[sniffer] Re: .smd.tmp files being left in proc\work folders

[Pete McNeil]

On 08/09/2016 05:11 PM, Don Winsauer wrote:

These file are being left and not being delivered.  They are usually over 20mg.


Something is preventing SNF from renaming the file. Find out what it is 
and then prevent it from blocking SNF. Perhaps a virus scanner has the 
file open when SNF comes by to rename it??


SNF tries to do everything safely, so when injecting it's headers it 
writes the new message file with a .tmp extension and makes sure that 
succeeded before it removes the original and then renames the .tmp.


My guess is that the new .tmp file catches the attention of some scanner 
or other program and that when SNF goes to rename the .tmp file to 
replace the original it is unable to do it.


Hope this helps,

_M


--
Pete McNeil
Chief Scientist
ARM Research Labs, LLC
www.armresearch.com
866-770-1044 x7010
twitter/codedweller


#
This message is sent to you because you are subscribed to
 the mailing list .
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: 
To switch to the DIGEST mode, E-mail to 
To switch to the INDEX mode, E-mail to 
Send administrative queries to  

[sniffer] .smd.tmp files being left in proc\work folders

[Don Winsauer]

These file are being left and not being delivered.  They are usually over 20mg.

Some log entries:
i:\imail\declude\snf\utgi97vy.20160808.log.xml:
 
i:\imail\declude\snf\utgi97vy.20160808.log.xml:
 

What can I do to stop this?  Is there anything else you need from me?

Thanks,
Don
 





Sent via the WebMail system at net1media.com


 
   

#
This message is sent to you because you are subscribed to
  the mailing list .
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: 
To switch to the DIGEST mode, E-mail to 
To switch to the INDEX mode, E-mail to 
Send administrative queries to  

[sniffer] .smd.tmp files being left in proc\work folders

[Don Winsauer]

i:\imail\declude\snf\utgi97vy.20160808.log.xml:
i:\imail\declude\snf\utgi97vy.20160808.log.xml: 





Sent via the WebMail system at net1media.com


 
   

#
This message is sent to you because you are subscribed to
  the mailing list .
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: 
To switch to the DIGEST mode, E-mail to 
To switch to the INDEX mode, E-mail to 
Send administrative queries to