>We had notice that Bad.Trans is getting through our iMail >6.06/Declude/F-Prot scanning engine. To resolve we manually upgraded our >F-Prot DOS engine to 3.11 and expanded the new AV def files. A tech copied >those new files into the working Declude folder.
You should check to make sure that the F-Prot.PIF file was deleted. This file instructs F-Prot to stay running until manually shut down, leaving the processes in memory. >We began getting application popup errors indicating failure of the DLLs >related to smtp32.exe, ntvdm.exe, comnctl32. About 40 instances of >ntvdm.exe now run, and about 20-30 declude.exe processes. You can go to http://www.declude.com/dq.htm to see why this happens -- it's a combination of many factors, including Ipswitch's architecture, undocumented Microsoft resources, and having too many service-started processes running. >Ipswitch support said it is (1) virus Nope, wrong answer. >or (2)an MS issue. Yes and no. It's a combination IMail/Microsoft issue, and F-Prot not ending acted as a catalyst to make the problem more apparent. > 3 virus scans show none on the system folder. Nor in the iMail > executable dir. Probably have some infected mail in the user folders. MS, > says it is not an OS issue. It definitely is an OS issue; they have KB articles mentioning their "mystery heap" that is undocumented. You are running out of this mystery resource (there is no way to measure it to see how low you are). >Ipswitch recommends re-installing the os. NO!!! This will not help. > MS does not. They suggest reinstalling iMail and declude. Their answer is better, but not perfect. Their answer should be that a registry entry should be changed, but you don't need to do that, because the problem is the F-Prot processes staying open in memory until Declude decides they have been there too long and shuts them down. Deleting the F-Prot.PIF file should solve the problem. -Scott --- Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for IMail. http://www.declude.com Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
