Glad to hear it. G
> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Harry Vanderzand > Sent: Saturday, March 04, 2006 10:17 AM > To: [email protected] > Subject: RE: [Declude.Virus] clamwin second scanner error > > thank you George. > > I appreciate the help > > It is running well now > > > Harry Vanderzand > inTown Internet & Computer Services > 519-741-1222 > > > > > > ________________________________ > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of george kulman > Sent: Saturday, March 04, 2006 7:04 AM > To: [email protected] > Subject: RE: [Declude.Virus] clamwin second scanner error > > > > Craig, > > > > You seem to be using the command lines for Clamav and not ClamWn in > your virus.cfg. The following id for a default installation of ClamWin. > Also, be sure that you have a C:\Temp directory set up. > > > > SCANFILE C:\Progra~1\clamwin\bin\clamscan.exe --verbose -- > database="C:\Docume~1\Alluse~1\.clamwin\db" --tempdir="c:\Temp" --no- > summary -l report.txt > > VIRUSCODE 1 > > REPORT FOUND > > > > George > > > > > > > > > ________________________________ > > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Craig Edmonds > Sent: Saturday, March 04, 2006 5:05 AM > To: [email protected] > Subject: RE: [Declude.Virus] clamwin second scanner error > Importance: High > > > > Hi, > > > > I get a similar error and my virus.cfg file contains this entry.... > > > > SCANFILE C:\progra~1\clamwin\bin\clamscan.exe --quiet --log-verbose > --no-summary --max-ratio 0 -l report.txt > VIRUSCODE 1 > > > > (I only use clam so VIRUSCODE will be 1) > > > > I get a similar error. > > > > this is an example of one log entry ..... > > > > 03/04/2006 10:55:18.528 q640402a300d0f29e.smd Vulnerability flags = > 0 > 03/04/2006 10:55:18.538 q640402a300d0f29e.smd MIME file: > [text/html][quoted-printable; Length=867 Checksum=69427] > 03/04/2006 10:55:18.769 q640402a300d0f29e.smd Virus scanner 1 > reports exit code of 50 > 03/04/2006 10:55:20.932 q640402a300d0f29e.smd Virus scanner 1 > reports exit code of 50 > 03/04/2006 10:55:23.586 q640402a300d0f29e.smd Virus scanner 1 > reports exit code of 50 > 03/04/2006 10:55:25.799 q640402a300d0f29e.smd Virus scanner 1 > reports exit code of 50 > 03/04/2006 10:55:28.433 q640402a300d0f29e.smd Virus scanner 1 > reports exit code of 50 > > > > but here is another...(note is says "contains a virus") > > 03/04/2006 10:55:39.268 q64142ab20086f2a4.smd Vulnerability flags = > 0 > 03/04/2006 10:55:39.278 q64142ab20086f2a4.smd Outlook 'CR' > vulnerability [Subject: Y] in line 6 > 03/04/2006 10:55:39.368 q64142ab20086f2a4.smd Virus scanner 1 > reports exit code of 50 > > 03/04/2006 10:55:41.451 q64142ab20086f2a4.smd Virus scanner 1 > reports exit code of 50 > 03/04/2006 10:55:44.015 q64142ab20086f2a4.smd Virus scanner 1 > reports exit code of 50 > > 03/04/2006 10:55:46.108 q64142ab20086f2a4.smd Virus scanner 1 > reports exit code of 50 > > 03/04/2006 10:55:48.181 q64142ab20086f2a4.smd Virus scanner 1 > reports exit code of 50 > > 03/04/2006 10:55:50.184 q64142ab20086f2a4.smd File(s) are INFECTED > [[Outlook 'CR' Vulnerability]: 50] > > 03/04/2006 10:56:11.334 q64142ab20086f2a4.smd Scanned: CONTAINS A > VIRUS > 03/04/2006 10:56:11.334 q64142ab20086f2a4.smd From: > [EMAIL PROTECTED] To: [EMAIL PROTECTED] [incoming from > 213.199.252.61] > 03/04/2006 10:56:11.334 q64142ab20086f2a4.smd Subject: Your sex > popularity is in your hands and in the hands of Ultra Allure Pheromones. > > > > Based on these two different files and log entrie, is CLAM working > correctly or not? > > > > (Windows 2003, Declude 3.05, CLam AV - up to date latest version.) > > > > Kindest Regards > Craig Edmonds > 123 Marbella Internet > W: www.123marbella.com <http://www.123marbella.com/> > E : [EMAIL PROTECTED] > > Marbella Guide Web Portal > W: www.marbellaguide.com <http://www.marbellaguide.com/> > E: [EMAIL PROTECTED] > > > > DISCLAIMER - This message may contain confidential, proprietary or > legally privileged information and is intended only for the use of the > addressee named above. If you are not the intended recipient of this > message you are hereby informed that you must not use, disseminate, copy > it in any form or take any action in reliance on it. If you have received > this message in error please delete it and any copies of it and notify it > to the sender. > > > AVISO LEGAL - Este mensaje puede contener informacion confidencial, > en propiedad o legalmente protegida y esta dirigida unicamente para el uso > de la persona destinataria. Si usted no es la persona destinataria de este > mensaje, por la presente se le comunica que no debe usar, difundir, copiar > de ninguna forma, ni emprender ninguna accion en relacion con ella. > > ========================================= > > > > > > > ________________________________ > > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Harry Vanderzand > Sent: Saturday, March 04, 2006 5:07 AM > To: [email protected] > Subject: RE: [Declude.Virus] clamwin second scanner error > > thank you George > > > > I made the change but now get a different error: > > > > 03/03/2006 23:04:41.708 q11c601a30000eb87.smd Error 50 in virus > scanner 2. > 03/03/2006 23:04:41.708 q11c601a30000eb87.smd Scanned: Error in > virus scanner. > > > > Do you know what that is about? > > > > Harry Vanderzand > inTown Internet & Computer Services > 519-741-1222 > > > > > > > ________________________________ > > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of george kulman > Sent: Friday, March 03, 2006 6:15 PM > To: [email protected] > Subject: RE: [Declude.Virus] clamwin second scanner error > > Harry, > > > > For the second scanner you need to have a 2 after SCANFILE and > VIRUSCODE > > > > SCANFILE2 C:\progra~1\clamwin\bin\clamscan.exe --quiet --log- > verbose --no-summary --max-ratio 0 -l report.txt > VIRUSCODE2 1 > > > > George > > > > > ________________________________ > > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Harry Vanderzand > Sent: Friday, March 03, 2006 5:16 PM > To: [email protected] > Subject: [Declude.Virus] clamwin second scanner error > > > > I added clamav as a second scanner to my virus.cfg file as > follows: > > > > SCANFILE C:\F-Prot\fpcmd.exe -TYPE -SILENT -NOMEM -ARCHIVE=5 > -DUMB -NOBOOT -REPORT=report.txt > VIRUSCODE 3 > VIRUSCODE 6 > VIRUSCODE 8 > REPORT Infection: > > > > SCANFILE C:\progra~1\clamwin\bin\clamscan.exe --quiet --log- > verbose --no-summary --max-ratio 0 -l report.txt > VIRUSCODE 1 > > > > > > > > > > Now I get the folowing error in the virus log: > > 03/03/2006 17:11:59.307 qbf260199000090d6.smd Vulnerability > flags = 862 > 03/03/2006 17:12:09.448 qbf260199000090d6.smd Could not find > parse string Infection: in report.txt > 03/03/2006 17:12:09.448 qbf260199000090d6.smd Error 50 in > virus scanner 1. > 03/03/2006 17:12:09.448 qbf260199000090d6.smd Your virus > scanner DOES NOT EXIST (at D:\IMail\spool\proc\work\DBF260~1.VIR\); NOT > SCANNING ATTACHMENTS! [2] Error String: [The system cannot find the file > specified.] > 03/03/2006 17:12:09.448 qbf260199000090d6.smd Scanned: Error > starting scanner > > > > Any idea what I did wrong? > > > > thank you > > Harry Vanderzand > inTown Internet & Computer Services > 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 > 519-741-1222 > > --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
