> Source: [sk111740](https://support.checkpoint.com/results/sk/sk111740)

# sk111740 - Detection issue of malicious URLs in Anti-Bot / Anti-Virus after installing Take 143 of R77.30 Jumbo Hotfix Accumulator

| Property | Value |
|----------|-------|
| Solution ID | sk111740 |
| Date Created | 2016-05-30 |
| Last Modified | 2021-01-07 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * There is an issue with Anti-Bot / Anti-Virus detection of malicious URLs after installing ***Take 143*** of [R77.30 Jumbo Hotfix Accumulator](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162).

* "`Check Point Online Web Service failure`" is the only relevant log from Anti-Bot / Anti-Virus blades in SmartView Tracker / SmartLog.  

  No other logs and no connectivity issues could be found.

## Cause

In Take 143 (and only in this specific Take), the synchronization between the schema file and the library of the Resource Advisor (RAD) daemon fails.

## Solution

This problem was fixed. The fix is included in:

* [Jumbo Hotfix Accumulator for R77.30](http://supportcontent.checkpoint.com/solutions?id=sk106162) - in *Take_145* and higher.

The following immediate **workaround** is available:

**Note:** In cluster environment, this procedure must be performed on *all* members of the cluster.

1. Connect to command line on Security Gateway.

2. Log in to Expert mode.

3. Backup the current *$FWDIR/conf/rad_scheme.C* file:

   ***\[Expert@HostName:0\]# cp -v $FWDIR/conf/rad_scheme.C $FWDIR/conf/rad_scheme.C_ORIGINAL***
4. Edit the current *$FWDIR/conf/rad_scheme.C* file:

   ***\[Expert@HostName:0\]# vi $FWDIR/conf/rad_scheme.C***
5. Change:

   from: ***:const ("/Malware/malware/5.0?resource=")***
   to: ***:const ("/Malware/malware/6.0?resource=")***
6. Save the changes and exit from Vi editor.

7. Install policy on Security Gateway.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content