create modes group whitelist viruslog hipslog patchlog