[Global] #eProtStateNormal = 0 #eProtStateWarn = 1 #eProtStateCrit = 2 #eVulnerabilityDetected = 0x01 #ePheashingDetected = 0x02 #eAttackBlocked = 0x04 #eAllTreated = 0x08 #eAntiSpamNeedTraining = 0x10 #eThreatsNeedReboot = 0x40 #eThreatsMalwareUntreated = 0x80 #eThreatsRiskwareUntreated = 0x100 #eOnBatteriesScanOff = 0x01 #eScanRunning = 0x02 #eTasksNotRunning = 0x08 #eTasksDisabled = 0x10 #eTasksMalfunction = 0x20 #eProtectionNotRunnig = 0x40 #eProtectionDisabled = 0x80 #eProtectionSafeMode = 0x100 #eProtectionNotInstalled = 0x200 ; Product states #ProdStateProductNews = 1 #ProdStateProductNotAutoRun = 2 #ProdStateProductAdminPolicy = 3 #ProdStateProductNotProtected = 4 #ProdStateTasksDisabledByPolicy = 5 #ProdStateProductIsBeta = 6 #ProdStateProductNeedRestart = 7 #ProdStateProductNoEula = 8 ; License states #ProdStateKeyTrial = 33 #ProdStateLicenseNotificationWarning = 34 #ProdStateKeyWillBeExpired = 35 #ProdStateKeyGracePeriod = 36 #ProdStateKeyAboutExpiration = 37 #ProdStateKeyExpired = 38 #ProdStateKeyTrialExpired = 39 #ProdStateKeyBlocked = 40 #ProdStateNoKeys = 41 #ProdStateKeyInvalid = 42 #ProdStateKeyLimited = 43 #ProdStateLicenseNotificationCritical = 44 #ProdStateKeyUpdateFailed = 45 #ProdStatePreinstalledCodeWaitActivationCritical = 46 #ProdStateKeySuspended = 47 #ProdStateKeyWaitReservedActivationCritical = 48 #ProdStateKeyReservedActivationProblem = 49 #ProdStateKeyInvalidReserveCode = 50 #ProdStateKeyWaitReservedActivationInfo = 51 #ProdStateLicenseNotificationInfo = 52 #ProdStatePreinstalledCodeWaitActivationInfo = 53 #ProdStatePreinstalledCodeActivationProblem = 54 ; Protection state #ProdStateFirewallBlockAll = 65 #ProdStateTasksNotRunning = 67 #ProdStateTasksDisabled = 68 #ProdStateTasksMalfunction = 69 #ProdStateProtectionNotRunning = 70 #ProdStateProtectionDisabled = 71 #ProdStateProtectionSafeMode = 72 #ProdStateProtectionNotInstalled = 73 #ProdStateHighRiskTasksNotRunning = 74 #ProdStateHighRiskTasksDisabled = 75 ; Update state #ProdStateUpdateNotAuto = 97 #ProdStateSomeBasesNeedUpdate = 98 #ProdStateBasesVeryOldGrace = 99 #ProdStateBasesVeryOld = 100 #ProdStateBasesOldGrace = 101 #ProdStateBasesOld = 102 #ProdStateUpdateNeedReboot = 103 #ProdStateBasesCorrupted = 104 #ProdStateBackupNoTasks = 110 #ProdStateBackupTaskNotFinished = 111 #ProdStateBackupTaskFailed = 112 #ProdStateBackupTaskRunning = 113 ; Threats state #ProdStateAntiSpamNeedTraining = 129 #ProdStateThreatsNeedReboot = 130 #ProdStateThreatsMalwareUntreated = 131 #ProdStateThreatsRiskwareUntreated = 132 #ProdStateThreatsSuspiciousUntreated = 133 ; Parental control state #ProdStateParctlNeverRun = 161 #ProdStateParctlNotRunning = 162 #ProdStateParctlNoPass = 163 #ProdStateMax = 224 #ProdStateSomeSkipped = 10000 #ProdStateAllOk = 0 ProductStateSeverity = s_ProdStateSeverity(nVal1) GadgetProtectionStateText = s_ProdState_Threats(s_ProdStateSeverity(nVal1), nVal1) $IsActiveGreenPeriod = ( $IsActiveKeyTrial && bindok("product.SupportCustom.GreenPeriod") && (product.LicInfo.LicUsageDays <= product.SupportCustom.GreenPeriod ) ) #eNotifySeverityCritical = 1 #eNotifySeverityError = 2 #eNotifySeverityImportant = 3 #eNotifySeverityNotImportant = 4 $NotifyEventSeverity = s_VerdictIcon2ProdStateSeverity(s_VerdictIcon(Verdict)) $IsBasesOk = (global.UpdateState <= #eUpdateNotAuto || f_isGracePeriodForUpdateState(global.UpdateState)) $DetectTypeEx = (DetectType == #DETYPE_VULNERABILITY ? f_VulnerUrl(DetectName) : ((ObjectType == #ObjectURL) ? capitalize(s_DetectTypeShort(DetectType)) : (DetectName ? DetectName : objfile(ObjectName)))) ; ePasswordConfirmReason #pwdc_CheckAlways = -1 #pwdc_OpenWindow = 0 #pwdc_SaveSettings = 1 #pwdc_StopTask = 2 #pwdc_Exit = 3 #pwdc_StopService = 4 #pwdc_Activate = 5 #pwdc_SaveStateAndSettings = 6 #pwdc_StartTask = 7 #pwdc_OpenBackup = 8 #pwdc_OpenConsole = 9 #pwdc_OpenParctl = 10 ; f_GetTypeOfTime - ��������� �������, ��� ���������� #ePeriodDay = 0 #ePeriodWeek = 1 #ePeriodMonth = 2 #ePeriodYear = 3 $TreatIcon_High = "ObjectStatus,3" $TreatIcon_Med = "ObjectStatus,2" $TreatIcon_Inactive = "ObjectStatus,0" $TreatIcon_Clean = "ObjectStatus,0" $TreatIcon_Cured = "ObjectStatus,0" $TreatIcon_CuredDelayed = "ObjectStatus,1" $IsSandBoxNotification = (PID && PID != #PIDProduct && PID != #PIDSystem && f_isSandboxed(PID)) QBOperationError = s_QBOperationsError(OperationCode) ProductEventSeverityText = s_ProductEventSeverityText(Severity) + ": " ; alert macro cAskObjectAction::Actions #AlertActionActiveDetect = 0xf0804 #AlertActionDisinfect = 0xf0800 $AlertAppLink = (appID ? "" + s_AppName(appID) + "" : $UnknownApp) $AlertImgPathLink = "" + objfile(sImagePath) + "" $AlertAppInfoStruct = nDestPID > 0 ? f_ProcessInfo(nDestPID).Module : appInfo(@1) ; Please don't extend this heap of shit. Instead, specify #ACTION_ADD_EXCLUDE in ActionsAll $ActionUseToExclude = s_IsUseableToExclude(TaskType) && (nActionID != #AlertActionActiveDetect) $ActionNoEx = (TaskType == "pdm" && Action == #PDM2_ACTION_BLOCKED_APP_START) $UseApplyToAll = !(ApplyToAll & #APPLYTOALL_NONE) && ($ActionNoEx || TaskType=="ods" || TaskType=="avs" || (TaskID!=#eTASK_AP && (nPID == 0 || DetectType!=#DETYPE_RISKWARE))) && (TaskType!="SW2") && (TaskType!="InstallKey") $g_phish1 = (f_IsStateRunningOK(Web_Monitoring.state) && httpscan.HTTPSettings.UseAntiphishing) $g_phish2 = (f_IsStateRunningOK(IM_Monitoring.state) && IM_Monitoring.UseAntiphishing) $g_phish3 = (f_IsStateRunningOK(Anti_Spam.state) && Anti_Spam.UseAntiphishing) $g_antiphishInstall = f_isInstalled("IM_Monitoring") || f_isInstalled("Web_Monitoring") || f_isInstalled("Anti_Spam") ;$g_antiphishAll = ($g_phish1 || !f_isInstalled("Web_Monitoring")) && ($g_phish2 || !f_isInstalled("IM_Monitoring")) && ($g_phish3 || !f_isInstalled("Anti_Spam")) && $g_antiphishInstall $g_antiphishAll = (!f_isInstalled("Web_Monitoring") || $g_phish1) && (!f_isInstalled("IM_Monitoring") || $g_phish2) && (!f_isInstalled("Anti_Spam") || $g_phish3) $g_antiphishAny = $g_phish1 || $g_phish2 || $g_phish3 #green = 1 #gray = 2 #red = 3 #warn = 4 #INV_EVENT_TYPE_FILE_OPEN = 1 #INV_EVENT_TYPE_FILE_CLOSE = 2 #INV_EVENT_TYPE_FILE_DELETE = 3 #INV_EVENT_TYPE_FILE_RENAME = 4 #INV_EVENT_TYPE_PROCESS_CREATE = 5 #INV_EVENT_TYPE_PROCESS_EXIT = 6 #INV_EVENT_TYPE_PROCESS_TERMINATE = 7 #INV_EVENT_TYPE_REGYSTRY_KEY_CREATE = 8 #INV_EVENT_TYPE_REGYSTRY_KEY_DELETE = 9 #INV_EVENT_TYPE_REGYSTRY_VALUE_SET = 10 #INV_EVENT_TYPE_REGYSTRY_VALUE_DELETE = 11 #INV_FLAG_CREATE = 0x1 #INV_FLAG_MODIFY = 0x2 $HasKsnInfo = UseKSN && f_isHipsGroup() && !s_HipsSelfAction(Action) $AlertDialogAppInfo = dialog("AppRulesEdit", p_appID(appID), p_pid(nPID), p_image(sImagePath)) $PdmDriverObject = TaskType == "pdm" && 0 == nPID $IsExactDetect = if(TaskType == "pdm", false, #DETDANGER_HIGH == DetectDanger) ; Warning! The following string contains special Unicode symbol, invisible in normal text. ; temporarily comment out to fix TFS bug #59256 ;$LtrMark = "‎" $LtrMark = "" [f_isGracePeriodForUpdateState] ret = (global.UpdateState & (#eBasesVeryOldGrace | #eBasesOldGrace)) [f_antiphishOnOff] $l_phishWebFail = (Web_Monitoring.state == #StateFailed && httpscan.HTTPSettings.UseAntiphishing) $l_phishIMFail = (IM_Monitoring.state == #StateFailed && IM_Monitoring.UseAntiphishing) $l_phishASFail = (Anti_Spam.state == #StateFailed && Anti_Spam.UseAntiphishing) $l_antiphishAllFail = ($l_phishWebFail || !f_isInstalled("Web_Monitoring")) && ($l_phishIMFail || !f_isInstalled("IM_Monitoring")) && ($l_phishASFail || !f_isInstalled("Anti_Spam")) ;$l_antiphishAllOff = (!($g_phish1) || !f_isInstalled("Web_Monitoring")) && (!($g_phish2) || !f_isInstalled("IM_Monitoring")) && (!($g_phish3) || !f_isInstalled("Anti_Spam")) $l_antiphishAllOff = ((!$g_phish1) && (!$g_phish2) && (!$g_phish3)) ret = $l_antiphishAllFail ? #red : ($g_antiphishAll ? #green : ($l_antiphishAllOff ? #gray : #warn) ) [f_IsAntiphishStateRunning] ret = var nState; nState = f_antiphishOnOff(); nState == #green || nState == #red [s_EnableAntiPhishing] #red = httpscan.HTTPSettings.UseAntiphishing = false;IM_Monitoring.UseAntiphishing = false;Anti_Spam.UseAntiphishing = false;enable(false, "IM_Monitoring"); enable(false,"Web_Monitoring"); enable(false,"Anti_Spam") #green = httpscan.HTTPSettings.UseAntiphishing = false;IM_Monitoring.UseAntiphishing = false;Anti_Spam.UseAntiphishing = false #warn = httpscan.HTTPSettings.UseAntiphishing = false;IM_Monitoring.UseAntiphishing = false;Anti_Spam.UseAntiphishing = false #gray = httpscan.HTTPSettings.UseAntiphishing = true;IM_Monitoring.UseAntiphishing = true;Anti_Spam.UseAntiphishing = true;enable(true, "IM_Monitoring"); enable(true,"Web_Monitoring"); enable(true,"Anti_Spam") def = @ [s_IsUseableToExclude] pdm = s_PdmActionToExclude(Action) oas ods avs = 0 != nPID && !($IsExactDetect) SW2 = Action != #PDM2_ACTION_ROLLBACK default = false [s_PdmActionToExclude] #PDM2_ACTION_ROLLBACK #PDM2_ACTION_BLOCKED_APP_START ; in KIS2011 'Allow' add to excludes when Action == #evtDrvStart #evtDrvStart = false default = s_PdmEventToExclude(EventType) [s_PdmEventToExclude] ; always no #PDM2_EVENT_NEGATIVE_PID #PDM2_EVENT_HIDDEN_OBJ = false ;always yes #PDM2_EVENT_IRP_TABLE_CHANGED #PDM2_EVENT_KEYLOGGER = true ;depends Action default = 0 != nPID && DetectType==#DETYPE_RISKWARE [s_VerdictPathMask] pdm = AdditionalInfo [s_VerdictIcon2ProdStateSeverity] crit = #eProtStateCrit med = #eProtStateWarn def = #eProtStateNormal [s_IsEventObjClickable] #evtPrtStgAccess = #evtUseBITS = #evtUseDNS = 0 default = !Verdict [s_TrayProductStateList] #ProdStateProtectionDisabled [s_ProductStateList] #ProdStateProductNoEula #ProdStateKeyBlocked #ProdStateKeyInvalid #ProdStateKeyLimited #ProdStateKeyTrialExpired #ProdStateKeyExpired #ProdStateKeySuspended #ProdStateKeyUpdateFailed #ProdStateNoKeys #ProdStatePreinstalledCodeActivationProblem #ProdStatePreinstalledCodeWaitActivationCritical #ProdStateKeyWaitReservedActivationCritical #ProdStateKeyReservedActivationProblem #ProdStateKeyInvalidReserveCode #ProdStateThreatsNeedReboot ;#ProdStateProductAdminPolicy #ProdStateThreatsMalwareUntreated #ProdStateBasesCorrupted #ProdStateBasesVeryOld #ProdStateKeyAboutExpiration #ProdStateLicenseNotificationCritical #ProdStateKeyGracePeriod #ProdStateTasksMalfunction #ProdStateHighRiskTasksDisabled #ProdStateHighRiskTasksNotRunning #ProdStateProtectionNotRunning #ProdStateProtectionDisabled #ProdStateFirewallBlockAll #ProdStateProductNotProtected #ProdStateUpdateNeedReboot #ProdStateProductNeedRestart #ProdStateBasesOld #ProdStateThreatsSuspiciousUntreated #ProdStateThreatsRiskwareUntreated #ProdStateTasksDisabled #ProdStateTasksNotRunning #ProdStateKeyWillBeExpired #ProdStateLicenseNotificationWarning #ProdStateBasesVeryOldGrace #ProdStateBasesOldGrace #ProdStateSomeBasesNeedUpdate #ProdStateKeyWaitReservedActivationInfo #ProdStateLicenseNotificationInfo #ProdStatePreinstalledCodeWaitActivationInfo #ProdStateKeyTrial #ProdStateProductNotAutoRun #ProdStateUpdateNotAuto #ProdStateProtectionSafeMode #ProdStateBackupTaskFailed #ProdStateBackupTaskRunning #ProdStateBackupTaskNotFinished #ProdStateAntiSpamNeedTraining #ProdStateProductIsBeta #ProdStateBackupNoTasks #ProdStateParctlNeverRun #ProdStateParctlNotRunning #ProdStateParctlNoPass #ProdStateSomeSkipped [s_ProductStateList_Threats] #ProdStateThreatsMalwareUntreated #ProdStateThreatsRiskwareUntreated #ProdStateThreatsNeedReboot [s_ProductProtectionStateList] #ProdStateThreatsNeedReboot #ProdStateThreatsMalwareUntreated #ProdStateBasesCorrupted #ProdStateBasesNotActual = !$IsBasesGreenPeriod #ProdStateTasksMalfunction #ProdStateHighRiskTasksDisabled #ProdStateHighRiskTasksNotRunning #ProdStateProtectionNotRunning #ProdStateProtectionDisabled #ProdStateFirewallBlockAll #ProdStateProductNotProtected #ProdStateUpdateNeedReboot #ProdStateBasesOutOfDate = !$IsBasesGreenPeriod #ProdStateThreatsRiskwareUntreated #ProdStateTasksDisabled #ProdStateTasksNotRunning #ProdStateProductNotAutoRun #ProdStateUpdateNotAuto #ProdStateThreatsNeedFullScanAfterAD #ProdStateThreatsNeedAVZCleanupAfterAD #ProdStateProtectionSafeMode #ProdStateBasesNotActual = $IsBasesGreenPeriod #ProdStateBasesOutOfDate = $IsBasesGreenPeriod #ProdStateAntiSpamNeedTraining [s_ProductBackupStateList] #ProdStateBackupNoTasks #ProdStateBackupTaskNotFinished #ProdStateBackupTaskFailed #ProdStateBackupTaskRunning [s_ProductParctlStateList] #ProdStateParctlNeverRun #ProdStateParctlNotRunning #ProdStateParctlNoPass [s_IsLicInvalidReason_NeedUpdate] #ekirInvalidBlacklist #ekirInconsistentUpdate = 1 default = 0 [s_ProductLinkText] #ProdStateProductNoEula = $LinkAcceptEula #ProdStateProductNeedRestart = $LinkRestartProduct #ProdStateKeyBlocked = $LinkTechnicalSupport #ProdStateKeyInvalid = s_IsLicInvalidReason_NeedUpdate(LicInfo.InvalidReason) ? if(f_isInstalled("Updater"), $LinkUpdateNow) : $LinkMoreDetails #ProdStateKeyLimited = $LicenseManager #ProdStateKeyTrialExpired #ProdStateKeyExpired #ProdStateNoKeys = $LinkActivate #ProdStateKeySuspended #ProdStateKeyUpdateFailed = $LinkUpdateSubsriptionStatus #ProdStateProtectionSafeMode #ProdStateThreatsNeedReboot #ProdStateUpdateNeedReboot = if(product.Local, $LinkRestartComputer) #ProdStateThreatsMalwareUntreated #ProdStateThreatsSuspiciousUntreated #ProdStateThreatsRiskwareUntreated = if(product.Local, $LinkMoreDetails) #ProdStateProductNotProtected = $LinkProtect #ProdStateProductNotAutoRun = $LinkAutoRun #ProdStateBasesCorrupted #ProdStateSomeBasesNeedUpdate #ProdStateBasesVeryOldGrace #ProdStateBasesVeryOld #ProdStateBasesOldGrace #ProdStateBasesOld = $IsKAT ? $LinkProductBundleDownload : (s_IsFunctionalityLevel_Updater(getUpdaterLevel()) ? if(f_isInstalled("Updater"), $LinkUpdateNow) : $LinkActivate) #ProdStateKeyWillBeExpired #ProdStateKeyGracePeriod #ProdStateKeyAboutExpiration = $LicensingSubsystem #ProdStateLicenseNotificationInfo #ProdStateLicenseNotificationWarning #ProdStateLicenseNotificationCritical = activeLicNotif(#ActiveLicNotifActionName) ? activeLicNotif(#ActiveLicNotifActionName) : $LicensingSubsystem #ProdStateTasksMalfunction = if(product.Local, $LinkRepairInstall) #ProdStateProtectionNotRunning #ProdStateProtectionDisabled = $LinkProtectionTurnOn #ProdStateHighRiskTasksDisabled #ProdStateTasksDisabled = $LinkServicesTurnOn #ProdStateHighRiskTasksNotRunning #ProdStateTasksNotRunning = $LinkServicesResume #ProdStateKeyTrial = $LinkGetFullLicense #ProdStateAntiSpamNeedTraining = if(product.Local, $LinkStartAntiSpamTrainingWizard) #ProdStateFirewallBlockAll = $LinkFirewallUnBlock #ProdStateProductIsBeta = if(!$IsRD, $BetaForumLinkCaption) #ProdStateSomeSkipped = $LinkProdStateSomeSkipped #ProdStateUpdateNotAuto = $LinkAutoUpdateTurnOn #ProdStateBackupTaskNotFinished #ProdStateBackupTaskFailed = $ProductLinkText_Backup_RunNotCompletedTasks #ProdStateBackupNoTasks = if(product.Local, $ProductLinkText_Backup_OpenBackup, "") #ProdStateBackupTaskRunning = if(product.Local, $ProductLinkText_Backup_OpenBackup, "") #ProdStatePreinstalledCodeActivationProblem #ProdStatePreinstalledCodeWaitActivationInfo #ProdStatePreinstalledCodeWaitActivationCritical #ProdStateKeyWaitReservedActivationInfo #ProdStateKeyWaitReservedActivationCritical #ProdStateKeyReservedActivationProblem #ProdStateKeyInvalidReserveCode = $LinkMoreDetails [s_ProductLinkClick] #ProdStateProductNoEula = $ShowEulaEx #ProdStateProductNeedRestart = f_RestartApp() #ProdStateKeyBlocked = url($SupportLink) #ProdStateKeyInvalid = s_IsLicInvalidReason_NeedUpdate(LicInfo.InvalidReason) ? f_StartUpdater() : $ShowLicenseManager #ProdStateKeyLimited = $ShowLicenseManager #ProdStateKeyTrialExpired #ProdStateKeyExpired #ProdStateNoKeys #ProdStateKeySuspended = $IsSubscription? $ShowLicenseManager : f_Activate() #ProdStateKeyUpdateFailed = $IsSubscription? update_subscr_status() : f_Activate() #ProdStateProtectionSafeMode #ProdStateThreatsNeedReboot #ProdStateUpdateNeedReboot = f_RestartOs() #ProdStateThreatsMalwareUntreated #ProdStateThreatsSuspiciousUntreated #ProdStateThreatsRiskwareUntreated = window("QMLProblemList") #ProdStateProductNotProtected = f_TurnSelfProtectionOn() #ProdStateProductNotAutoRun = f_RunAtStartup() #ProdStateBasesCorrupted #ProdStateSomeBasesNeedUpdate #ProdStateBasesVeryOldGrace #ProdStateBasesVeryOld #ProdStateBasesOldGrace #ProdStateBasesOld = $IsKAT ? url(env("ProductBundleDownloadLink")) : (s_IsFunctionalityLevel_Updater(getUpdaterLevel()) ? f_StartUpdater() : f_Activate()) #ProdStateKeyWillBeExpired = $ShowLicenseManager #ProdStateKeyGracePeriod #ProdStateKeyAboutExpiration = $ShowLicenseManager #ProdStateLicenseNotificationInfo #ProdStateLicenseNotificationCritical #ProdStateLicenseNotificationWarning = activeLicNotif(#ActiveLicNotifActionName) ? f_licenseAction(activeLicNotif(#ActiveLicNotifActionType), activeLicNotif(#ActiveLicNotifURL)) : $ShowLicenseManager #ProdStateTasksMalfunction = f_repairProduct() #ProdStateProtectionNotRunning = setstate(#TASK_REQUEST_RUN, "Protection") #ProdStateHighRiskTasksDisabled #ProdStateTasksDisabled #ProdStateProtectionDisabled #ProdStateHighRiskTasksNotRunning #ProdStateTasksNotRunning = enable(true, "Protection"); setstate(#TASK_REQUEST_RUN, "Protection") #ProdStateKeyTrial = buy() #ProdStateAntiSpamNeedTraining = f_StartAntiSpamTrainingWizard() #ProdStateFirewallBlockAll = Hips.FirewallSettings.WorkingMode = #fwAllow #ProdStateProductIsBeta = url(env("ForumLink") + "//index.php?showforum=" + $BetaForumLinkSuffix) #ProdStateSomeSkipped = prodStateEnable(-1) #ProdStateUpdateNotAuto = autoUpdatesOn() #ProdStateBackupTaskNotFinished #ProdStateBackupTaskFailed = runNotCompletedTasks("backup") #ProdStateBackupNoTasks = if(checkPassword(#pwdc_OpenBackup), window("BackupMainWindow_Dlg")) #ProdStateBackupTaskRunning = if(checkPassword(#pwdc_OpenBackup), window("BackupMainWindow_Dlg")) #ProdStatePreinstalledCodeActivationProblem #ProdStatePreinstalledCodeWaitActivationInfo #ProdStatePreinstalledCodeWaitActivationCritical #ProdStateKeyWaitReservedActivationInfo #ProdStateKeyWaitReservedActivationCritical #ProdStateKeyReservedActivationProblem #ProdStateKeyInvalidReserveCode = $ShowLicenseManager [s_ProductLinkText2] #ProdStateThreatsMalwareUntreated #ProdStateThreatsSuspiciousUntreated #ProdStateThreatsRiskwareUntreated = $LinkMoreDetails #ProdStateTasksMalfunction = $LinkSupport #ProdStateBackupTaskNotFinished ;#ProdStateBackupTaskRunning #ProdStateBackupTaskFailed = if(product.Local, $ProductLinkText_Backup_OpenBackup, "") [s_ProductLinkClick2] #ProdStateThreatsMalwareUntreated #ProdStateThreatsSuspiciousUntreated #ProdStateThreatsRiskwareUntreated = window("MainReport:Threats") #ProdStateTasksMalfunction = url($SupportLink) #ProdStateBackupTaskNotFinished #ProdStateBackupTaskRunning #ProdStateBackupTaskFailed = if(checkPassword(#pwdc_OpenBackup), window("BackupMainWindow_Dlg")) ; For testing product status color ;[s_ProdStateSeverity] ;def = #eProtStateNormal [s_ProdStateSeverity] #ProdStateKeyAboutExpiration #ProdStateLicenseNotificationCritical = $IsActiveGreenPeriod? #eProtStateNormal : #eProtStateCrit #ProdStateKeyBlocked #ProdStateKeyInvalid #ProdStateKeyLimited #ProdStateKeyTrialExpired #ProdStateKeyExpired #ProdStateKeySuspended #ProdStateKeyUpdateFailed #ProdStatePreinstalledCodeActivationProblem #ProdStatePreinstalledCodeWaitActivationCritical #ProdStateKeyWaitReservedActivationCritical #ProdStateKeyReservedActivationProblem #ProdStateKeyInvalidReserveCode #ProdStateNoKeys #ProdStateThreatsNeedReboot #ProdStateBasesCorrupted #ProdStateBasesVeryOld #ProdStateKeyGracePeriod #ProdStateThreatsMalwareUntreated #ProdStateHighRiskTasksDisabled #ProdStateHighRiskTasksNotRunning #ProdStateProtectionNotRunning #ProdStateProtectionDisabled #ProdStateTasksMalfunction #ProdStateProductNoEula = #eProtStateCrit #ProdStateKeyTrial #ProdStateKeyWillBeExpired #ProdStateLicenseNotificationWarning = $IsActiveGreenPeriod? #eProtStateNormal : #eProtStateWarn #ProdStateThreatsRiskwareUntreated #ProdStateThreatsSuspiciousUntreated #ProdStateUpdateNeedReboot #ProdStateProductNeedRestart #ProdStateBasesOld #ProdStateTasksDisabled #ProdStateTasksNotRunning #ProdStateProductNotProtected #ProdStateProductNotAutoRun #ProdStateFirewallBlockAll #ProdStateBackupTaskFailed #ProdStateBackupTaskNotFinished #ProdStateProtectionSafeMode = #eProtStateWarn default = #eProtStateNormal [s_NotifySeverity2ProdStateSeverity] #eNotifySeverityCritical #eNotifySeverityError = #eProtStateCrit #eNotifySeverityImportant = #eProtStateWarn def = #eProtStateNormal [s_MainProtectionBannerBg] #eProtStateNormal = "MainProtectionBanner,0" #eProtStateWarn = "MainProtectionBanner,1" #eProtStateCrit = "MainProtectionBanner,2" [s_ProtectionBannerDetailsBtnBg_L] #eProtStateNormal = "BtnGlass26Left,0,3,4,2,4,2" #eProtStateWarn = "BtnGlass26YellowLeft,0,3,4,2,4,2" #eProtStateCrit = "BtnGlass26RedLeft,0,3,4,2,4,2" [s_ProtectionBannerDetailsBtnBg_M] #eProtStateNormal = "BtnGlass26Middle,0,3,4,2,4,2" #eProtStateWarn = "BtnGlass26YellowMiddle,0,3,4,2,4,2" #eProtStateCrit = "BtnGlass26RedMiddle,0,3,4,2,4,2" [s_ProtectionBannerDetailsBtnBg_R] #eProtStateNormal = "BtnGlass26Right,0,3,4,2,4,2" #eProtStateWarn = "BtnGlass26YellowRight,0,3,4,2,4,2" #eProtStateCrit = "BtnGlass26RedRight,0,3,4,2,4,2" [s_ProtectionMediumBannerRsBg] #eProtStateNormal = "ProtectionMediumBannerRs,0" #eProtStateWarn = "ProtectionMediumBannerRs,1" #eProtStateCrit = "ProtectionMediumBannerRs,2" [s_ProtectionSmallBannerBg] #eProtStateNormal = "ProtectionBannerGreen" #eProtStateWarn = "ProtectionBannerYellow" #eProtStateCrit = "ProtectionBannerRed" [s_ProtectionSmallBannerRsBg] #eProtStateNormal = "ProtectionSmallBannerRs,0" #eProtStateWarn = "ProtectionSmallBannerRs,1" #eProtStateCrit = "ProtectionSmallBannerRs,2" [s_MainWindowProtectionLight] #eProtStateNormal = "LightGreen" + ",0,0,1,0,0,1" #eProtStateWarn = "LightYellow" + ",0,0,1,0,0,1" #eProtStateCrit = "LightRed" + ",0,0,1,0,0,1" [s_ProtectionLightSmall] #eProtStateNormal = "LightsSmall" + ",0,0,0,0,0,1" #eProtStateWarn = "LightsSmall" + ",2,2,2,2,2,3" #eProtStateCrit = "LightsSmall" + ",4,4,4,4,4,5" ; fix button [s_ButtonFixBg_L] #eProtStateNormal #eProtStateWarn = "BtnGlassFix_y_l,0,2,1,0,0,1" #eProtStateCrit = "BtnGlassFix_r_l,0,2,1,0,0,1" [s_ButtonFixBg_M] #eProtStateNormal #eProtStateWarn = "BtnGlassFix_y_c,0,2,1,0,0,1" #eProtStateCrit = "BtnGlassFix_r_c,0,2,1,0,0,1" [s_ButtonFixBg_R] #eProtStateNormal #eProtStateWarn = "BtnGlassFix_y_r,0,2,1,0,0,1" #eProtStateCrit = "BtnGlassFix_r_r,0,2,1,0,0,1" [s_ProtectionBannerBGFont] #eProtStateNormal = "ProtBannerNormBg" #eProtStateWarn = "ProtBannerWarnBg" #eProtStateCrit = "ProtBannerCritBg" [s_ProtectionBannerDscBGFont] #eProtStateNormal = "ProtBannerDscNormBg" #eProtStateWarn = "ProtBannerDscWarnBg" #eProtStateCrit = "ProtBannerDscCritBg" [s_ProtectionBannerSmFont] #eProtStateNormal = "ProtBannerSmGreen" #eProtStateWarn = "ProtBannerSmYellow" #eProtStateCrit = "ProtBannerSm" [s_ProtectionBannerSmBGFont] #eProtStateNormal = "ProtBannerSmNormBg" #eProtStateWarn = "ProtBannerSmWarnBg" #eProtStateCrit = "ProtBannerSmCritBg" [s_ProtectionBannerSmBGFontNew] #eProtStateNormal = "ProtBannerSmNormBgWhite" #eProtStateWarn = "ProtBannerSmNormBgWhite" #eProtStateCrit = "ProtBannerSmCritBg" [s_ProtectionBannerBtnBGFont] #eProtStateNormal = "ProtBannerBtnNormBg" #eProtStateWarn = "ProtBannerBtnWarnBg" #eProtStateCrit = "ProtBannerBtnCritBg" [f_ProductPostfix] ret = $IsKIS ? "_KIS" : ($IsKAV? "_KAV" : "") [s_NotifyWindowColor] #eProtStateCrit = "Red" #eProtStateWarn = "Yellow" def = "Green" [s_NotifyWindowBannerFGFont] #eProtStateNormal #eProtStateCrit = "Header1White" #eProtStateWarn = "Header1" [s_NotifyWindowBannerBGFont] #eProtStateNormal #eProtStateCrit = "Header1" #eProtStateWarn = "Header1White" [s_MainProtStatusFont] #eProtStateCrit = "MainProtStatusCrit" #eProtStateWarn = "MainProtStatusWarn" def = "MainProtStatusNormal" [s_MainProtStatusIcon] #eProtStateCrit = "crit" #eProtStateWarn = "med" def = "low" [s_ProductNewsIcon] #eNotifySeverityCritical ="error" #eNotifySeverityError ="error" #eNotifySeverityImportant ="warning" #eNotifySeverityNotImportant="info" def = "info" [s_LicenseNotificationIcon] #eLicenseNotificationSeverityNone #eLicenseNotificationSeverityCritical #eLicenseNotificationSeverityError #eLicenseNotificationSeverityInfoCritical = s_MsgBoxIcon(#m_error) #eLicenseNotificationSeverityImportant #eLicenseNotificationSeverityInfoError = s_MsgBoxIcon(#m_warning) default = s_MsgBoxIcon(#m_information) [s_DetectObjectStatusIcon] def = DetectType == #DETYPE_VULNERABILITY ? $TreatIcon_Med : s_DetectObjectStatusIcon2(@) [s_DetectObjectStatusIcon2] #OBJSTATUS_INFECTED #OBJSTATUS_UNTREATABLE #OBJSTATUS_SUSPICION #OBJSTATUS_ALLOWED #OBJSTATUS_UNTREATABLE #OBJSTATUS_UNKNOWN = $TreatIcon_Inactive #OBJSTATUS_OK #OBJSTATUS_FALSEALARM = $TreatIcon_Clean #OBJSTATUS_ADDEDBYUSER = $TreatIcon_Med #OBJSTATUS_NOTDISINFECTED = if($IsExactDetect, $TreatIcon_High, $TreatIcon_Med) #OBJSTATUS_DENIED #OBJSTATUS_DISINFECTED #OBJSTATUS_DELETED #OBJSTATUS_QUARANTINED = $TreatIcon_Cured #OBJSTATUS_DELETED_ON_REBOOT #OBJSTATUS_DISINFECTED_ON_REBOOT #OBJSTATUS_QUARANTINED_ON_REBOOT = $TreatIcon_CuredDelayed def = $TreatIcon_High [s_DetectDangerIcon] #eDDHigh = $TreatIcon_High #eDDMedium = $TreatIcon_Med #eDDLow = "void16" #eDDInformational = "void16" default = $TreatIcon_Med [s_AlertNotificationSound] #DETDANGER_HIGH = Gui.EnableClassicSounds ? "infected.wav" : "infected_p.wav" #DETDANGER_MEDIUM = "1-08.wav" default = "1-06.wav" [s_ProductNotificationSound] #eProtStateCrit = Gui.EnableClassicSounds ? "infected.wav" : "infected_p.wav" #eProtStateWarn = "1-08.wav" def = "1-06.wav" [f_ProductNotificationText] ret = $IsSandBoxNotification && s_ProductNotifyTextSandbox(Action) ? s_ProductNotifyTextSandbox(Action) : ($IsVerdictProductStatusId ? s_ProtState($Verdict2ProductStatusId) : ($IsTaskStateEvent ? $ProductNotifyText_TaskState : s_ProductNotifyTextByTaskID(TaskID, @0))) [Global] $ProductNotificationText = f_ProductNotificationText(50) $ProductNotificationTextBL = removetags($ProductNotificationText, #RemTags) $ProductNotificationTipText = f_ProductNotificationText(-1) $ProductNotificationLinkText = (f_NOTIFICATION_ID(NotificationId) == #eNotifyNewsUnread ? $LinkReadNews : \ (($IsSandBoxNotification && Action == #evtCriticalCOMAccess) ? "" : \ ($IsVerdictProductStatusId ? if($Verdict2ProductStatusId != #ProdStateFirewallBlockAll && $Verdict2ProductStatusId != #ProdStateSomeSkipped, \ (Data.ActionName ? Data.ActionName : s_ProductLinkText($Verdict2ProductStatusId))) : $LinkMoreDetails))) $ProductNotificationLink = s_ProdNotifLinkByNotifId(f_NOTIFICATION_ID(NotificationId)); close() $ProductNotifyText_TaskState = $TaskText + ": " + $VerdictDescrText + "." + if(DecisionReason == #eERROR, " " + $ReasonText + ".") [s_ProdNotifLinkByNotifId] #eNotifyStatisticsReportReady = window("StatisticsReport") #eNotifyNewsUnread = (Data && Data.Title ? window("QMLNewsItem") : window("QMLNewsList")) #eNotifyParCtl = if (checkPassword(#pwdc_OpenParctl), s_ProdNotifLink_ParCtl(Data.serid(), Data.UserName)) def = ($IsVerdictProductStatusId ? (Data.ActionName ? f_licenseAction(Data.ActionType, Data.URL) : Data.URL ? url(Data.URL) : s_ProductLinkClick($Verdict2ProductStatusId)) : \ Action != #evtAddAppToGr ? f_JumpToReport() : f_JumpToHipsRules()) [s_ProdNotifLink_ParCtl] serid("InstantMessangerControlReportEvent") = f_ParCtl_ShowWindow("Report:IM_Usage", @1) serid("SocialNetworkControlReportEvent") = f_ParCtl_ShowWindow("Report:SN_Usage", @1) serid("AppControlReportEvent") = f_ParCtl_ShowWindow("Report:AppUsage", @1) serid("PersonalInfoControlReportEvent") = f_ParCtl_ShowWindow("Report:PersonalInfo", @1) serid("WebSiteControlReportEvent") = f_ParCtl_ShowWindow("Report:WebContent", @1) serid("FileDownloadControlReportEvent") = f_ParCtl_ShowWindow("Report:Download", @1) serid("InternetUsageControlReportEvent") = f_ParCtl_ShowWindow("Report:InternetUsage", @1) serid("ComputerControlReportEvent") = f_ParCtl_ShowWindow("Report:ComputerUsage", @1) def = f_ParCtl_ShowWindow("Report:AddView", @1) [s_ProductNotificationLinkText4Task] #eTASK_PARCTLEX = "" #eTASK_BACKUP = if (DecisionReason == #eERROR && ExtraInfoSub2==#errOUT_OF_SPACE,$CleanupStorageText,s_ProductNotificationLinkText(NotificationId)) default = s_ProductNotificationLinkText(NotificationId) [s_ProductNotificationLink4Task] #eTASK_BACKUP = if (DecisionReason == #eERROR && ExtraInfoSub2==#errOUT_OF_SPACE,f_clearStorage(backupGetStorage(profile(ExtraInfoSub1).settings.StorageGUID)),f_JumpToReport()) default = f_JumpToReport() [s_ProductNotificationLinkText] #eNotifySandboxRestricted = "" default = $IsVerdictProductStatusId ? if($Verdict2ProductStatusId != #ProdStateFirewallBlockAll && $Verdict2ProductStatusId != #ProdStateSomeSkipped, (Data.URLName ? Data.URLName : s_ProductLinkText($Verdict2ProductStatusId))) : (Action != #evtAddAppToGr ? $LinkDetails : $LinkMoreDetails) [f_JumpToReport] ret = window(s_TaskID2ReportWindow(TaskID),p_postInit("ctl.Report.findcontent(" + Timestamp + ")")) [f_JumpToHipsRules] ret = window("SystemMonitor:Programs:Running") [s_TaskID2ReportWindow] #eTASK_BACKUP = #eTASK_RESTORE = "BackupStatistics" def = "MainReport:" + s_TaskID2MainWindowGroup(@) [s_TaskID2MainWindowGroup] #eTASK_FAV = "File_Monitoring" #eTASK_MAV = "Mail_Monitoring" #eTASK_HTTP = "Web_Monitoring" #eTASK_AP #eTASK_AD #eTASK_IM_CHECK = "IM_Monitoring" #eTASK_IDS = "ids" #eTASK_AB = "AdBlocker" #eTASK_AS = "Anti_Spam" #eTASK_PC = "Protection" #eTASK_HIPS = "Hips" #eTASK_FIREWALL #eTASK_SANDBOX #eTASK_SW2 = "SW2" #eTASK_PDM = "pdm" #eTASK_SCAN = "Scan_Objects" #eTASK_UPDATER #eTASK_ROLLBACK = "Updater" def = "Protection" [s_Profile2ProfileGroup] File_Monitoring Mail_Monitoring Web_Monitoring = "Antivirus" ids = "OnlineSecurity" AdBlocker Anti_Spam ParCtl = "ContentFilter" HipsTask Firewall pdm = "SystemWatch" def = "Protection" [s_Profile2ProfileGroup_Reports] Scan_My_Computer Scan_Objects Scan_Quarantine Scan_Startup Scan_Vulnerabilities = "Scan_Objects" Rollback Updater = "Updater" AVZ_CollectSysInfo AVZ_Scan = "AVZ_Scan" def = type == "ods" ? "Scan_Objects" : @ [s_AlertDetailsDialog] #DETYPE_UNKNOWN = dialog("MalwareInfo", p_image(ObjectName), p_TaskType(TaskType)) #DETYPE_VIRWARE #DETYPE_TROJWARE #DETYPE_MALWARE #DETYPE_ADWARE #DETYPE_PORNWARE #DETYPE_RISKWARE #DETYPE_XFILES #DETYPE_SOFTWARE = dialog("MalwareInfo", p_image(ObjectName), p_TaskType(TaskType)) #DETYPE_PHISHING = dialog("MalwareInfo", p_image(ObjectName), p_TaskType(TaskType)) #DETYPE_SUSPIC_URL = dialog("MalwareInfo", p_image(ObjectName), p_TaskType(TaskType)) #DETYPE_ATTACK #DETYPE_REGISTRY #DETYPE_SUSPICACTION #DETYPE_VULNERABILITY default = 0 [s_Use_AlertDialog_VirWareCategoryIco] #DETYPE_UNKNOWN #DETYPE_VIRWARE #DETYPE_TROJWARE #DETYPE_MALWARE #DETYPE_ADWARE #DETYPE_PORNWARE #DETYPE_RISKWARE #DETYPE_XFILES #DETYPE_SOFTWARE #DETYPE_PHISHING #DETYPE_SUSPIC_URL = true def = false [s_IsAlertDetail_ObjLink] #evtPrtStgAccess #evtUseBITS #evtUseDNS = 1 default = ObjectType == #eProcess ? 1 : 0 [s_AlertInfoDialogByHipsAction] #evtPrtStgAccess #evtUseBITS #evtUseDNS = dialog("HipsInfo", p_action(@)) default = 0 [s_AlertInfoDialogByPdmEventType] #PDM2_EVENT_P2P_SC_RDL #PDM2_EVENT_P2P_SCN #PDM2_EVENT_SC_MULTIPLE #PDM2_EVENT_SC_AR #PDM2_EVENT_SC_ARsrc #PDM2_EVENT_SC2STARTUP #PDM2_EVENT_TROJAN_GEN #PDM2_EVENT_SCN #PDM2_EVENT_RDR #PDM2_EVENT_HIDDEN_OBJ #PDM2_EVENT_INVADER #PDM2_EVENT_INVADER_LOADER #PDM2_EVENT_STRANGEKEY #PDM2_EVENT_SYSCHANGE #PDM2_EVENT_HIDDEN_INSTALL #PDM2_EVENT_BUFFEROVERRUN #PDM2_EVENT_DEP #PDM2_EVENT_HOSTS #PDM2_EVENT_DOWNLOADER #PDM2_EVENT_DRIVER_INS #PDM2_EVENT_HIDDEN_SEND #PDM2_EVENT_KEYLOGGER #PDM2_EVENT_IRP_TABLE_CHANGED #PDM2_EVENT_NEGATIVE_PID #PDM2_EVENT_DNS_QUERY #PDM2_EVENT_PSTORE #PDM2_EVENT_BSS_DETECT = dialog("HipsInfo", p_eventtype(@)) default = 0 [s_MalwareInfo_Hdr] antiphishing = s_AlertDialogCaption(@) default = @1 [s_Use_AlertDialog_VirWareCategory] hipstask hips_group = 0 httpscan default = 1 [f_UseVirWare] ret = DetectType != #DETYPE_URGENT && DetectDanger < 0x8 && s_UseVirWareByTask(TaskType) [s_UseVirWareByTask] InstallKey hips hips_group hipstask firewall = false httpscan = !$IsGeoSecurity pdm = 0 != nPID default = true [s_UseVirWareIcoByTask] SW2 = DetectType > 0 httpscan = #DETYPE_SUSPIC_URL != DetectType || #DETYPE_PHISHING != DetectType default = true [s_Use_AlertInfoDialog] ;#evtUseBrowserCL ;#evtUseBrowserAPI #evtPrtStgAccess #evtUseBITS #evtUseDNS = 1 default = 0 [s_ResultActionByTaskType] oas ods avs = #ACTION_ADD_EXCLUDE default = #ACTION_ALLOW [s_AlertFooterLink] default = "AlertFooterLink" [Global] $EventAppName = if(AppID, f_EventAppLink(compressPath(f_AppInfo(AppID).sImagePath, 40)) + if($hasNativePID," (PID: " + $AppNativePID + ")" + $LtrMark,if(f_isSandboxed(PID), " (PID: " + convertToNativePid(PID) + ")" + $LtrMark))) $EventAppNameNS = if(AppID, f_EventAppLink($AppName)) $EventObjText = (s_NeedToCompressPathByObjectType(ObjectType) ? compressPath($ObjectText, @1) : $ObjectText) $EventShow = (($IsEventObjInfected && DecisionReason != #eDETECT_INFORMATION) || Verdict == #ePASSWORD_PROTECTED || Verdict == #eCONNECTED) [f_EventAppLink] ret = f_MakeLink(@ != $UnknownApp, "AppName onclick(f_EventAppClick())", @) [f_EventAppClick] ret = window("AppRulesEdit", p_image(f_AppInfo(AppID).sImagePath), p_appID(AppID)) [f_EventObjClick] ret = f_EventObjClickEx(c_object(ObjectID, object(ObjectID))) [f_EventObjClickEx] ret = window("AppRulesEdit", p_image(hipsGroup(@,1)), p_appID(getGroupIdByName(hipsGroup(@))) ) [f_addAppToTrusted] ret = @ ? addToExclude(ser(ObjectName), dialog("[ExclusionEdit] alias(settings)", p_new(#true)), @1) : addToTrusted(ObjectName, dialog("[TrustedAppEdit] alias(settings)")) [f_IsProdStateCritical] ret = s_ProdStateSeverity(@) == #eProtStateCrit [f_VerdictDesc] ret = s_Verdict(Verdict) + if(Verdict == #eNOT_DISINFECTED, ": " + s_DecisionReason(DecisionReason)) [f_PIDValue] ret = if(@, " (PID:" + fmt("ld", @) + ")") [f_VulnerUrl] ret = $VirusListLink + "&function=advisories&VN=" + @ [s_RegValType] 1 = "REG_SZ" 2 = "REG_EXPAND_SZ" 3 = "REG_BINARY" 4 = "REG_DWORD" 5 = "REG_MULTI_SZ" [f_regFormat] ret = "\n\n" + @ + " (" + s_RegValType(@1) + "):\n" + regFormat(@1, @2) [s_ProdStatusVisibleFilter] #ProdStateKeyInvalid = !((product.UpdateState & #eBasesCorrupted) && (product.LicInfo.InvalidReason == #ekirInconsistentUpdate)) default = 1 [f_appParenItem] ret = "" + f_ProcessName(OwnerPid) + "" [s_NeedToCompressPathByObjectType] #eFile #eDirectory #eRegKey #eProcess #eModule #eURL #eDriver = 1 def = 0 [s_AlertDialog_Icon] httpscan = if(#DETYPE_PHISHING == DetectType, "anti_phish_1") InstallKey mc avs oas ods = "" pdm = if(!s_IsPdmUnknownSource(EventType), s_AlertDialog_Descr_Icon(Action, ObjectName, ObjectType)) def = s_AlertDialog_Descr_Icon(Action, ObjectName, ObjectType) [s_IsPdmUnknownSource] #PDM2_EVENT_IRP_TABLE_CHANGED #PDM2_EVENT_KEYLOGGER = 0 == nPID def = false [s_AlertDialog_Descr_Icon] #evtProcessStart #evtProcessStop = var imagePath; imagePath = ($AlertAppInfoStruct).sImagePath; getIcon(imagePath, "unkapp", 1) default = s_AlertDescr_IconByObjectType(ObjectType) [s_AlertDescr_IconByObjectType] #ObjectRegion = 0 default = if(nPID == 0 || EventType == #PDM2_EVENT_NEGATIVE_PID || TaskType == "wmuf", if(TaskType != "hipstask","system32"), if(sImagePath, getIconAsync(sImagePath, "unkapp", 1), "unkapp")) [f_MainReport_Period_Filter] p_PeriodBegin, p_PeriodEnd ret = if(p_PeriodBegin, "(Timestamp >= " + time2dt(p_PeriodBegin) + " && Timestamp < " + time2dt(p_PeriodEnd) + ")") + if(@2, if(p_PeriodBegin, " && (") + @2 + if(p_PeriodBegin, ")")) [f_Threats_PeriodFilter] p_PeriodBegin, p_PeriodEnd ret = if(p_PeriodBegin, "(ReportTime >= " + p_PeriodBegin + " && ReportTime < " + p_PeriodEnd + ")") + if(@2, if(p_PeriodBegin, " && (") + @2 + if(p_PeriodBegin, ")")) ; ----- Tab Statistics Filter ----- [s_ParCtlEx_GetStatRangePeriod] #ePeriodYear = #eStatPeriodMonth #ePeriodMonth = #eStatPeriodDay #ePeriodWeek = #eStatPeriodDay #ePeriodDay = #eStatPeriodHour [f_Statistics_Filter] p_PeriodBegin, p_PeriodEnd, p_PeriodType, p_PeriodShift, p_IsPrev, p_IsNext ret = p_PeriodShift = 0; \ f_Statistics_Filter_Ex( p_PeriodBegin, p_PeriodEnd, s_Statistics_ConvertType(p_PeriodType), p_PeriodShift, 0, p_IsPrev, p_IsNext ) [f_Statistics_Filter_Up] p_PeriodBegin, p_PeriodEnd, p_PeriodType, p_PeriodShift, p_IsPrev, p_IsNext ret = f_Statistics_Filter_Ex( p_PeriodBegin, p_PeriodEnd, p_PeriodType, p_PeriodShift, 1, p_IsPrev, p_IsNext ) [f_Statistics_Filter_Down] p_PeriodBegin, p_PeriodEnd, p_PeriodType, p_PeriodShift, p_IsPrev, p_IsNext ret = f_Statistics_Filter_Ex( p_PeriodBegin, p_PeriodEnd, p_PeriodType, p_PeriodShift, -1, p_IsPrev, p_IsNext ) [f_Statistics_Filter_Ex] p_PeriodBegin, p_PeriodEnd, p_PeriodType, p_PeriodShift, p_Arrow, p_IsPrev, p_IsNext ret = p_PeriodShift = p_PeriodShift + p_Arrow; \ var v_newType; v_newType = -1;\ ; p_PeriodType; p_PeriodShift; \ p_PeriodBegin = s_Statistics_Begin_Filter( p_PeriodType, p_PeriodShift, v_newType); \ p_PeriodEnd = s_Statistics_End_Filter( p_PeriodType, p_PeriodShift, v_newType ); \ p_IsPrev = getRepDbFirstTimestamp(#dbStatistics) < p_PeriodBegin; \ p_IsNext = p_PeriodEnd < utctime(); \ datetime(p_PeriodBegin); datetime(p_PeriodEnd); p_IsPrev [s_Statistics_Begin_Filter] #ePeriodYear = timeGetLocalBegin(utctime(), #eTimeGetBeginYear, @1) #ePeriodMonth = timeGetLocalBegin(utctime(), #eTimeGetBeginMonth, @1) #ePeriodWeek = timeGetLocalBegin(utctime(), #eTimeGetBeginWeek, @1) #ePeriodDay = timeGetLocalBegin(utctime(), #eTimeGetBeginDay, @1) def = timeGetLocalBegin( getRepDbFirstTimestamp(#dbStatistics), \ @2 = s_Statistics_TypeOfEnum( f_GetTypeOfTime( getRepDbFirstTimestamp(#dbStatistics) , utctime() ) ) ) [s_Statistics_End_Filter] #ePeriodYear = timeGetLocalBegin(utctime(), #eTimeGetBeginYear, @1 + 1) #ePeriodMonth = timeGetLocalBegin(utctime(), #eTimeGetBeginMonth, @1 + 1) #ePeriodWeek = timeGetLocalBegin(utctime(), #eTimeGetBeginWeek, @1 + 1) #ePeriodDay = timeGetLocalBegin(utctime(), #eTimeGetBeginDay, @1 + 1) def = timeGetLocalBegin(utctime(), @2, 1) [f_GetTypeOfTime] p_TimeBegin, p_TimeEnd $Day = 60*60*24 $Week = $Day * 7 $Month = $Day * 30 ret = var tmDiff; var nChartPeriod; \ tmDiff = p_TimeEnd - p_TimeBegin;\ nChartPeriod = \ ((tmDiff <= $Day) && timeGetLocalBegin(p_TimeBegin, #eTimeGetBeginDay, 0) == timeGetLocalBegin(p_TimeEnd-1, #eTimeGetBeginDay, 0)) ? #ePeriodDay : \ ((tmDiff <= $Week) && timeGetLocalBegin(p_TimeBegin, #eTimeGetBeginWeek, 0) == timeGetLocalBegin(p_TimeEnd-1, #eTimeGetBeginWeek, 0)) ? #ePeriodWeek : \ ((tmDiff <= $Month) && timeGetLocalBegin(p_TimeBegin, #eTimeGetBeginMonth, 0) == timeGetLocalBegin(p_TimeEnd-1, #eTimeGetBeginMonth, 0)) ? #ePeriodMonth : \ #ePeriodYear [s_Statistics_DefinType] ;p_Type, p_Begin, p_End Day = #ePeriodDay Week = #ePeriodWeek Month = #ePeriodMonth Year = #ePeriodYear def = f_GetTypeOfTime(@1, @2) [s_Statistics_ConvertType] Day = #ePeriodDay Week = #ePeriodWeek Month = #ePeriodMonth Year = #ePeriodYear def = -1 [s_Statistics_TypeOfEnum] #ePeriodDay = #eTimeGetBeginDay #ePeriodWeek = #eTimeGetBeginWeek #ePeriodMonth = #eTimeGetBeginMonth #ePeriodYear = #eTimeGetBeginYear def = -1 ;$Day = 60*60*24 ;$Week = $Day * 7 ;$Month = $Day * 30 ;All = (((@2-@1) < $Day) && timeGetLocalBegin(@1, #eTimeGetBeginDay, 0) == timeGetLocalBegin(@2, #eTimeGetBeginDay, 0)) ? "Day" : \ ; (((@2-@1) < $Week) && timeGetLocalBegin(@1, #eTimeGetBeginWeek, 0) == timeGetLocalBegin(@2, #eTimeGetBeginWeek, 0)) ? "Week" : \ ; (((@2-@1) < $Month) && timeGetLocalBegin(@1, #eTimeGetBeginMonth, 0) == timeGetLocalBegin(@2, #eTimeGetBeginMonth, 0)) ? "Month" : \ ; "Year" ;def = @0 [s_MainThreats_Tab_Statistics_Filter] def = "(Date >= " + @1 + " && Date < " + @2 + ")" + @3 [s_AvzSecurityAnalyserWizardWelcomeMask] 0 = (wizMask = wizPagesMask("Welcome,Search,Vulnerab,Problems,Fix,Finish"); RunMode = 0; ScriptMode = 1; savesettings()) 1 = (wizMask = wizPagesMask("Welcome,Vulnerab,Problems,Fix,Finish"); RunMode = 1; ScriptMode = 2; savesettings()) 2 = (wizMask = wizPagesMask("Welcome,Search,Problems,Fix,Finish"); RunMode = 2; ScriptMode = 4; savesettings()) [f_getStateIcon] ret = @1 ? "dashboard_statuses,0" : (@2 ? "dashboard_statuses,2" : "dashboard_statuses,1") [f_getFilesDataStateIcon] $fm = !f_isInstalled("File_Monitoring") || f_IsStateRunningOK(File_Monitoring.state) $hips = !f_isInstalled("HipsTask") || f_IsStateRunningOK(HipsTask.state) $pdm = !f_isInstalled("pdm") || f_IsStateRunningOK(pdm.state) $allOk = ($fm) && ($pdm) && ($hips) && ($SystemWatch) $anyFail = #StateFailed == File_Monitoring.state || #StateFailed == HipsTask.state || #StateFailed == pdm.state ret = f_getStateIcon(@, $allOk, $anyFail) [f_getSysAppStateIcon] $mm = !f_isInstalled("Mail_Monitoring") || f_IsStateRunningOK(Mail_Monitoring.state) $wm = !f_isInstalled("Web_Monitoring") || f_IsStateRunningOK(Web_Monitoring.state) $im = !f_isInstalled("IM_Monitoring") || f_IsStateRunningOK(IM_Monitoring.state) $ids = !f_isInstalled("ids") || f_IsStateRunningOK(ids.state) $hips = !f_isInstalled("HipsTask") || f_IsStateRunningOK(HipsTask.state) $pdm = !f_isInstalled("pdm") || f_IsStateRunningOK(pdm.state) $as = !f_isInstalled("Anti_Spam") || f_IsStateRunningOK(Anti_Spam.state) $SW2 = !f_isInstalled("SW2") || f_IsStateRunningOK(SW2.state) $allOk = ($mm) && ($wm) && ($im) && ($ids) && ($hips) && ($pdm) && ($as) && ($SW2) $anyFail = #StateFailed == Mail_Monitoring.state || #StateFailed == Web_Monitoring.state || #StateFailed == IM_Monitoring.state || #StateFailed == pdm.state || #StateFailed == ids.state || #StateFailed == HipsTask.state || #StateFailed == Anti_Spam.state || #StateFailed == SW2.state ret = f_getStateIcon(@, $allOk, $anyFail) [f_getProtOnlinesStateIcon] $mm = !f_isInstalled("Mail_Monitoring") || f_IsStateRunningOK(Mail_Monitoring.state) $wm = !f_isInstalled("Web_Monitoring") || f_IsStateRunningOK(Web_Monitoring.state) $im = !f_isInstalled("IM_Monitoring") || f_IsStateRunningOK(IM_Monitoring.state) $ids = !f_isInstalled("ids") || f_IsStateRunningOK(ids.state) $as = !f_isInstalled("Anti_Spam") || f_IsStateRunningOK(Anti_Spam.state) $fw = !f_isInstalled("Firewall") || f_IsStateRunningOK(Firewall.state) $allOk = ($mm) && ($wm) && ($im) && ($ids) && ($as) && ($fw) && ($g_antiphishAll) $anyFail = #StateFailed == Mail_Monitoring.state || #StateFailed == Web_Monitoring.state || #StateFailed == IM_Monitoring.state || #StateFailed == ids.state || #StateFailed == Firewall.state || #StateFailed == Anti_Spam.state ret = f_getStateIcon(@, $allOk, $anyFail) [s_getProtBlockColor] warning_state warning_state_na = "Yellow" error_state error_state_na = "Red" def = "Green" [f_repairProduct] ret = if (msg("ProductRepairConfirmation", #m_yesno) == #m_res_yes, repair()) [f_getStateSemaphor2] ret = s_IsStateRunning(@) ? "SlideSwitch_on" : "SlideSwitch_off" [f_getStateSemaphor] ret = (ctl.hotlight ? f_getStateSemaphor2(@) + ",1" : f_getStateSemaphor2(@) + ",0") [f_SwitchTaskState] ret = if(checkPassword(#pwdc_SaveSettings), enable(!s_IsStateRunning(state) && state != #StateFailed)) [s_getStateIcon] #warn #green = "SlideSwitch_on" #gray #red = "SlideSwitch_off" [f_IsStateRunning] ret = s_IsStateRunning(@) ? 1 : 0 [s_ChartId] #eVirware = "0" #eTrojware = "1" #eMalware = "2" #eUrgent #eBSSDetect = "3" #eVulnerability = "4" #eRiskware = "5" #eAdware = "6" #eSpam = "7" #eBanner = "8" #eAttack = "9" #eMaliciousURL = "10" [f_ChartBg] ret = "ReportChart"+s_ChartId(@) [f_ChartBgLegend] ret = "ReportChart, "+s_ChartId(@) [s_ComponentKISInstalledOnly] HipsTask = 1 Firewall = 1 ids = 1 Anti_Spam = 1 AdBlocker = 1 ParCtl = 1 [s_RemoteProductComputerStateIcon] #eProtStateNormal = if(@1,"computer_green_lite","computer_green_dark") #eProtStateWarn = if(@1,"computer_yellow_lite","computer_yellow_dark") #eProtStateCrit = if(@1,"computer_red_lite","computer_red_dark") [s_IconObjectType] #INV_EVENT_TYPE_FILE_OPEN #INV_EVENT_TYPE_FILE_CLOSE #INV_EVENT_TYPE_FILE_DELETE #INV_EVENT_TYPE_FILE_RENAME = "disk" #INV_EVENT_TYPE_PROCESS_CREATE #INV_EVENT_TYPE_PROCESS_EXIT #INV_EVENT_TYPE_PROCESS_TERMINATE = "startupobj" #INV_EVENT_TYPE_REGYSTRY_KEY_CREATE #INV_EVENT_TYPE_REGYSTRY_KEY_DELETE #INV_EVENT_TYPE_REGYSTRY_VALUE_DELETE #INV_EVENT_TYPE_REGYSTRY_VALUE_SET = "registry" [s_IconRollbackObjectType] #RegistryValue = "registry" #File = "resfile" #Process = "void16" [s_SWObjectType] #INV_EVENT_TYPE_FILE_OPEN #INV_EVENT_TYPE_FILE_CLOSE #INV_EVENT_TYPE_FILE_DELETE #INV_EVENT_TYPE_FILE_RENAME = #eFile #INV_EVENT_TYPE_PROCESS_CREATE #INV_EVENT_TYPE_PROCESS_EXIT #INV_EVENT_TYPE_PROCESS_TERMINATE = #eProcess #INV_EVENT_TYPE_REGYSTRY_KEY_CREATE #INV_EVENT_TYPE_REGYSTRY_KEY_DELETE #INV_EVENT_TYPE_REGYSTRY_VALUE_DELETE #INV_EVENT_TYPE_REGYSTRY_VALUE_SET = #eRegKey [f_isHipsGroup] ret = s_HipsGroups(TaskType) [s_HipsGroups] hips hipstask hips_group = firewall = true def = false [f_SelfAction] ret = ObjectType == #eNetwork ? true : s_HipsSelfAction(Action) [s_HipsSelfAction] #evtAddAppToGr = false def = true [f_ksnRating] ret = f_KsnTrusted(@) + if(@1 > 0,"\n" + f_KsnLimited(@1)) + if(@2 > 0,"\n" + f_KsnUntrusted(@2)) [s_BlicMediumCounter_Shift] DataSecurity = 0 SystemSecurity = 8 OnlineSecurity = 4 [s_IsHaveHistoryByTask] ;#PDM2_ACTION_BLOCKED_APP_START $InfoAvailable = (Parents.size() > 0 || nPID > 0) $HistoryAvailable = f_isInstalled("SW2") && f_IsStateRunningOK(SW2.state) pdm = $HistoryAvailable && $InfoAvailable hipstask = (#eDriver == ObjectType) && $HistoryAvailable && $InfoAvailable SW2 = (Action != #PDM2_ACTION_ROLLBACK) && (nPID != 0) && $InfoAvailable def = false [s_IsWebSource] 2 3 = true def = false [f_ProgramNameEx] p_ImagePath, p_pid ret = if(p_pid != 0, f_ProcessInfo(p_pid).Module.sDescription + " (" + objfile(p_ImagePath) + ": " + p_pid + ")", objfile(p_ImagePath)) [s_HistoryFilter] FilterRegistry = "s_SWObjectType(nType) == #eRegKey" FilterFile = "s_SWObjectType(nType) == #eFile" FilterProc = "s_SWObjectType(nType) == #eProcess" def = "" [s_IsFileAccess] #evtLLFSAccess #evtLLDiskAccess = false def = true [f_AlertDialogTroubleHips] ret = s_AlertDialogTroubleHipsTask(Action) [s_AlertDialogTroubleHipsTask] #evtDrvStart = "" + if(!appID, $UnknownApp + " ") + s_ActionInTime(@) + "" + s_ActionV(@) #evtAddAppToGr = f_appDenyStartReason() def = $AlertAppGroupEx + s_ActionInTime(@) + s_ActionV(Action, ObjectName, ObjectType) + "." + $IfTrusted [f_Customers] ret = s_Customers(if(@ < 10, 0, if(@ < 100, 1, if(@ < 1000, 2, if(@ < 10000, 3, if(@ < 100000, 4, if(@ < 1000000, 5, 6))))))) [f_DetectBehaviour] p_TaskType, p_DetectBehaviour, p_DetectType $HttpScanDetectBehaviour = p_DetectType == #DETYPE_PHISHING ? 1000 : (p_DetectType == #DETYPE_MALWARE ? 1001 : p_DetectBehaviour) ret = p_TaskType == "httpscan" ? $HttpScanDetectBehaviour : p_DetectBehaviour [f_DetectBehaviourString] p_TaskType, p_DetectBehaviour, p_DetectType ret = s_DetectBehaviour(f_DetectBehaviour(p_TaskType, p_DetectBehaviour, p_DetectType)) [f_BehaviourDetails] p_TaskType, p_DetectBehaviour, p_DetectType ret = s_BehaviourDetails(f_DetectBehaviour(p_TaskType, p_DetectBehaviour, p_DetectType)) [f_HttpDetectPhishOrWmuf] ret = (TaskType == "httpscan" && (#DETYPE_PHISHING == DetectType || #DETYPE_MALWARE == DetectType)) ? 1 : 0 [s_VirusListLink] httpscan = DetectType == #DETYPE_PHISHING ? $VirusListPhishingLink : if(#DETYPE_MALWARE == DetectType, $VirusListMalwareLink, $VirusListThreatLink) def = $VirusListThreatLink [f_ToBoldText] ret = if(@1, "" + @ + "", @) [f_showMainWindow] ret = if(EulaVerified, IsSilentMode = false); if(EulaVerified, window(@, p_postInit(@1)), $ShowEulaEx) [s_ObjectStatusExcludable] #OBJSTATUS_INFECTED #OBJSTATUS_SUSPICION #OBJSTATUS_NOTDISINFECTED #OBJSTATUS_UNTREATABLE = true default = false [s_GroupByDetectType] ; Macros like #ObjectURL and #DETYPE_URGENT do not work in groups so use exact numbers ;#DETYPE_MALWARE = (ObjectType == #ObjectURL) ? #DETYPE_PHISHING : #DETYPE_MALWARE #DETYPE_MALWARE = (ObjectType == 0x00010006) ? 70 : 3 ;#DETYPE_BEHAVIORAL = #DETYPE_URGENT #DETYPE_BEHAVIORAL = 90 default = @ ;---------- Dashboard ----------------------------------------------- [s_BSP2UBSP] #eBSP_Actual = #eUBSP_Actual #eBSP_Corrupted = #eUBSP_Corrupted #eBSP_VeryOld = #eUBSP_VeryOld #eBSP_Old = #eUBSP_Old #eBSP_OldInGracePeriod = #eUBSP_OldInGracePeriod #eBSP_UpdatedAndRebootNeeded = #eUBSP_UpdatedAndRebootNeeded #eBSP_UpdatedAndProductRestartNeeded = #eUBSP_UpdatedAndProductRestartNeeded #eBSP_SomeBasesNeedUpdate = #eUBSP_SomeBasesNeedUpdate [s_Update_menu_Settings] #eUBSP_Actual = 0 #eUBSP_Corrupted = 1 #eUBSP_VeryOld = 1 #eUBSP_UpdatedAndRebootNeeded = 0 #eUBSP_UpdatedAndProductRestartNeeded = 0 #eUBSP_Old = 1 #eUBSP_SomeBasesNeedUpdate = 1 #eUBSP_OldInGracePeriod = 1 #eUBSP_UpdateRunning = 0 #eUBSP_RollbackRunning = 0 [s_Update_menu_Report] #eUBSP_Actual = 0 #eUBSP_Corrupted = 0 #eUBSP_VeryOld = 1 #eUBSP_UpdatedAndRebootNeeded = 0 #eUBSP_UpdatedAndProductRestartNeeded = 0 #eUBSP_Old = 1 #eUBSP_SomeBasesNeedUpdate = 0 #eUBSP_OldInGracePeriod = 1 #eUBSP_UpdateRunning = 0 #eUBSP_RollbackRunning = 0 [s_DashboardMenuItem] Protection = "MenuBtn.Protection.menu" Threats = "MenuBtn.Threats.menu" Update = "MenuBtn.Update.menu" Recommendations = "MenuBtn.Recommendations.menu" [f_getProtectionState] ret = getProtectionState() [f_getLicenseState] ret = getLicenseState() [f_getThreatsState] ret = getThreatsState() [f_getRecommendations] ret = if( isManualUpdateMode(), #eManualUpdateMode, if(isAntiSpamNeedTraining(), #eAntiSpamRecommendTraining, #eNoRecommendations ) ) [f_UnionBasesState] ret = if( \ getUpdatingState() == #eUSP_RollbackRunning, #eUBSP_RollbackRunning, \ if(getUpdatingState() != #eUSP_Idle, #eUBSP_UpdateRunning, \ s_BSP2UBSP(getBasesState()) ) ) [s_Dashboard_statuses_Problems] #eProtStateNormal = 0 #eProtStateWarn = 1 #eProtStateCrit = 2 [s_Dashboard_statuses] Protection = s_Dashboard_statuses_Protection(f_getProtectionState()) Threats = s_Dashboard_statuses_Threats(f_getThreatsState()) Update = s_Dashboard_statuses_Update(f_UnionBasesState()) License = s_Dashboard_statuses_License(f_getLicenseState()) Recommendations = 3 Problems = s_Dashboard_statuses_Problems(s_ProdStateSeverity(nStateId)) [s_Dashboard_statuses_desc] Protection = s_Dashboard_statuses_desc_Protection(f_getProtectionState()) Threats = s_Dashboard_statuses_desc_Threats(f_getThreatsState()) Update = s_Dashboard_statuses_desc_Update(f_UnionBasesState()) License = s_Dashboard_statuses_desc_License(f_getLicenseState()) Recommendations = s_Dashboard_statuses_desc_Recommendations(f_getRecommendations()) Problems = s_RemoteProductComputerStateText(s_ProdStateSeverity(nStateId)) [s_Dashboard_Actions] Protection = s_Dashboard_Actions_Protection(f_getProtectionState()) Threats = s_Dashboard_Actions_Threats(f_getThreatsState()) Update = s_Dashboard_Actions_Update(f_UnionBasesState()) License = $ShowLicenseManager Recommendations = s_Dashboard_Actions_Recommendations(f_getRecommendations()) Problems = product.Local ? window("QMLProblemList") : windowDlg("QMLRemoteProblemList") [s_Dashboard_Actions_Btn_text] Protection = s_Dashboard_Actions_Btn_text_Protection(f_getProtectionState()) Threats = "" Update = s_Dashboard_Actions_Btn_text_Update(f_UnionBasesState()) License = s_Dashboard_Actions_Btn_text_License(0) Recommendations = "" Problems = s_RemoteProductComputerButtonText(s_ProdStateSeverity(nStateId)) [s_Dashboard_Actions_SplitBtn_text] Protection = s_Dashboard_Actions_SplitBtn_text_Protection(f_getProtectionState()) Threats = s_Dashboard_Actions_SplitBtn_text_Threats(f_getThreatsState()) Update = s_Dashboard_Actions_SplitBtn_text_Update(f_UnionBasesState()) License = "" Recommendations = s_Dashboard_Actions_SplitBtn_text_Recommendations(f_getRecommendations()) [s_Dashboard_statuses_Update] #eUBSP_Actual = 0 #eUBSP_Corrupted = 2 #eUBSP_VeryOld = 2 #eUBSP_UpdatedAndRebootNeeded = 1 #eUBSP_UpdatedAndProductRestartNeeded = 1 #eUBSP_Old = 1 #eUBSP_SomeBasesNeedUpdate = 0 #eUBSP_OldInGracePeriod = 0 #eUBSP_UpdateRunning = 0 #eUBSP_RollbackRunning = 1 [s_Dashboard_Actions_Update] #eUBSP_UpdatedAndRebootNeeded = f_RestartOs() #eUBSP_UpdatedAndProductRestartNeeded = f_RestartApp() #eUBSP_UpdateRunning = if(f_checkNoFeatures(), f_setState(#TASK_REQUEST_STOP, "Updater")) #eUBSP_RollbackRunning = if(f_checkNoFeatures(), f_setState(#TASK_REQUEST_STOP, "Rollback")) #eUBSP_Corrupted #eUBSP_VeryOld #eUBSP_Old #eUBSP_SomeBasesNeedUpdate #eUBSP_OldInGracePeriod = if(f_checkNoFeatures(), f_setState(#TASK_REQUEST_RUN, "Updater")) [s_Dashboard_statuses_Protection] #eProtectionStateMainComponentsMalfunction = 2 #eProtectionStateFileAvDisabled = 2 #eProtectionStateProtectionPaused = 2 #eProtectionStateProtectionDisabled = 2 #eProtectionStateNetworkTrafficBlocked = 1 #eProtectionStateSelfProtectionDisabled = 1 #eProtectionStateMainComponentsDisabled = 1 #eProtectionStateAuxComponentsMalfunction = 1 #eProtectionStateAutorunDisabled = 1 #eProtectionStateProtectionSafeMode = 1 #eProtectionStateAllComponentsEnabled = 0 #eProtectionStateMainComponentsEnabled = 0 [s_Dashboard_Actions_Protection] #eProtectionStateMainComponentsMalfunction = url($HelpURLSettingsIdleScan) #eProtectionStateFileAvDisabled = if(f_checkNoFeatures(), setstate(#TASK_REQUEST_RUN, "File_Monitoring")) #eProtectionStateProtectionPaused = if(f_checkNoFeatures(), setstate(#TASK_REQUEST_RUN, "Protection")) #eProtectionStateProtectionDisabled = if(f_checkNoFeatures(), setstate(#TASK_REQUEST_RUN, "Protection")) #eProtectionStateNetworkTrafficBlocked = if(f_checkNoFeatures(), (Hips.FirewallSettings.WorkingMode = #fwAllow)) #eProtectionStateSelfProtectionDisabled = (EnableSelfProtection = true) #eProtectionStateMainComponentsDisabled = if(f_checkNoFeatures(), (enable(true, "Protection"); setstate(#TASK_REQUEST_RUN, "Protection"))) #eProtectionStateAuxComponentsMalfunction = #eProtectionStateAutorunDisabled = (RunAtSystemStartup = true) #eProtectionStateProtectionSafeMode = f_RestartOs() #eProtectionStateAllComponentsEnabled = #eProtectionStateMainComponentsEnabled = if(f_checkNoFeatures(), window("ProtectionComponents", $ModalIfRemote)) [s_Dashboard_statuses_Threats] #eDBThreatsRebootNeeded = 2 #eDBThreatsMalwareUntreated = 2 #eDBThreatsSuspiciousUntreated = 1 #eDBThreatsRiskwareUntreated = 1 #eDBThreatsFullScanNeeded = 0 #eDBThreatsCleanupNeeded = 0 #eDBThreatsNoThreats = 0 [s_Dashboard_Actions_Threats] #eDBThreatsRebootNeeded = f_RestartOs() #eDBThreatsMalwareUntreated = #eDBThreatsSuspiciousUntreated = #eDBThreatsRiskwareUntreated = threatNeutralizeActive() #eDBThreatsFullScanNeeded = 0 #eDBThreatsCleanupNeeded = 0 #eDBThreatsNoThreats = 0 [s_Dashboard_statuses_License] #ProdStateKeyTrial = 0 #ProdStateLicenseNotificationWarning = 1 #ProdStateKeyWillBeExpired = 1 #ProdStateKeyGracePeriod = 2 #ProdStateKeyAboutExpiration = 2 #ProdStateKeyExpired = 2 #ProdStateKeyTrialExpired = 2 #ProdStateKeyBlocked = 2 #ProdStateNoKeys = 2 #ProdStateKeyInvalid = 2 #ProdStateKeyLimited = 2 #ProdStateLicenseNotificationCritical = 2 #ProdStateKeyUpdateFailed = 2 #ProdStatePreinstalledCodeWaitActivationCritical = 2 #ProdStateKeySuspended = 2 #ProdStateKeyWaitReservedActivationCritical = 2 #ProdStateKeyReservedActivationProblem = 2 #ProdStateKeyInvalidReserveCode = 0 #ProdStateKeyWaitReservedActivationInfo = 0 #ProdStateLicenseNotificationInfo = 0 #ProdStatePreinstalledCodeWaitActivationInfo = 0 #ProdStatePreinstalledCodeActivationProblem = 2 [s_Dashboard_statuses_Recommendations] def = 0 [s_Dashboard_Actions_Recommendations] #eAntiSpamRecommendTraining = if(f_checkNoFeatures(), f_StartAntiSpamTrainingWizard()) #eManualUpdateMode = (Updater.schedule.Mode = #schmAuto); savesettings() [f_IsCtlExistAndVisible] ret = var pElement; pElement = ctl.top.ctlFind(@0); pElement.id && pElement.visible [f_IsCtlExistAndHide] ret = var pElement; pElement = ctl.top.ctlFind(@0); pElement.id && (!pElement.visible)