Sorry for the delay searching the logs. Here they are I found some really strange things. I believe you can really understand what is going on. Attached is a small zip file. it contains SMD files and a report.txt I just extracted the info of 5 different cases. 4 of them with their SMD files.
the strange thing is that all files are related to the same email type. they are emails coming from a postmaster of the smtp used by a client of mine to send massive mail. the postmaster response says that the host wasn't found or user unknown in some cases and returned the email sent by my client. when declude scans those emails, the problem shows up. that is really weird. what do you think? regards... and sorry in advance for bothering you with this case. The only reliefe I have is that the emails presenting the errors are just return notifications, but nevertheless it is very strange and shouldn't happen right? regards Luis Arango ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, October 13, 2002 12:31 PM Subject: Re: [Declude.Virus] declude log > > >I am running just one instance of IMAIL software. I am not aware of any > >software or service calling declude.exe twice. > > > >In october 11 the "Error 183" happened about 46 times. And declude scanned > >23 thousand inbound mails that day.... so that is very weird. > > > >for example today (saturday-october 12)... by 2:00 pm.. .no "Error 183" has > >occurred and two thousand inbound messages have been virus scanned > > > >if declude is called twice... I should be receiving "error 183" for every > >single message declude scans... > > > >whith that said.. any suggestion? > > Could you check the log file for one of the instances where this happens, > and check for all log file entries with the same identifier for that > day? For example, if there is a log file entry: > > 10/11/2002 11:54:51 Q022d018301e47115 Error: Couldn't lock file > d:\IMail\spool\Q022d018301e47115.SMD (183) > > then you could search the log file for "022d018301e47115", like this: > > find "022d018301e47115" \IMail\spool\vir1011.log /i > > or > > find "022d018301e47115" \IMail\spool\vir1011.log /i > list.txt > > to save the output to a file "list.txt". Recent versions of IMail (the one > with the long file names in the spool) are supposed to use unique file > names, and not repeat them -- searching the Declude Virus log file as > described above should help determine if IMail is reusing the same file name. > -Scott > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- > [Email escaneado contra virus por Panda Consulting -www.pandacons.com-] > [Email scanned for viruses by Panda Consulting -www.pandacons.com-] > >
report1016.zip
Description: application/compressed
