RE: [Declude.Virus] ClamAv with Declude
Here is a comment by the SOSDG ClamAV author on the SmarterMail forum: http://www.smartertools.com/forums/p/22257/59718.aspx#59718 Original Message From: Gary Steiner decludei...@plusultraweb.com Sent: Monday, December 29, 2008 3:20 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] ClamAv with Declude There is an announcement on the SOSDG web site saying they will no longer support their version of ClamAV. http://www.sosdg.org/clamav-win32 Is anyone using a different port of ClamAV with Declude? Has anyone had success with http://www.clamwin.com/ ? Original Message From: Scott Fisher sfis...@farmprogress.com Sent: Monday, December 29, 2008 7:39 AM To: declude.virus@declude.com Subject: RE: [Declude.Virus] ClamAv with Declude I use the runclamscan program to call clamav. Here's my virus.cfg lines SCANFILE1 c:\clamav\runclamscan.exe log=1 C:\clamav\clamdscan.exe --quiet -l report.txt VIRUSCODE1 1 REPORT1 FOUND -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David Dodell Sent: Sunday, December 28, 2008 11:29 AM To: declude.virus@declude.com Subject: [Declude.Virus] ClamAv with Declude On Dec 28, 2008, at 8:36 AM, Hirthe, Alexander wrote: http://www.mail-archive.com/declude.virus@declude.com/msg14082.html Ok, thanks for the excellent beginning ... I'm using the Clamav-win32 from sosdg.org Freshclam installed all the latest files just fine Got it all installed ... but something still not working: (1) I got clamd installed as a service (2) In my virus.cfg I have scanfile c:\imail\declude\clamav\clamdscan.exe --quiet -l report.txt viruscode 1 report FOUND (3) In my logs it reports Could Not Parse String FOUND in report.txt Error 2 in virus scanner 1 Scanned: Error in Virus scanner [MIME: 1 991] - So I'm assuming I need another type code or way for freshclam to exit cleanly if it doesn't find a virus? David --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] ClamAv with Declude
I use the runclamscan program to call clamav. Here's my virus.cfg lines SCANFILE1 c:\clamav\runclamscan.exe log=1 C:\clamav\clamdscan.exe --quiet -l report.txt VIRUSCODE1 1 REPORT1 FOUND -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David Dodell Sent: Sunday, December 28, 2008 11:29 AM To: declude.virus@declude.com Subject: [Declude.Virus] ClamAv with Declude On Dec 28, 2008, at 8:36 AM, Hirthe, Alexander wrote: http://www.mail-archive.com/declude.virus@declude.com/msg14082.html Ok, thanks for the excellent beginning ... I'm using the Clamav-win32 from sosdg.org Freshclam installed all the latest files just fine Got it all installed ... but something still not working: (1) I got clamd installed as a service (2) In my virus.cfg I have scanfile c:\imail\declude\clamav\clamdscan.exe --quiet -l report.txt viruscode 1 report FOUND (3) In my logs it reports Could Not Parse String FOUND in report.txt Error 2 in virus scanner 1 Scanned: Error in Virus scanner [MIME: 1 991] - So I'm assuming I need another type code or way for freshclam to exit cleanly if it doesn't find a virus? David --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] ClamAv with Declude
There is an announcement on the SOSDG web site saying they will no longer support their version of ClamAV. http://www.sosdg.org/clamav-win32 Is anyone using a different port of ClamAV with Declude? Has anyone had success with http://www.clamwin.com/ ? Original Message From: Scott Fisher sfis...@farmprogress.com Sent: Monday, December 29, 2008 7:39 AM To: declude.virus@declude.com Subject: RE: [Declude.Virus] ClamAv with Declude I use the runclamscan program to call clamav. Here's my virus.cfg lines SCANFILE1 c:\clamav\runclamscan.exe log=1 C:\clamav\clamdscan.exe --quiet -l report.txt VIRUSCODE1 1 REPORT1 FOUND -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David Dodell Sent: Sunday, December 28, 2008 11:29 AM To: declude.virus@declude.com Subject: [Declude.Virus] ClamAv with Declude On Dec 28, 2008, at 8:36 AM, Hirthe, Alexander wrote: http://www.mail-archive.com/declude.virus@declude.com/msg14082.html Ok, thanks for the excellent beginning ... I'm using the Clamav-win32 from sosdg.org Freshclam installed all the latest files just fine Got it all installed ... but something still not working: (1) I got clamd installed as a service (2) In my virus.cfg I have scanfile c:\imail\declude\clamav\clamdscan.exe --quiet -l report.txt viruscode 1 report FOUND (3) In my logs it reports Could Not Parse String FOUND in report.txt Error 2 in virus scanner 1 Scanned: Error in Virus scanner [MIME: 1 991] - So I'm assuming I need another type code or way for freshclam to exit cleanly if it doesn't find a virus? David --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] ClamAv with Declude
On Dec 28, 2008, at 10:28 AM, David Dodell wrote: (2) In my virus.cfg I have scanfile c:\imail\declude\clamav\clamdscan.exe --quiet -l report.txt viruscode 1 report FOUND (3) In my logs it reports Could Not Parse String FOUND in report.txt Error 2 in virus scanner 1 Scanned: Error in Virus scanner [MIME: 1 991] Ok, found Error 2 is a problem in the scanner.The scanner is working fine from the command line, so I'm now assume declude is not passing something correctly, or I'm missing something fundamental? David --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] ClamAV and Declude problem
I had this same problem and had to stop using clam. I believe someone said that it was a problem with that version of clam. I don't remember what the fix for it was' but would be interested to know as well. Jared (from my phone) -Original Message- From: Imail Admin [EMAIL PROTECTED] To: declude.virus@declude.com declude.virus@declude.com Sent: 7/14/07 3:42 AM Subject: [Declude.Virus] ClamAV and Declude problem Hi All, We've been testing ClamAV with Declude AVA on our new mail server (running 2006.2). We only have a few mailboxes on this server because we're still testing it. Today, I ran into a problem where the D: drive ran out of space (100GB). It turns out the d:\temp folder was very large (90GB) and that was due to a large number of folders named long string of characters.clamtmp or some such. Each of those folders was full of very files, some quite large. My take is that these are temp folders created by ClamAV, but I can't figure out why they're being left behind. The lines for ClamAV in virus.cfg are: CLAMAV SCANFILE2 D:\Progra~1\clamwin\bin\clamscan.exe --verbose --database=C:\docume~1\alluse~1.win\clamwi~1\db --tempdir=D:\Temp --no-summary -l report.txt VIRUSCODE2 1 REPORT2FOUND I also noticed some strange lines in the virus log files: 07/13/2007 00:31:17.439 q2a03033d58e6.smd ERROR: Virus scanner 2 didn't finish after 60 seconds; terminating. 07/13/2007 00:31:17.439 q2a03033d58e6.smd Virus scanner 2 reports exit code of 0 07/13/2007 00:31:17.439 q2a03033d58e6.smd Couldn't delete D:\IMail\spool\proc\work\D2a03033d58e6.vir\report.txt: 32. Error String: [The process cannot access the file because it is being used by another process.] 07/13/2007 00:31:47.440 q2a03033d58e6.smd Scanned: Virus Free [MIME: 1 26] 07/13/2007 00:32:31.597 q2a8a035958eb.smd Vulnerability flags = 0 07/13/2007 00:33:32.551 q2a8a035958eb.smd ERROR: Virus scanner 2 didn't finish after 60 seconds; terminating. 07/13/2007 00:33:32.551 q2a8a035958eb.smd Virus scanner 2 reports exit code of 0 07/13/2007 00:33:32.551 q2a8a035958eb.smd Couldn't delete D:\IMail\spool\proc\work\D2a8a035958eb.vir\report.txt: 32. Error String: [The process cannot access the file because it is being used by another process.] 07/13/2007 00:36:57.961 q2b58038758f4.smd ERROR: Virus scanner 2 didn't finish after 60 seconds; terminating. 07/13/2007 00:36:58.008 q2b58038758f4.smd Virus scanner 2 reports exit code of 0 07/13/2007 00:36:58.008 q2b58038758f4.smd Couldn't delete D:\IMail\spool\proc\work\D2b58038758f4.vir\report.txt: 32. Error String: [The process cannot access the file because it is being used by another process.] 07/13/2007 00:37:03.149 q2b5e036258f7.smd ERROR: Virus scanner 2 didn't finish after 60 seconds; terminating. 07/13/2007 00:37:03.149 q2b5e036258f7.smd Virus scanner 2 reports exit code of 0 07/13/2007 00:37:03.149 q2b5e036258f7.smd Couldn't delete D:\IMail\spool\proc\work\D2b5e036258f7.vir\report.txt: 32. Error String: [The process cannot access the file because it is being used by another process.] Any suggestions? I'm also concerned about the lines where is says the process cannot acces the file because it is being used Thanks, Ben BC Web --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
