Coming in late on this. It has been discussed on the Declude Virus list in depth about the NTVDM issue.
Yes, if you are having this problem, you should switch to the Windows version of F-Prot and use the fpcmd.exe file instead. John Tolmachoff Engineer/Consultant/Owner eServices For You > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:IMail_Forum- > [EMAIL PROTECTED] On Behalf Of William Daniels > Sent: Saturday, May 01, 2004 8:19 AM > To: [EMAIL PROTECTED] > Subject: RE: [IMail Forum] ntvdm and smtp32 error 0xC0000142 > > Scott, > > Everything has worked fine with the latest versions of Declude and F-Prot. > I am Imail 8.05 with all the updates. > > When I upgrade to Imail 8.1 and add all the patches, my SMTP server stops > and needs to be restarted on a regular basis. I've been told the patches > will fix it, but after each patch the same thing happens. I end up back on > 8.05. > > I'm using an NT 4 server with SP6. > > The thread listed in my subject indicates my problem could be f-prot. > Here is my virus.cfg (I've x'd out the code), please feel free to make any > suggestions about any part of virus.cfg: > > Is the SCANFILE correct for Imail 8.1 ? Or should it be fpcmd.exe as one > writer suggested? Is that my problem? > > Thanks, > > -Bill > --------------------------------- > > # > # Declude Virus configuration file > # > > CODE XXXXXXXXX > > # The "####" in the LOGFILE option automatically gets replaced with the > month/date > > LOGFILE spool\vir####.log > LOGLEVEL MID > > # > # SCANFILE is the location of the command-line virus scanner. Note that it > # must include the full path. VIRUSCODE is the code that scanner returns if > # it finds a virus. > # > > SCANFILE C:\Progra~1\FSI\F-Prot\F-Prot.exe /TYPE /SILENT /NOMEM > /ARCHIVE /NOFLOPPY /NOBOOT /DUMB /REPORT=report.txt > VIRUSCODE 3 > VIRUSCODE 6 > REPORT Infection > > # VIRDIR is the directory to move E-mails with viruses; by default, > # it is set to 'virus' (\IMail\spool\virus). > > VIRDIR spool\virus > > # The MAXATONCE option limits the number of AV processes. For example, > # MAXATONCE 1 will only allow 1 AV process to run at once (IE for licensing > # purposes). A value of 0 (or commenting it out) allows unlimited processes > # to run at the same time. > > MAXATONCE 0 > > # > # The following options allow you to limit scanning to only incoming or > outgoing > # E-mail. > # > > INCOMING ON > OUTGOING ON > > # > # The ONACCESS option should be set to OFF unless you have an on-access > virus scanner > # that will be deleting attachments with viruses. It is recommended NOT to > have an > # on-access scanner interfering, and to leave this at OFF. > # > > ONACCESS OFF > > # > # The SCANNERTIMEOUT option lets you choose the number of seconds that > Declude will > # wait for the virus scanner to finish. The minimum value is 10 seconds. > Most > # scanners will not need to take that long. This option is mainly to > prevent > # defective scanners (that never finish) from interfering with your outgoing > E-mail. > # Raising this will NOT help if your virus scanner always times out. > # > > SCANNERTIMEOUT 60 > > # > # The SKIPEXT option will let you skip scanning of certain file extensions. > For > # example, a GIF file can't contain a virus, so there is no need to scan it. > # > > SKIPEXT GIF > SKIPEXT TXT > SKIPEXT JPG > SKIPEXT MPG > SKIPEXT PNG > > # > # The BANEXT option will let you ban file extensions. E-mails containing > attachments > # with these file extensions will be quarantined, and if you have a > BANnotify.EML file, > # it will be sent out. This works in the Standard and Pro versions. > # > > #BANEXT scr > #BANEXT pif > #BANEXT bat > #BANEXT ceo > #BANEXT cmd > #BANEXT com > #BANEXT cpl > #BANEXT exe > #BANEXT hta > #BANEXT js > #BANEXT jse > #BANEXT lnk > #BANEXT msi > #BANEXT msp > #BANEXT pcd > #BANEXT reg > #BANEXT sct > #BANEXT shb > #BANEXT shs > #BANEXT vb > #BANEXT vbe > #BANEXT vbs > #BANEXT wsc > #BANEXT esf > #BANEXT wsh > NANNAME private.zip > BANNAME message.zip > BANNAME photos.zip > NANNAME wendy.zip > BANNAME NAV32.zip > BANNAME readnow.zip > BANNAME www.paypal.com.scr > BANNAME readmenow.zip > BANEXT ADE > BANEXT ADP > BANEXT ASD > BANEXT ASF > BANEXT ASP > BANEXT ASX > BANEXT BAS > BANEXT BAT > BANEXT CAB > BANEXT CEO > BANEXT CHM > BANEXT CHM > BANEXT CMD > BANEXT COM > BANEXT CPL > BANEXT CRT > BANEXT DLL > BANEXT EXE > BANEXT HLP > BANEXT HTA > BANEXT HTO > BANEXT INF > BANEXT INS > BANEXT ISP > BANEXT JS > BANEXT JSE > BANEXT LNK > BANEXT MDB > BANEXT MDE > BANEXT MSC > BANEXT MSI > BANEXT MSP > BANEXT MST > BANEXT NWS > BANEXT OCX > BANEXT PCD > BANEXT PIF > BANEXT PNG > BANEXT PRF > BANEXT REG > BANEXT SCF > BANEXT SCR > BANEXT SCT > BANEXT SHB > BANEXT SHS > BANEXT SYS > # BANEXT URL > BANEXT VB > BANEXT VBE > BANEXT VBS > BANEXT VBX > BANEXT VSD > BANEXT VSS > BANEXT VST > BANEXT VSW > BANEXT WS > BANEXT WSC > BANEXT WSF > BANEXT WSH > BANEXT XML > BANEXT PI > BANEXT UUE > BANEXT ZIP > # > # Declude Virus Pro can pre-scan HTML files. If no dangerous code is > detected, the > # virus scanner will not get called. This can significantly cut down on CPU > usage. > # > > PRESCAN OFF > > # > # Declude Virus can block treat files using CLSID extensions as viruses. > This type of > # extension will force a certain type of program to be run, while making the > file appear > # to be a .TXT or other safe file. There is no known legitimate reason to > send this > # type of file through E-mail. BANPARTIAL ON bans the Partial > Vulnerability. > # > > BANCLSID ON > BANPARTIAL ON > > # > # The FOOTER lines will add a footer to the bottom of E-mails that are > scanned. This may > # not be visible if you send HTML or attachments with the E-mail. > # > > FOOTER --- > FOOTER [This E-mail scanned for viruses by Declude Virus at > Episcopal Academy] > > # > # The DELETEVIRUSES option, when set to ON, will delete viruses, rather than > quarantine them. > # It is recommended to leave this at OFF. > # > > DELETEVIRUSES ON > > # > # The DELIVERERRORS option, when set to ON, will treat errors from the virus > scanner as if no > # virus was found. When set to ON, this could cause viruses to get through > in rare situations, > # but will also prevent legitimate mail from being quarantined due to an > error in the scanner. > # It is recommend to leave this at ON. > # > > DELIVERERRORS ON > > # > # The BANCRVIRUSES option will automatically treat E-mail with malformed > headers that could > # contain a virus as if they did contain a virus. It is strongly > recommended that you keep > # this set to ON; otherwise, viruses could slip through. > # > > BANCRVIRUSES ON > > # > # The FORGINGVIRUS option is used to list viruses that forge the return > address, so Declude > # can replace the name of the sender with "[Forged]". > # > > FORGINGVIRUS Klez > FORGINGVIRUS Fizzer > FORGINGVIRUS Sobig > FORGINGVIRUS Bagle > FORGINGVIRUS Beagle > FORGINGVIRUS MYDoom > > > William E. Daniels > Director of Technology > Episcopal Academy > 376 N. Latches Lane > Merion Station, PA 19066-1797 > 610-617-2225 (W) 610-656-5505 (cell) > [EMAIL PROTECTED] www.ea1785.org > www.ea1785.org/htm/Units/Upper/computer/daniels/daniels.htm > > --- > [This E-mail scanned for viruses by Declude Virus at Episcopal Academy] > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
