So I disabled the On-Access scanner and I still get the error when an email
is found with a virus....

08/21/2003 16:03:46 Q2584064 ERROR: Virus scanner didn't finish after 30
seconds; terminating.
08/21/2003 16:04:03 Q2584064 Couldn't delete C:\IMail\spool\D2584064.vir\0:
32.
08/21/2003 16:04:03 Q2584064 WARNING: Couldn't remove .vir directory
C:\IMail\spool\D2584064.vir\: SHARING VIOLATION.
08/21/2003 16:04:03 Q2584064 Likely problem: An on-access scanner is
interfering; disable or set not to scan subdirectories off of \IMail\spool.
08/21/2003 16:04:03 Q2584064 Scanned: Virus Free [MIME: 2 1128]


Notice the last line of this message. The file went from being infected to
Virus Free - how?
Greg

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Darrell LaRock
Sent: Wednesday, August 20, 2003 2:48 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] On Access Question


Question is do you still get the error if you disable on-access scan?
That's one way to rule it out....

Darrell


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Wednesday, August 20, 2003 2:42 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] On Access Question


>I'm 99.9999% sure that McAfee is not scanning that directory. If I open the
>On Access scanner and watch it as I open a file in that directory it does
>not show the file being opened.
>
>Could the permissions on the directory be wrong? If so-- what should it be
>set to?

It isn't a permissions issue.  It is definitely a sharing violation.  It
means that some program besides Declude is accessing the directory, which
won't normally happen (how else will a program know that the directory is
there?  Not even IMail knows).  So it would have to be a program that
either knows as soon as files are written to the hard drive (as in the case
with the virus scanner), or that looks at all the files on the hard drive
(such as a backup program).

                                                    -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to