RE: [Declude.Virus] Issues

[Keith Johnson]

Title: Re: [Declude.Virus] Issues

Scott,     Continue to see a lot of these type things, at times, the only to aid the situation is stop/restart the Queue Mgr/SMTP   02/18/2005 11:44:11 Q1b3d04d2006a5060 ERROR: Could not open recip file F:\IMail\spool\_1b3d04d2006a5060.~MD [2] 02/18/2005 11:44:11 Q1a58046e00fc4c6c ERROR: Could not open recip file F:\IMail\spool\_1a58046e00fc4c6c.~MD [2] 02/18/2005 11:44:11 Q1b4902b000745089 ERROR: Could not open recip file F:\IMail\spool\_1b4902b000745089.~MD [2] 02/18/2005 11:44:11 Q1a58046e00fc4c6c ERROR: Could not open recip file F:\IMail\spool\_1a58046e00fc4c6c.~MD [2] 02/18/2005 11:44:11 Q1b37039c00b25045 ERROR: Could not open recip file F:\IMail\spool\_1b37039c00b25045.~MD [2] 02/18/2005 11:44:11 Q1b37039c00b25045 ERROR: Could not open recip file F:\IMail\spool\_1b37039c00b25045.~MD [2] 02/18/2005 11:44:12 Q1b43039c00b2507a ERROR: Could not open recip file F:\IMail\spool\_1b43039c00b2507a.~MD [2] 02/18/2005 11:44:12 Q1b37039c00b25045 ERROR: Could not open recip file F:\IMail\spool\_1b37039c00b25045.~MD [2] 02/18/2005 11:44:12 Q1b43039c00b2507a ERROR: Could not open recip file F:\IMail\spool\_1b43039c00b2507a.~MD [2] 02/18/2005 11:44:12 Q1b37039c00b25045 ERROR: Could not open recip file F:\IMail\spool\_1b37039c00b25045.~MD [2] 02/18/2005 11:44:12 Q1b4a020101285097 ERROR: Could not open recip file F:\IMail\spool\_1b4a020101285097.~MD [2] 02/18/2005 11:44:12 Q1b43039c00b2507a ERROR: Could not open recip file F:\IMail\spool\_1b43039c00b2507a.~MD [2] 02/18/2005 11:44:12 Q1b37039c00b25045 ERROR: Could not open recip file F:\IMail\spool\_1b37039c00b25045.~MD [2] 02/18/2005 11:44:12 Q1b4a020101285097 ERROR: Could not open recip file F:\IMail\spool\_1b4a020101285097.~MD [2] 02/18/2005 11:44:12 Q1b43039c00b2507a ERROR: Could not open recip file F:\IMail\spool\_1b43039c00b2507a.~MD [2] 02/18/2005 11:44:12 Q1b37039c00b25045 ERROR: Could not open recip file F:\IMail\spool\_1b37039c00b25045.~MD [2] 02/18/2005 11:44:12 Q1b4a020101285097 ERROR: Could not open recip file F:\IMail\spool\_1b4a020101285097.~MD [2] 02/18/2005 11:44:12 Q1b43039c00b2507a ERROR: Could not open recip file F:\IMail\spool\_1b43039c00b2507a.~MD [2] 02/18/2005 11:44:12 Q1b37039c00b25045 ERROR: Could not open recip file F:\IMail\spool\_1b37039c00b25045.~MD [2] 02/18/2005 11:44:12 Q1b37039c00b25045 ERROR: Could not open recip file F:\IMail\spool\_1b37039c00b25045.~MD [2] 02/18/2005 11:44:12 Q1b37039c00b25045 ERROR: Could not open recip file F:\IMail\spool\_1b37039c00b25045.~MD [2] 02/18/2005 11:44:12 Q1b37039c00b25045 ERROR: Could not open recip file F:\IMail\spool\_1b37039c00b25045.~MD [2] 02/18/2005 11:44:12 Q1b32017700ee5028 ERROR: Could not open recip file F:\IMail\spool\_1b32017700ee5028.~MD [2] 02/18/2005 11:44:12 Q1b4a03a500a05092 ERROR: Could not open recip file F:\IMail\spool\_1b4a03a500a05092.~MD [2] 02/18/2005 11:44:12 Q1b38021800b8504b ERROR: Could not open recip file F:\IMail\spool\_1b38021800b8504b.~MD [2] 02/18/2005 11:44:12 Q1b38021800b8504b ERROR: Could not open recip file F:\IMail\spool\_1b38021800b8504b.~MD [2] 02/18/2005 11:44:12 Q1b38021800b8504b ERROR: Could not open recip file F:\IMail\spool\_1b38021800b8504b.~MD [2] 02/18/2005 11:44:12 Q1b38021800b8504b ERROR: Could not open recip file F:\IMail\spool\_1b38021800b8504b.~MD [2] 02/18/2005 11:44:12 Q1b38021800b8504b ERROR: Could not open recip file F:\IMail\spool\_1b38021800b8504b.~MD [2] 02/18/2005 11:44:12 Q1b38021800b8504b ERROR: Could not open recip file F:\IMail\spool\_1b38021800b8504b.~MD [2] 02/18/2005 11:44:13 Q1b38021800b8504b ERROR: Could not open recip file F:\IMail\spool\_1b38021800b8504b.~MD [2] 02/18/2005 11:44:13 Q1b38021800b8504b ERROR: Could not open recip file F:\IMail\spool\_1b38021800b8504b.~MD [2]   Any ideas or suggestions?   Keith From: Keith Johnson [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Friday, February 18, 2005 7:57 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Issues Scott,        We are not running on access scanners (very careful about that), we are running Imail 8.15.  I didn't even install the Realtime Scanner in f-prot and have CA Realtime disabled as a service.    Anything else that I can look at?   Keith -----Original Message----- From: [EMAIL PROTECTED] on behalf of R. Scott Perry Sent: Fri 2/18/2005 7:12 AM To: Declude.Virus@declude.com Cc: Subject: Re: [Declude.Virus] Issues >The past few days I am occuring a lot of these type errors in the virus log: > >02/18/2005 06:03:21 Qcb35092800dc91ac Couldn't open headers datafile This indicates that something happened to the D*.SMD file, which contains the E-mail body.  If you are running an on-access virus scanner, for example, the on-access virus scanner may have deleted the E-mail. >02/18/2005 06:03:21 Qcb35092800dc91ac ERROR: Could not move virus-infected >E-mail2!  Code: 2 0 F:\IMail\spool\Qcb35092800dc91ac.SMD >f:\imail\spool\virus\Qcb35092800dc91ac.SMD And this one means that the Q*.SMD file isn't there, either.  This would seem unusual, except we then get: >02/18/2005 06:03:24 Qcb3e09ed005291c3 Error 183 creating temp directory >F:\IMail\spool\Dcb3e09ed005291c3.vir\. This one means that the F:\IMail\spool\Dcb3e09ed005291c3.vir\ directory already exists.  That is a major clue, as Declude Virus is the only program that will create a directory with that name. This means that IMail is calling Declude multiple times.  We've seen this happen a few times before -- you may want to make sure that you are running the latest version of IMail.                                                     -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".    The archives can be found at http://www.mail-archive.com.