Question anyone seen dr web put an entry into panel.log?

[larryk]

in this file:
/usr/local/psa/admin/logs/panel.log

i found this type of entry multiple times:

[09-Jan-2017 04:07:36 America/New_York] response=%27%91%7Erp.... lots of crazy characters....A%9F%9B%0CON%AA
[with a domain email address here]


it turns out (I think) this entry corresponds to dr web running/updating/etc
and the email addressed entered above, is THE ONLY one on the domain to have antivirus checked?

I'm guessing dr web found a hack/virus/whatever it is and reported it?


NOTE: I have a 3rd party filter for email protection.

the odd thing to me -- WHY would the entry end up in the panel.log? why not some where more useful?

thanks

 

[IgorG]

I would not be so sure that it is related to Dr.Web.
Most probably it's some kind of backend utility tries to do something with the mailbox and returns some code.
Try to enable debug mode - https://support.plesk.com/hc/en-us/articles/213408889 and find more details.