> [mailto:[EMAIL PROTECTED] nombre de Trog
> Enviado el: Martes, 25 de Mayo de 2004 11:19 a.m.
>
> On Tue, 2004-05-25 at 15:41, Samuel Benzaquen wrote:
> > > Upgrade to 0.71.
> > >
> > > It was most likely waiting for a scanning thread to finish,
> which it has
> > > to do before it can reload the sig DB. If a scanning thread fails to
> > > finish, that indicates a bug in the scanner somewhere (which may have
> > > been fixed already).
> >
> > Is there any way I can reproduce this problem?
> > Just to see if the upgrade fixes it.
>
> Only if you have positively identified a file that caused it.
>
> >
> > >
> > > You should try and recover the file that is has a problem scanning.
> >
> > How can I do that?
> > We have no quarantine directory configured.
> >
>
> If clamd still has a file descriptor open to a file you can recover it
> through the /proc filesystem (even if it's been deleted).
>
> cat /proc/<pid>/fd/<fd> > file.msg
>
> -trog
>
Happened again yesterday twice.
Done the cat and recovered both files.
Both files have an attachment with this desc:
------=_NextPart_000_0030_01C444A2.53C581E0
Content-Type: application/mac-binhex40;
name="CoverNB.jpg.hqx"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
filename="CoverNB.jpg.hqx"
(This file must be converted with BinHex 4.0)
:#%&[EMAIL PROTECTED]"TAJ!!#q8qI2rpMri!!35NC*4J!"!J%!C!"
N!!$ri4PA4AKTCJ!!68d!+J!!!!J!"`%5!!-!!!!"!!%!!!%D!!8!!!!"!!!!BJ%
E!!8!!!!"!!!!DJ%S!!-!!!!"!!)!!!%a!!)!!!!8!!!!FJ%b!!)!!!!8!!!!KSG
T!!3!!!!"!!!!R!!!!-J!!!"N!!!!!3!!!'3!!!!"[EMAIL PROTECTED]'K[G'pcD'p`)$F
Z-!!b-$!d1M!e1M)h)$%c1M!`1M3j!*!%!k!"!!-!!!!"rrm!!+!#!!3!!!!"!!!
......
When I do a clamscan of the file it returns OK inmediatly, but when I do a
clamdscan it gets stuck.
[EMAIL PROTECTED] (mail-01) /var/tmp
# clamdscan ./tmpf5kXB5B
[EMAIL PROTECTED] (mail-01) /var/tmp
# clamscan ./tmpf5kXB5B
./tmpf5kXB5B: OK
----------- SCAN SUMMARY -----------
Known viruses: 21755
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 0.61 MB
I/O buffer size: 131072 bytes
Time: 1.291 sec (0 m 1 s)
[EMAIL PROTECTED] (mail-01) /var/tmp
What should I do?
Thanks,
Samuel Benzaquen
-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
