCritical ="error"
#eNotifySeverityError ="error"
#eNotifySeverityImportant ="warning"
#eNotifySeverityNotImportant="info"
def = "info"
[s_LicenseNotificationIcon]
#eLicenseNotificationSeverityNone
#eLicenseNotificationSeverityCritical
#eLicenseNotificationSeverityError
#eLicenseNotificationSeverityInfoCritical = s_MsgBoxIcon(#m_error)
#eLicenseNotificationSeverityImportant
#eLicenseNotificationSeverityInfoError = s_MsgBoxIcon(#m_warning)
default = s_MsgBoxIcon(#m_information)
[s_DetectObjectStatusIcon]
def = DetectType == #DETYPE_VULNERABILITY ? $TreatIcon_Med : s_DetectObjectStatusIcon2(@)
[s_DetectObjectStatusIcon2]
#OBJSTATUS_INFECTED
#OBJSTATUS_UNTREATABLE
#OBJSTATUS_SUSPICION
#OBJSTATUS_ALLOWED
#OBJSTATUS_UNTREATABLE
#OBJSTATUS_UNKNOWN = $TreatIcon_Inactive
#OBJSTATUS_OK
#OBJSTATUS_FALSEALARM = $TreatIcon_Clean
#OBJSTATUS_ADDEDBYUSER = $TreatIcon_Med
#OBJSTATUS_NOTDISINFECTED = if($IsExactDetect, $TreatIcon_High, $TreatIcon_Med)
#OBJSTATUS_DENIED
#OBJSTATUS_DISINFECTED
#OBJSTATUS_DELETED
#OBJSTATUS_QUARANTINED = $TreatIcon_Cured
#OBJSTATUS_DELETED_ON_REBOOT
#OBJSTATUS_DISINFECTED_ON_REBOOT
#OBJSTATUS_QUARANTINED_ON_REBOOT = $TreatIcon_CuredDelayed
def = $TreatIcon_High
[s_DetectDangerIcon]
#eDDHigh = $TreatIcon_High
#eDDMedium = $TreatIcon_Med
#eDDLow = "void16"
#eDDInformational = "void16"
default = $TreatIcon_Med
[s_AlertNotificationSound]
#DETDANGER_HIGH = Gui.EnableClassicSounds ? "infected.wav" : "infected_p.wav"
#DETDANGER_MEDIUM = "1-08.wav"
default = "1-06.wav"
[s_ProductNotificationSound]
#eProtStateCrit = Gui.EnableClassicSounds ? "infected.wav" : "infected_p.wav"
#eProtStateWarn = "1-08.wav"
def = "1-06.wav"
[f_ProductNotificationText]
ret = $IsSandBoxNotification && s_ProductNotifyTextSandbox(Action) ? s_ProductNotifyTextSandbox(Action) : ($IsVerdictProductStatusId ? s_ProtState($Verdict2ProductStatusId) : ($IsTaskStateEvent ? $ProductNotifyText_TaskState : s_ProductNotifyTextByTaskID(TaskID, @0)))
[Global]
$ProductNotificationText = f_ProductNotificationText(50)
$ProductNotificationTextBL = removetags($ProductNotificationText, #RemTags)
$ProductNotificationTipText = f_ProductNotificationText(-1)
$ProductNotificationLinkText = (f_NOTIFICATION_ID(NotificationId) == #eNotifyNewsUnread ? $LinkReadNews : \
(($IsSandBoxNotification && Action == #evtCriticalCOMAccess) ? "" : \
($IsVerdictProductStatusId ? if($Verdict2ProductStatusId != #ProdStateFirewallBlockAll && $Verdict2ProductStatusId != #ProdStateSomeSkipped, \
(Data.ActionName ? Data.ActionName : s_ProductLinkText($Verdict2ProductStatusId))) : $LinkMoreDetails)))
$ProductNotificationLink = s_ProdNotifLinkByNotifId(f_NOTIFICATION_ID(NotificationId)); close()
$ProductNotifyText_TaskState = $TaskText + ": " + $VerdictDescrText + "." + if(DecisionReason == #eERROR, " " + $ReasonText + ".")
[s_ProdNotifLinkByNotifId]
#eNotifyStatisticsReportReady = window("StatisticsReport")
#eNotifyNewsUnread = (Data && Data.Title ? window("QMLNewsItem") : window("QMLNewsList"))
#eNotifyParCtl = if (checkPassword(#pwdc_OpenParctl), s_ProdNotifLink_ParCtl(Data.serid(), Data.UserName))
def = ($IsVerdictProductStatusId ? (Data.ActionName ? f_licenseAction(Data.ActionType, Data.URL) : Data.URL ? url(Data.URL) : s_ProductLinkClick($Verdict2ProductStatusId)) : \
Action != #evtAddAppToGr ? f_JumpToReport() : f_JumpToHipsRules())
[s_ProdNotifLink_ParCtl]
serid("InstantMessangerControlReportEvent") = f_ParCtl_ShowWindow("Report:IM_Usage", @1)
serid("SocialNetworkControlReportEvent") = f_ParCtl_ShowWindow("Report:SN_Usage", @1)
serid("AppControlReportEvent") = f_ParCtl_ShowWindow("Report:AppUsage", @1)
serid("PersonalInfoControlReportEvent") = f_ParCtl_ShowWindow("Report:PersonalInfo", @1)
serid("WebSiteControlReportEvent") = f_ParCtl_ShowWindow("Report:WebContent", @1)
serid("FileDownloadControlReportEvent") = f_ParCtl_ShowWindow("Report:Download", @1)
serid("InternetUsageControlReportEvent") = f_ParCtl_ShowWindow("Report:InternetUsage", @1)
serid("ComputerControlReportEvent") = f_ParCtl_ShowWindow("Report:ComputerUsage", @1)
def = f_ParCtl_ShowWindow("Report:AddView", @1)
[s_ProductNotificationLinkText4Task]
#eTASK_PARCTLEX = ""
#eTASK_BACKUP = if (DecisionReason == #eERROR && ExtraInfoSub2==#errOUT_OF_SPACE,$CleanupStorageText,s_ProductNotificationLinkText(NotificationId))
default = s_ProductNotificationLinkText(NotificationId)
[s_ProductNotificationLink4Task]
#eTASK_BACKUP = if (DecisionReason == #eERROR && ExtraInfoSub2==#errOUT_OF_SPACE,f_clearStorage(backupGetStorage(profile(ExtraInfoSub1).settings.StorageGUID)),f_JumpToReport())
default = f_JumpToReport()
[s_ProductNotificationLinkText]
#eNotifySandboxRestricted = ""
default = $IsVerdictProductStatusId ? if($Verdict2ProductStatusId != #ProdStateFirewallBlockAll && $Verdict2ProductStatusId != #ProdStateSomeSkipped, (Data.URLName ? Data.URLName : s_ProductLinkText($Verdict2ProductStatusId))) : (Action != #evtAddAppToGr ? $LinkDetails : $LinkMoreDetails)
[f_JumpToReport]
ret = window(s_TaskID2ReportWindow(TaskID),p_postInit("ctl.Report.findcontent(" + Timestamp + ")"))
[f_JumpToHipsRules]
ret = window("SystemMonitor:Programs:Running")
[s_TaskID2ReportWindow]
#eTASK_BACKUP =
#eTASK_RESTORE = "BackupStatistics"
def = "MainReport:" + s_TaskID2MainWindowGroup(@)
[s_TaskID2MainWindowGroup]
#eTASK_FAV = "File_Monitoring"
#eTASK_MAV = "Mail_Monitoring"
#eTASK_HTTP = "Web_Monitoring"
#eTASK_AP
#eTASK_AD
#eTASK_IM_CHECK = "IM_Monitoring"
#eTASK_IDS = "ids"
#eTASK_AB = "AdBlocker"
#eTASK_AS = "Anti_Spam"
#eTASK_PC = "Protection"
#eTASK_HIPS = "Hips"
#eTASK_FIREWALL
#eTASK_SANDBOX
#eTASK_SW2 = "SW2"
#eTASK_PDM = "pdm"
#eTASK_SCAN = "Scan_Objects"
#eTASK_UPDATER
#eTASK_ROLLBACK = "Updater"
def = "Protection"
[s_Profile2ProfileGroup]
File_Monitoring
Mail_Monitoring
Web_Monitoring = "Antivirus"
ids = "OnlineSecurity"
AdBlocker
Anti_Spam
ParCtl = "ContentFilter"
HipsTask
Firewall
pdm = "SystemWatch"
def = "Protection"
[s_Profile2ProfileGroup_Reports]
Scan_My_Computer
Scan_Objects
Scan_Quarantine
Scan_Startup
Scan_Vulnerabilities = "Scan_Objects"
Rollback
Updater = "Updater"
AVZ_CollectSysInfo
AVZ_Scan = "AVZ_Scan"
def = type == "ods" ? "Scan_Objects" : @
[s_AlertDetailsDialog]
#DETYPE_UNKNOWN = dialog("MalwareInfo", p_image(ObjectName), p_TaskType(TaskType))
#DETYPE_VIRWARE
#DETYPE_TROJWARE
#DETYPE_MALWARE
#DETYPE_ADWARE
#DETYPE_PORNWARE
#DETYPE_RISKWARE
#DETYPE_XFILES
#DETYPE_SOFTWARE = dialog("MalwareInfo", p_image(ObjectName), p_TaskType(TaskType))
#DETYPE_PHISHING = dialog("MalwareInfo", p_image(ObjectName), p_TaskType(TaskType))
#DETYPE_SUSPIC_URL = dialog("MalwareInfo", p_image(ObjectName), p_TaskType(TaskType))
#DETYPE_ATTACK
#DETYPE_REGISTRY
#DETYPE_SUSPICACTION
#DETYPE_VULNERABILITY
default = 0
[s_Use_AlertDialog_VirWareCategoryIco]
#DETYPE_UNKNOWN
#DETYPE_VIRWARE
#DETYPE_TROJWARE
#DETYPE_MALWARE
#DETYPE_ADWARE
#DETYPE_PORNWARE
#DETYPE_RISKWARE
#DETYPE_XFILES
#DETYPE_SOFTWARE
#DETYPE_PHISHING
#DETYPE_SUSPIC_URL = true
def = false
[s_IsAlertDetail_ObjLink]
#evtPrtStgAccess
#evtUseBITS
#evtUseDNS = 1
default = ObjectType == #eProcess ? 1 : 0
[s_AlertInfoDialogByHipsAction]
#evtPrtStgAccess
#evtUseBITS
#evtUseDNS = dialog("HipsInfo", p_action(@))
default = 0
[s_AlertInfoDialogByPdmEventType]
#PDM2_EVENT_P2P_SC_RDL
#PDM2_EVENT_P2P_SCN
#PDM2_EVENT_SC_MULTIPLE
#PDM2_EVENT_SC_AR
#PDM2_EVENT_SC_ARsrc
#PDM2_EVENT_SC2STARTUP
#PDM2_EVENT_TROJAN_GEN
#PDM2_EVENT_SCN
#PDM2_EVENT_RDR
#PDM2_EVENT_HIDDEN_OBJ
#PDM2_EVENT_INVADER
#PDM2_EVENT_INVADER_LOADER
#PDM2_EVENT_STRANGEKEY
#PDM2_EVENT_SYSCHANGE
#PDM2_EVENT_HIDDEN_INSTALL
#PDM2_EVENT_BUFFEROVERRUN
#PDM2_EVENT_DEP
#PDM2_EVENT_HOSTS
#PDM2_EVENT_DOWNLOADER
#PDM2_EVENT_DRIVER_INS
#PDM2_EVENT_HIDDEN_SEND
#PDM2_EVENT_KEYLOGGER
#PDM2_EVENT_IRP_TABLE_CHANGED
#PDM2_EVENT_NEGATIVE_PID
#PDM2_EVENT_DNS_QUERY
#PDM2_EVENT_PSTORE
#PDM2_EVENT_BSS_DETECT = dialog("HipsInfo", p_eventtype(@))
default = 0
[s_MalwareInfo_Hdr]
antiphishing = s_AlertDialogCaption(@)
default = @1
[s_Use_AlertDialog_VirWareCategory]
hipstask
hips_group = 0
httpscan
default = 1
[f_UseVirWare]
ret = DetectType != #DETYPE_URGENT && DetectDanger < 0x8 && s_UseVirWareByTask(TaskType)
[s_UseVirWareByTask]
InstallKey
hips
hips_group
hipstask
firewall = false
httpscan = !$IsGeoSecurity
pdm = 0 != nPID
default = true
[s_UseVirWareIcoByTask]
SW2 = DetectType > 0
httpscan = #DETYPE_SUSPIC_URL != DetectType || #DETYPE_PHISHING != DetectType
default = true
[s_Use_AlertInfoDialog]
;#evtUseBrowserCL
;#evtUseBrowserAPI
#evtPrtStgAccess
#evtUseBITS
#evtUseDNS = 1
default = 0
[s_ResultActionByTaskType]
oas
ods
avs = #ACTION_ADD_EXCLUDE
default = #ACTION_ALLOW
[s_AlertFooterLink]
default = "AlertFooterLink"
[Global]
$EventAppName = if(AppID, f_EventAppLink(compressPath(f_AppInfo(AppID).sImagePath, 40)) + if($hasNativePID," (PID: " + $AppNativePID + ")" + $LtrMark,if(f_isSandboxed(PID), " (PID: " + convertToNativePid(PID) + ")" + $LtrMark)))
$EventAppNameNS = if(AppID, f_EventAppLink($AppName))
$EventObjText = (s_NeedToCompressPathByObjectType(ObjectType) ? compressPath($ObjectText, @1) : $ObjectText)
$EventShow = (($IsEventObjInfected && DecisionReason != #eDETECT_INFORMATION) || Verdict == #ePASSWORD_PROTECTED || Verdict == #eCONNECTED)
[f_EventAppLink]
ret = f_MakeLink(@ != $UnknownApp, "AppName onclick(f_EventAppClick())", @)
[f_EventAppClick]
ret = window("AppRulesEdit", p_image(f_AppInfo(AppID).sImagePath), p_appID(AppID))
[f_EventObjClick]
ret = f_EventObjClickEx(c_object(ObjectID, object(ObjectID)))
[f_EventObjClickEx]
ret = window("AppRulesEdit", p_image(hipsGroup(@,1)), p_appID(getGroupIdByName(hipsGroup(@))) )
[f_addAppToTrusted]
ret = @ ? addToExclude(ser(ObjectName), dialog("[ExclusionEdit] alias(settings)", p_new(#true)), @1) : addToTrusted(ObjectName, dialog("[TrustedAppEdit] alias(settings)"))
[f_IsProdStateCritical]
ret = s_ProdStateSeverity(@) == #eProtStateCrit
[f_VerdictDesc]
ret = s_Verdict(Verdict) + if(Verdict == #eNOT_DISINFECTED, ": " + s_DecisionReason(DecisionReason))
[f_PIDValue]
ret = if(@, " (PID:" + fmt("ld", @) + ")")
[f_VulnerUrl]
ret = $VirusListLink + "&function=advisories&VN=" + @
[s_RegValType]
1 = "REG_SZ"
2 = "REG_EXPAND_SZ"
3 = "REG_BINARY"
4 = "REG_DWORD"
5 = "REG_MULTI_SZ"
[f_regFormat]
ret = "\n\n" + @ + " (" + s_RegValType(@1) + "):\n" + regFormat(@1, @2)
[s_ProdStatusVisibleFilter]
#ProdStateKeyInvalid = !((product.UpdateState & #eBasesCorrupted) && (product.LicInfo.InvalidReason == #ekirInconsistentUpdate))
default = 1
[f_appParenItem]
ret = "" + f_ProcessName(OwnerPid) + ""
[s_NeedToCompressPathByObjectType]
#eFile
#eDirectory
#eRegKey
#eProcess
#eModule
#eURL
#eDriver = 1
def = 0
[s_AlertDialog_Icon]
httpscan = if(#DETYPE_PHISHING == DetectType, "anti_phish_1")
InstallKey
mc
avs
oas
ods = ""
pdm = if(!s_IsPdmUnknownSource(EventType), s_AlertDialog_Descr_Icon(Action, ObjectName, ObjectType))
def = s_AlertDialog_Descr_Icon(Action, ObjectName, ObjectType)
[s_IsPdmUnknownSource]
#PDM2_EVENT_IRP_TABLE_CHANGED
#PDM2_EVENT_KEYLOGGER = 0 == nPID
def = false
[s_AlertDialog_Descr_Icon]
#evtProcessStart
#evtProcessStop = var imagePath; imagePath = ($AlertAppInfoStruct).sImagePath; getIcon(imagePath, "unkapp", 1)
default = s_AlertDescr_IconByObjectType(ObjectType)
[s_AlertDescr_IconByObjectType]
#ObjectRegion = 0
default = if(nPID == 0 || EventType == #PDM2_EVENT_NEGATIVE_PID || TaskType == "wmuf", if(TaskType != "hipstask","system32"), if(sImagePath, getIconAsync(sImagePath, "unkapp", 1), "unkapp"))
[f_MainReport_Period_Filter]
p_PeriodBegin, p_PeriodEnd
ret = if(p_PeriodBegin, "(Timestamp >= " + time2dt(p_PeriodBegin) + " && Timestamp < " + time2dt(p_PeriodEnd) + ")") + if(@2, if(p_PeriodBegin, " && (") + @2 + if(p_PeriodBegin, ")"))
[f_Threats_PeriodFilter]
p_PeriodBegin, p_PeriodEnd
ret = if(p_PeriodBegin, "(ReportTime >= " + p_PeriodBegin + " && ReportTime < " + p_PeriodEnd + ")") + if(@2, if(p_PeriodBegin, " && (") + @2 + if(p_PeriodBegin, ")"))
; ----- Tab Statistics Filter -----
[s_ParCtlEx_GetStatRangePeriod]
#ePeriodYear = #eStatPeriodMonth
#ePeriodMonth = #eStatPeriodDay
#ePeriodWeek = #eStatPeriodDay
#ePeriodDay = #eStatPeriodHour
[f_Statistics_Filter]
p_PeriodBegin, p_PeriodEnd, p_PeriodType, p_PeriodShift, p_IsPrev, p_IsNext
ret = p_PeriodShift = 0; \
f_Statistics_Filter_Ex( p_PeriodBegin, p_PeriodEnd, s_Statistics_ConvertType(p_PeriodType), p_PeriodShift, 0, p_IsPrev, p_IsNext )
[f_Statistics_Filter_Up]
p_PeriodBegin, p_PeriodEnd, p_PeriodType, p_PeriodShift, p_IsPrev, p_IsNext
ret = f_Statistics_Filter_Ex( p_PeriodBegin, p_PeriodEnd, p_PeriodType, p_PeriodShift, 1, p_IsPrev, p_IsNext )
[f_Statistics_Filter_Down]
p_PeriodBegin, p_PeriodEnd, p_PeriodType, p_PeriodShift, p_IsPrev, p_IsNext
ret = f_Statistics_Filter_Ex( p_PeriodBegin, p_PeriodEnd, p_PeriodType, p_PeriodShift, -1, p_IsPrev, p_IsNext )
[f_Statistics_Filter_Ex]
p_PeriodBegin, p_PeriodEnd, p_PeriodType, p_PeriodShift, p_Arrow, p_IsPrev, p_IsNext
ret = p_PeriodShift = p_PeriodShift + p_Arrow; \
var v_newType; v_newType = -1;\
; p_PeriodType; p_PeriodShift; \
p_PeriodBegin = s_Statistics_Begin_Filter( p_PeriodType, p_PeriodShift, v_newType); \
p_PeriodEnd = s_Statistics_End_Filter( p_PeriodType, p_PeriodShift, v_newType ); \
p_IsPrev = getRepDbFirstTimestamp(#dbStatistics) < p_PeriodBegin; \
p_IsNext = p_PeriodEnd < utctime(); \
datetime(p_PeriodBegin); datetime(p_PeriodEnd); p_IsPrev
[s_Statistics_Begin_Filter]
#ePeriodYear = timeGetLocalBegin(utctime(), #eTimeGetBeginYear, @1)
#ePeriodMonth = timeGetLocalBegin(utctime(), #eTimeGetBeginMonth, @1)
#ePeriodWeek = timeGetLocalBegin(utctime(), #eTimeGetBeginWeek, @1)
#ePeriodDay = timeGetLocalBegin(utctime(), #eTimeGetBeginDay, @1)
def = timeGetLocalBegin( getRepDbFirstTimestamp(#dbStatistics), \
@2 = s_Statistics_TypeOfEnum( f_GetTypeOfTime( getRepDbFirstTimestamp(#dbStatistics) , utctime() ) ) )
[s_Statistics_End_Filter]
#ePeriodYear = timeGetLocalBegin(utctime(), #eTimeGetBeginYear, @1 + 1)
#ePeriodMonth = timeGetLocalBegin(utctime(), #eTimeGetBeginMonth, @1 + 1)
#ePeriodWeek = timeGetLocalBegin(utctime(), #eTimeGetBeginWeek, @1 + 1)
#ePeriodDay = timeGetLocalBegin(utctime(), #eTimeGetBeginDay, @1 + 1)
def = timeGetLocalBegin(utctime(), @2, 1)
[f_GetTypeOfTime]
p_TimeBegin, p_TimeEnd
$Day = 60*60*24
$Week = $Day * 7
$Month = $Day * 30
ret = var tmDiff; var nChartPeriod; \
tmDiff = p_TimeEnd - p_TimeBegin;\
nChartPeriod = \
((tmDiff <= $Day) && timeGetLocalBegin(p_TimeBegin, #eTimeGetBeginDay, 0) == timeGetLocalBegin(p_TimeEnd-1, #eTimeGetBeginDay, 0)) ? #ePeriodDay : \
((tmDiff <= $Week) && timeGetLocalBegin(p_TimeBegin, #eTimeGetBeginWeek, 0) == timeGetLocalBegin(p_TimeEnd-1, #eTimeGetBeginWeek, 0)) ? #ePeriodWeek : \
((tmDiff <= $Month) && timeGetLocalBegin(p_TimeBegin, #eTimeGetBeginMonth, 0) == timeGetLocalBegin(p_TimeEnd-1, #eTimeGetBeginMonth, 0)) ? #ePeriodMonth : \
#ePeriodYear
[s_Statistics_DefinType]
;p_Type, p_Begin, p_End
Day = #ePeriodDay
Week = #ePeriodWeek
Month = #ePeriodMonth
Year = #ePeriodYear
def = f_GetTypeOfTime(@1, @2)
[s_Statistics_ConvertType]
Day = #ePeriodDay
Week = #ePeriodWeek
Month = #ePeriodMonth
Year = #ePeriodYear
def = -1
[s_Statistics_TypeOfEnum]
#ePeriodDay = #eTimeGetBeginDay
#ePeriodWeek = #eTimeGetBeginWeek
#ePeriodMonth = #eTimeGetBeginMonth
#ePeriodYear = #eTimeGetBeginYear
def = -1
;$Day = 60*60*24
;$Week = $Day * 7
;$Month = $Day * 30
;All = (((@2-@1) < $Day) && timeGetLocalBegin(@1, #eTimeGetBeginDay, 0) == timeGetLocalBegin(@2, #eTimeGetBeginDay, 0)) ? "Day" : \
; (((@2-@1) < $Week) && timeGetLocalBegin(@1, #eTimeGetBeginWeek, 0) == timeGetLocalBegin(@2, #eTimeGetBeginWeek, 0)) ? "Week" : \
; (((@2-@1) < $Month) && timeGetLocalBegin(@1, #eTimeGetBeginMonth, 0) == timeGetLocalBegin(@2, #eTimeGetBeginMonth, 0)) ? "Month" : \
; "Year"
;def = @0
[s_MainThreats_Tab_Statistics_Filter]
def = "(Date >= " + @1 + " && Date < " + @2 + ")" + @3
[s_AvzSecurityAnalyserWizardWelcomeMask]
0 = (wizMask = wizPagesMask("Welcome,Search,Vulnerab,Problems,Fix,Finish"); RunMode = 0; ScriptMode = 1; savesettings())
1 = (wizMask = wizPagesMask("Welcome,Vulnerab,Problems,Fix,Finish"); RunMode = 1; ScriptMode = 2; savesettings())
2 = (wizMask = wizPagesMask("Welcome,Search,Problems,Fix,Finish"); RunMode = 2; ScriptMode = 4; savesettings())
[f_getStateIcon]
ret = @1 ? "dashboard_statuses,0" : (@2 ? "dashboard_statuses,2" : "dashboard_statuses,1")
[f_getFilesDataStateIcon]
$fm = !f_isInstalled("File_Monitoring") || f_IsStateRunningOK(File_Monitoring.state)
$hips = !f_isInstalled("HipsTask") || f_IsStateRunningOK(HipsTask.state)
$pdm = !f_isInstalled("pdm") || f_IsStateRunningOK(pdm.state)
$allOk = ($fm) && ($pdm) && ($hips) && ($SystemWatch)
$anyFail = #StateFailed == File_Monitoring.state || #StateFailed == HipsTask.state || #StateFailed == pdm.state
ret = f_getStateIcon(@, $allOk, $anyFail)
[f_getSysAppStateIcon]
$mm = !f_isInstalled("Mail_Monitoring") || f_IsStateRunningOK(Mail_Monitoring.state)
$wm = !f_isInstalled("Web_Monitoring") || f_IsStateRunningOK(Web_Monitoring.state)
$im = !f_isInstalled("IM_Monitoring") || f_IsStateRunningOK(IM_Monitoring.state)
$ids = !f_isInstalled("ids") || f_IsStateRunningOK(ids.state)
$hips = !f_isInstalled("HipsTask") || f_IsStateRunningOK(HipsTask.state)
$pdm = !f_isInstalled("pdm") || f_IsStateRunningOK(pdm.state)
$as = !f_isInstalled("Anti_Spam") || f_IsStateRunningOK(Anti_Spam.state)
$SW2 = !f_isInstalled("SW2") || f_IsStateRunningOK(SW2.state)
$allOk = ($mm) && ($wm) && ($im) && ($ids) && ($hips) && ($pdm) && ($as) && ($SW2)
$anyFail = #StateFailed == Mail_Monitoring.state || #StateFailed == Web_Monitoring.state || #StateFailed == IM_Monitoring.state || #StateFailed == pdm.state || #StateFailed == ids.state || #StateFailed == HipsTask.state || #StateFailed == Anti_Spam.state || #StateFailed == SW2.state
ret = f_getStateIcon(@, $allOk, $anyFail)
[f_getProtOnlinesStateIcon]
$mm = !f_isInstalled("Mail_Monitoring") || f_IsStateRunningOK(Mail_Monitoring.state)
$wm = !f_isInstalled("Web_Monitoring") || f_IsStateRunningOK(Web_Monitoring.state)
$im = !f_isInstalled("IM_Monitoring") || f_IsStateRunningOK(IM_Monitoring.state)
$ids = !f_isInstalled("ids") || f_IsStateRunningOK(ids.state)
$as = !f_isInstalled("Anti_Spam") || f_IsStateRunningOK(Anti_Spam.state)
$fw = !f_isInstalled("Firewall") || f_IsStateRunningOK(Firewall.state)
$allOk = ($mm) && ($wm) && ($im) && ($ids) && ($as) && ($fw) && ($g_antiphishAll)
$anyFail = #StateFailed == Mail_Monitoring.state || #StateFailed == Web_Monitoring.state || #StateFailed == IM_Monitoring.state || #StateFailed == ids.state || #StateFailed == Firewall.state || #StateFailed == Anti_Spam.state
ret = f_getStateIcon(@, $allOk, $anyFail)
[s_getProtBlockColor]
warning_state
warning_state_na = "Yellow"
error_state
error_state_na = "Red"
def = "Green"
[f_repairProduct]
ret = if (msg("ProductRepairConfirmation", #m_yesno) == #m_res_yes, repair())
[f_getStateSemaphor2]
ret = s_IsStateRunning(@) ? "SlideSwitch_on" : "SlideSwitch_off"
[f_getStateSemaphor]
ret = (ctl.hotlight ? f_getStateSemaphor2(@) + ",1" : f_getStateSemaphor2(@) + ",0")
[f_SwitchTaskState]
ret = if(checkPassword(#pwdc_SaveSettings), enable(!s_IsStateRunning(state) && state != #StateFailed))
[s_getStateIcon]
#warn
#green = "SlideSwitch_on"
#gray
#red = "SlideSwitch_off"
[f_IsStateRunning]
ret = s_IsStateRunning(@) ? 1 : 0
[s_ChartId]
#eVirware = "0"
#eTrojware = "1"
#eMalware = "2"
#eUrgent
#eBSSDetect = "3"
#eVulnerability = "4"
#eRiskware = "5"
#eAdware = "6"
#eSpam = "7"
#eBanner = "8"
#eAttack = "9"
#eMaliciousURL = "10"
[f_ChartBg]
ret = "ReportChart"+s_ChartId(@)
[f_ChartBgLegend]
ret = "ReportChart, "+s_ChartId(@)
[s_ComponentKISInstalledOnly]
HipsTask = 1
Firewall = 1
ids = 1
Anti_Spam = 1
AdBlocker = 1
ParCtl = 1
[s_RemoteProductComputerStateIcon]
#eProtStateNormal = if(@1,"computer_green_lite","computer_green_dark")
#eProtStateWarn = if(@1,"computer_yellow_lite","computer_yellow_dark")
#eProtStateCrit = if(@1,"computer_red_lite","computer_red_dark")
[s_IconObjectType]
#INV_EVENT_TYPE_FILE_OPEN
#INV_EVENT_TYPE_FILE_CLOSE
#INV_EVENT_TYPE_FILE_DELETE
#INV_EVENT_TYPE_FILE_RENAME = "disk"
#INV_EVENT_TYPE_PROCESS_CREATE
#INV_EVENT_TYPE_PROCESS_EXIT
#INV_EVENT_TYPE_PROCESS_TERMINATE = "startupobj"
#INV_EVENT_TYPE_REGYSTRY_KEY_CREATE
#INV_EVENT_TYPE_REGYSTRY_KEY_DELETE
#INV_EVENT_TYPE_REGYSTRY_VALUE_DELETE
#INV_EVENT_TYPE_REGYSTRY_VALUE_SET = "registry"
[s_IconRollbackObjectType]
#RegistryValue = "registry"
#File = "resfile"
#Process = "void16"
[s_SWObjectType]
#INV_EVENT_TYPE_FILE_OPEN
#INV_EVENT_TYPE_FILE_CLOSE
#INV_EVENT_TYPE_FILE_DELETE
#INV_EVENT_TYPE_FILE_RENAME = #eFile
#INV_EVENT_TYPE_PROCESS_CREATE
#INV_EVENT_TYPE_PROCESS_EXIT
#INV_EVENT_TYPE_PROCESS_TERMINATE = #eProcess
#INV_EVENT_TYPE_REGYSTRY_KEY_CREATE
#INV_EVENT_TYPE_REGYSTRY_KEY_DELETE
#INV_EVENT_TYPE_REGYSTRY_VALUE_DELETE
#INV_EVENT_TYPE_REGYSTRY_VALUE_SET = #eRegKey
[f_isHipsGroup]
ret = s_HipsGroups(TaskType)
[s_HipsGroups]
hips
hipstask
hips_group =
firewall = true
def = false
[f_SelfAction]
ret = ObjectType == #eNetwork ? true : s_HipsSelfAction(Action)
[s_HipsSelfAction]
#evtAddAppToGr = false
def = true
[f_ksnRating]
ret = f_KsnTrusted(@) + if(@1 > 0,"\n" + f_KsnLimited(@1)) + if(@2 > 0,"\n" + f_KsnUntrusted(@2))
[s_BlicMediumCounter_Shift]
DataSecurity = 0
SystemSecurity = 8
OnlineSecurity = 4
[s_IsHaveHistoryByTask]
;#PDM2_ACTION_BLOCKED_APP_START
$InfoAvailable = (Parents.size() > 0 || nPID > 0)
$HistoryAvailable = f_isInstalled("SW2") && f_IsStateRunningOK(SW2.state)
pdm = $HistoryAvailable && $InfoAvailable
hipstask = (#eDriver == ObjectType) && $HistoryAvailable && $InfoAvailable
SW2 = (Action != #PDM2_ACTION_ROLLBACK) && (nPID != 0) && $InfoAvailable
def = false
[s_IsWebSource]
2
3 = true
def = false
[f_ProgramNameEx]
p_ImagePath, p_pid
ret = if(p_pid != 0, f_ProcessInfo(p_pid).Module.sDescription + " (" + objfile(p_ImagePath) + ": " + p_pid + ")", objfile(p_ImagePath))
[s_HistoryFilter]
FilterRegistry = "s_SWObjectType(nType) == #eRegKey"
FilterFile = "s_SWObjectType(nType) == #eFile"
FilterProc = "s_SWObjectType(nType) == #eProcess"
def = ""
[s_IsFileAccess]
#evtLLFSAccess
#evtLLDiskAccess = false
def = true
[f_AlertDialogTroubleHips]
ret = s_AlertDialogTroubleHipsTask(Action)
[s_AlertDialogTroubleHipsTask]
#evtDrvStart = "" + if(!appID, $UnknownApp + " ") + s_ActionInTime(@) + "" + s_ActionV(@)
#evtAddAppToGr = f_appDenyStartReason()
def = $AlertAppGroupEx + s_ActionInTime(@) + s_ActionV(Action, ObjectName, ObjectType) + "." + $IfTrusted
[f_Customers]
ret = s_Customers(if(@ < 10, 0, if(@ < 100, 1, if(@ < 1000, 2, if(@ < 10000, 3, if(@ < 100000, 4, if(@ < 1000000, 5, 6)))))))
[f_DetectBehaviour]
p_TaskType, p_DetectBehaviour, p_DetectType
$HttpScanDetectBehaviour = p_DetectType == #DETYPE_PHISHING ? 1000 : (p_DetectType == #DETYPE_MALWARE ? 1001 : p_DetectBehaviour)
ret = p_TaskType == "httpscan" ? $HttpScanDetectBehaviour : p_DetectBehaviour
[f_DetectBehaviourString]
p_TaskType, p_DetectBehaviour, p_DetectType
ret = s_DetectBehaviour(f_DetectBehaviour(p_TaskType, p_DetectBehaviour, p_DetectType))
[f_BehaviourDetails]
p_TaskType, p_DetectBehaviour, p_DetectType
ret = s_BehaviourDetails(f_DetectBehaviour(p_TaskType, p_DetectBehaviour, p_DetectType))
[f_HttpDetectPhishOrWmuf]
ret = (TaskType == "httpscan" && (#DETYPE_PHISHING == DetectType || #DETYPE_MALWARE == DetectType)) ? 1 : 0
[s_VirusListLink]
httpscan = DetectType == #DETYPE_PHISHING ? $VirusListPhishingLink : if(#DETYPE_MALWARE == DetectType, $VirusListMalwareLink, $VirusListThreatLink)
def = $VirusListThreatLink
[f_ToBoldText]
ret = if(@1, "" + @ + "", @)
[f_showMainWindow]
ret = if(EulaVerified, IsSilentMode = false); if(EulaVerified, window(@, p_postInit(@1)), $ShowEulaEx)
[s_ObjectStatusExcludable]
#OBJSTATUS_INFECTED
#OBJSTATUS_SUSPICION
#OBJSTATUS_NOTDISINFECTED
#OBJSTATUS_UNTREATABLE = true
default = false
[s_GroupByDetectType]
; Macros like #ObjectURL and #DETYPE_URGENT do not work in groups so use exact numbers
;#DETYPE_MALWARE = (ObjectType == #ObjectURL) ? #DETYPE_PHISHING : #DETYPE_MALWARE
#DETYPE_MALWARE = (ObjectType == 0x00010006) ? 70 : 3
;#DETYPE_BEHAVIORAL = #DETYPE_URGENT
#DETYPE_BEHAVIORAL = 90
default = @
;---------- Dashboard -----------------------------------------------
[s_BSP2UBSP]
#eBSP_Actual = #eUBSP_Actual
#eBSP_Corrupted = #eUBSP_Corrupted
#eBSP_VeryOld = #eUBSP_VeryOld
#eBSP_Old = #eUBSP_Old
#eBSP_OldInGracePeriod = #eUBSP_OldInGracePeriod
#eBSP_UpdatedAndRebootNeeded = #eUBSP_UpdatedAndRebootNeeded
#eBSP_UpdatedAndProductRestartNeeded = #eUBSP_UpdatedAndProductRestartNeeded
#eBSP_SomeBasesNeedUpdate = #eUBSP_SomeBasesNeedUpdate
[s_Update_menu_Settings]
#eUBSP_Actual = 0
#eUBSP_Corrupted = 1
#eUBSP_VeryOld = 1
#eUBSP_UpdatedAndRebootNeeded = 0
#eUBSP_UpdatedAndProductRestartNeeded = 0
#eUBSP_Old = 1
#eUBSP_SomeBasesNeedUpdate = 1
#eUBSP_OldInGracePeriod = 1
#eUBSP_UpdateRunning = 0
#eUBSP_RollbackRunning = 0
[s_Update_menu_Report]
#eUBSP_Actual = 0
#eUBSP_Corrupted = 0
#eUBSP_VeryOld = 1
#eUBSP_UpdatedAndRebootNeeded = 0
#eUBSP_UpdatedAndProductRestartNeeded = 0
#eUBSP_Old = 1
#eUBSP_SomeBasesNeedUpdate = 0
#eUBSP_OldInGracePeriod = 1
#eUBSP_UpdateRunning = 0
#eUBSP_RollbackRunning = 0
[s_DashboardMenuItem]
Protection = "MenuBtn.Protection.menu"
Threats = "MenuBtn.Threats.menu"
Update = "MenuBtn.Update.menu"
Recommendations = "MenuBtn.Recommendations.menu"
[f_getProtectionState]
ret = getProtectionState()
[f_getLicenseState]
ret = getLicenseState()
[f_getThreatsState]
ret = getThreatsState()
[f_getRecommendations]
ret = if( isManualUpdateMode(), #eManualUpdateMode, if(isAntiSpamNeedTraining(), #eAntiSpamRecommendTraining, #eNoRecommendations ) )
[f_UnionBasesState]
ret = if( \
getUpdatingState() == #eUSP_RollbackRunning, #eUBSP_RollbackRunning, \
if(getUpdatingState() != #eUSP_Idle, #eUBSP_UpdateRunning, \
s_BSP2UBSP(getBasesState()) ) )
[s_Dashboard_statuses_Problems]
#eProtStateNormal = 0
#eProtStateWarn = 1
#eProtStateCrit = 2
[s_Dashboard_statuses]
Protection = s_Dashboard_statuses_Protection(f_getProtectionState())
Threats = s_Dashboard_statuses_Threats(f_getThreatsState())
Update = s_Dashboard_statuses_Update(f_UnionBasesState())
License = s_Dashboard_statuses_License(f_getLicenseState())
Recommendations = 3
Problems = s_Dashboard_statuses_Problems(s_ProdStateSeverity(nStateId))
[s_Dashboard_statuses_desc]
Protection = s_Dashboard_statuses_desc_Protection(f_getProtectionState())
Threats = s_Dashboard_statuses_desc_Threats(f_getThreatsState())
Update = s_Dashboard_statuses_desc_Update(f_UnionBasesState())
License = s_Dashboard_statuses_desc_License(f_getLicenseState())
Recommendations = s_Dashboard_statuses_desc_Recommendations(f_getRecommendations())
Problems = s_RemoteProductComputerStateText(s_ProdStateSeverity(nStateId))
[s_Dashboard_Actions]
Protection = s_Dashboard_Actions_Protection(f_getProtectionState())
Threats = s_Dashboard_Actions_Threats(f_getThreatsState())
Update = s_Dashboard_Actions_Update(f_UnionBasesState())
License = $ShowLicenseManager
Recommendations = s_Dashboard_Actions_Recommendations(f_getRecommendations())
Problems = product.Local ? window("QMLProblemList") : windowDlg("QMLRemoteProblemList")
[s_Dashboard_Actions_Btn_text]
Protection = s_Dashboard_Actions_Btn_text_Protection(f_getProtectionState())
Threats = ""
Update = s_Dashboard_Actions_Btn_text_Update(f_UnionBasesState())
License = s_Dashboard_Actions_Btn_text_License(0)
Recommendations = ""
Problems = s_RemoteProductComputerButtonText(s_ProdStateSeverity(nStateId))
[s_Dashboard_Actions_SplitBtn_text]
Protection = s_Dashboard_Actions_SplitBtn_text_Protection(f_getProtectionState())
Threats = s_Dashboard_Actions_SplitBtn_text_Threats(f_getThreatsState())
Update = s_Dashboard_Actions_SplitBtn_text_Update(f_UnionBasesState())
License = ""
Recommendations = s_Dashboard_Actions_SplitBtn_text_Recommendations(f_getRecommendations())
[s_Dashboard_statuses_Update]
#eUBSP_Actual = 0
#eUBSP_Corrupted = 2
#eUBSP_VeryOld = 2
#eUBSP_UpdatedAndRebootNeeded = 1
#eUBSP_UpdatedAndProductRestartNeeded = 1
#eUBSP_Old = 1
#eUBSP_SomeBasesNeedUpdate = 0
#eUBSP_OldInGracePeriod = 0
#eUBSP_UpdateRunning = 0
#eUBSP_RollbackRunning = 1
[s_Dashboard_Actions_Update]
#eUBSP_UpdatedAndRebootNeeded = f_RestartOs()
#eUBSP_UpdatedAndProductRestartNeeded = f_RestartApp()
#eUBSP_UpdateRunning = if(f_checkNoFeatures(), f_setState(#TASK_REQUEST_STOP, "Updater"))
#eUBSP_RollbackRunning = if(f_checkNoFeatures(), f_setState(#TASK_REQUEST_STOP, "Rollback"))
#eUBSP_Corrupted
#eUBSP_VeryOld
#eUBSP_Old
#eUBSP_SomeBasesNeedUpdate
#eUBSP_OldInGracePeriod = if(f_checkNoFeatures(), f_setState(#TASK_REQUEST_RUN, "Updater"))
[s_Dashboard_statuses_Protection]
#eProtectionStateMainComponentsMalfunction = 2
#eProtectionStateFileAvDisabled = 2
#eProtectionStateProtectionPaused = 2
#eProtectionStateProtectionDisabled = 2
#eProtectionStateNetworkTrafficBlocked = 1
#eProtectionStateSelfProtectionDisabled = 1
#eProtectionStateMainComponentsDisabled = 1
#eProtectionStateAuxComponentsMalfunction = 1
#eProtectionStateAutorunDisabled = 1
#eProtectionStateProtectionSafeMode = 1
#eProtectionStateAllComponentsEnabled = 0
#eProtectionStateMainComponentsEnabled = 0
[s_Dashboard_Actions_Protection]
#eProtectionStateMainComponentsMalfunction = url($HelpURLSettingsIdleScan)
#eProtectionStateFileAvDisabled = if(f_checkNoFeatures(), setstate(#TASK_REQUEST_RUN, "File_Monitoring"))
#eProtectionStateProtectionPaused = if(f_checkNoFeatures(), setstate(#TASK_REQUEST_RUN, "Protection"))
#eProtectionStateProtectionDisabled = if(f_checkNoFeatures(), setstate(#TASK_REQUEST_RUN, "Protection"))
#eProtectionStateNetworkTrafficBlocked = if(f_checkNoFeatures(), (Hips.FirewallSettings.WorkingMode = #fwAllow))
#eProtectionStateSelfProtectionDisabled = (EnableSelfProtection = true)
#eProtectionStateMainComponentsDisabled = if(f_checkNoFeatures(), (enable(true, "Protection"); setstate(#TASK_REQUEST_RUN, "Protection")))
#eProtectionStateAuxComponentsMalfunction =
#eProtectionStateAutorunDisabled = (RunAtSystemStartup = true)
#eProtectionStateProtectionSafeMode = f_RestartOs()
#eProtectionStateAllComponentsEnabled =
#eProtectionStateMainComponentsEnabled = if(f_checkNoFeatures(), window("ProtectionComponents", $ModalIfRemote))
[s_Dashboard_statuses_Threats]
#eDBThreatsRebootNeeded = 2
#eDBThreatsMalwareUntreated = 2
#eDBThreatsSuspiciousUntreated = 1
#eDBThreatsRiskwareUntreated = 1
#eDBThreatsFullScanNeeded = 0
#eDBThreatsCleanupNeeded = 0
#eDBThreatsNoThreats = 0
[s_Dashboard_Actions_Threats]
#eDBThreatsRebootNeeded = f_RestartOs()
#eDBThreatsMalwareUntreated =
#eDBThreatsSuspiciousUntreated =
#eDBThreatsRiskwareUntreated = threatNeutralizeActive()
#eDBThreatsFullScanNeeded = 0
#eDBThreatsCleanupNeeded = 0
#eDBThreatsNoThreats = 0
[s_Dashboard_statuses_License]
#ProdStateKeyTrial = 0
#ProdStateLicenseNotificationWarning = 1
#ProdStateKeyWillBeExpired = 1
#ProdStateKeyGracePeriod = 2
#ProdStateKeyAboutExpiration = 2
#ProdStateKeyExpired = 2
#ProdStateKeyTrialExpired = 2
#ProdStateKeyBlocked = 2
#ProdStateNoKeys = 2
#ProdStateKeyInvalid = 2
#ProdStateKeyLimited = 2
#ProdStateLicenseNotificationCritical = 2
#ProdStateKeyUpdateFailed = 2
#ProdStatePreinstalledCodeWaitActivationCritical = 2
#ProdStateKeySuspended = 2
#ProdStateKeyWaitReservedActivationCritical = 2
#ProdStateKeyReservedActivationProblem = 2
#ProdStateKeyInvalidReserveCode = 0
#ProdStateKeyWaitReservedActivationInfo = 0
#ProdStateLicenseNotificationInfo = 0
#ProdStatePreinstalledCodeWaitActivationInfo = 0
#ProdStatePreinstalledCodeActivationProblem = 2
[s_Dashboard_statuses_Recommendations]
def = 0
[s_Dashboard_Actions_Recommendations]
#eAntiSpamRecommendTraining = if(f_checkNoFeatures(), f_StartAntiSpamTrainingWizard())
#eManualUpdateMode = (Updater.schedule.Mode = #schmAuto); savesettings()
[f_IsCtlExistAndVisible]
ret = var pElement; pElement = ctl.top.ctlFind(@0); pElement.id && pElement.visible
[f_IsCtlExistAndHide]
ret = var pElement; pElement = ctl.top.ctlFind(@0); pElement.id && (!pElement.visible)