Hi All,
We've been testing ClamAV with Declude AVA on our new mail server (running
2006.2). We only have a few mailboxes on this server because we're still
testing it. Today, I ran into a problem where the D: drive ran out of space
(100GB). It turns out the d:\temp folder was very large (90GB) and that was
due to a large number of folders named <long string of characters>.clamtmp
or some such. Each of those folders was full of very files, some quite
large. My take is that these are temp folders created by ClamAV, but I
can't figure out why they're being left behind.
The lines for ClamAV in virus.cfg are:
CLAMAV
SCANFILE2
D:\Progra~1\clamwin\bin\clamscan.exe --verbose --database="C:\docume~1\alluse~1.win\clamwi~1\db"
--tempdir="D:\Temp" --no-summary -l report.txt
VIRUSCODE2 1
REPORT2 FOUND
I also noticed some strange lines in the virus log files:
07/13/2007 00:31:17.439 q2a03033d000058e6.smd ERROR: Virus scanner 2 didn't
finish after 60 seconds; terminating.
07/13/2007 00:31:17.439 q2a03033d000058e6.smd Virus scanner 2 reports exit
code of 0
07/13/2007 00:31:17.439 q2a03033d000058e6.smd Couldn't delete
D:\IMail\spool\proc\work\D2a03033d000058e6.vir\report.txt: 32. Error String:
[The process cannot access the file because it is being used by another
process.]
07/13/2007 00:31:47.440 q2a03033d000058e6.smd Scanned: Virus Free [MIME: 1
26]
07/13/2007 00:32:31.597 q2a8a0359000058eb.smd Vulnerability flags = 0
07/13/2007 00:33:32.551 q2a8a0359000058eb.smd ERROR: Virus scanner 2 didn't
finish after 60 seconds; terminating.
07/13/2007 00:33:32.551 q2a8a0359000058eb.smd Virus scanner 2 reports exit
code of 0
07/13/2007 00:33:32.551 q2a8a0359000058eb.smd Couldn't delete
D:\IMail\spool\proc\work\D2a8a0359000058eb.vir\report.txt: 32. Error String:
[The process cannot access the file because it is being used by another
process.]
07/13/2007 00:36:57.961 q2b580387000058f4.smd ERROR: Virus scanner 2 didn't
finish after 60 seconds; terminating.
07/13/2007 00:36:58.008 q2b580387000058f4.smd Virus scanner 2 reports exit
code of 0
07/13/2007 00:36:58.008 q2b580387000058f4.smd Couldn't delete
D:\IMail\spool\proc\work\D2b580387000058f4.vir\report.txt: 32. Error String:
[The process cannot access the file because it is being used by another
process.]
07/13/2007 00:37:03.149 q2b5e0362000058f7.smd ERROR: Virus scanner 2 didn't
finish after 60 seconds; terminating.
07/13/2007 00:37:03.149 q2b5e0362000058f7.smd Virus scanner 2 reports exit
code of 0
07/13/2007 00:37:03.149 q2b5e0362000058f7.smd Couldn't delete
D:\IMail\spool\proc\work\D2b5e0362000058f7.vir\report.txt: 32. Error String:
[The process cannot access the file because it is being used by another
process.]
Any suggestions? I'm also concerned about the lines where is says "the
process cannot acces the file because it is being used...".
Thanks,
Ben
BC Web
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
