[Declude.Virus] ClamAV with a strong aroma

2007-06-26 Thread John Shacklett
Is anyone using ClamWin 0.90.2.1 with Declude AV? I was, using the following
line from the virus.cfg:
 
SCANFILE4 C:\Progra~1\ClamWin\bin\clamscan.exe --verbose
--database=C:\Docume~1\AllUse~1\.clamwin\db
--tempdir=C:\PROGRA~1\IPSWITCH\IMAIL\Declude\Scanners\ClamAV --no-summary -l
report.txt

All of a sudden last week, it started filling my
C:\PROGRA~1\IPSWITCH\IMAIL\Declude\Scanners\ClamAV folder with *.clamtmp
folders that wouldn't clear [and chewed up 100GB of free space in a couple
of days], and I also started getting did not finish in time messages in
the vir.logs, and it threw my CPU usage to 100% constantly. I commented
clam back out and the performance went right back to normal.
 
Has anyone else seen anything unusual with clamav performance recently?
 
 
John S.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



[Declude.Virus] automated response

2007-06-26 Thread Stephen King
I am on vaction the week of 6/25 - 29/2007.




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] ClamAV with a strong aroma

2007-06-26 Thread george kulman
John,

I dropped ClamWin 0.90 a month or so ago due to similar performance issues.

George

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John
 Shacklett
 Sent: Tuesday, June 26, 2007 8:11 AM
 To: Declude.Virus@declude.com
 Subject: [Declude.Virus] ClamAV with a strong aroma
 
 Is anyone using ClamWin 0.90.2.1 with Declude AV? I was, using the
 following
 line from the virus.cfg:
 
 SCANFILE4 C:\Progra~1\ClamWin\bin\clamscan.exe --verbose
 --database=C:\Docume~1\AllUse~1\.clamwin\db
 --tempdir=C:\PROGRA~1\IPSWITCH\IMAIL\Declude\Scanners\ClamAV --no-summary
 -l
 report.txt
 
 All of a sudden last week, it started filling my
 C:\PROGRA~1\IPSWITCH\IMAIL\Declude\Scanners\ClamAV folder with *.clamtmp
 folders that wouldn't clear [and chewed up 100GB of free space in a couple
 of days], and I also started getting did not finish in time messages in
 the vir.logs, and it threw my CPU usage to 100% constantly. I
 commented
 clam back out and the performance went right back to normal.
 
 Has anyone else seen anything unusual with clamav performance recently?
 
 
 John S.
 
 
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



[Declude.Virus] Virus or Junk?

2007-06-26 Thread Todd Richards
Hey Everyone -
 
Last night I received a junk mail with no body and a small PDF attachment.
This morning I received two more from different people, and differently
named small PDF attachments.

Anyone else seeing this, know what it is, and doing anything special yet to
combat it?  I would certainly hate to ban PDF files...

Thanks,

Todd




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



Re: [Declude.Virus] Virus or Junk?

2007-06-26 Thread Darin Cox
Yep... spammers are now using PDFs for their payload.

Darin.


- Original Message - 
From: Todd Richards [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Tuesday, June 26, 2007 10:48 AM
Subject: [Declude.Virus] Virus or Junk?


Hey Everyone -

Last night I received a junk mail with no body and a small PDF attachment.
This morning I received two more from different people, and differently
named small PDF attachments.

Anyone else seeing this, know what it is, and doing anything special yet to
combat it?  I would certainly hate to ban PDF files...

Thanks,

Todd




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] Virus or Junk?

2007-06-26 Thread Todd Richards
Grrr..

Todd
 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin
Cox
Sent: Tuesday, June 26, 2007 9:56 AM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] Virus or Junk?

Yep... spammers are now using PDFs for their payload.

Darin.


- Original Message -
From: Todd Richards [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Tuesday, June 26, 2007 10:48 AM
Subject: [Declude.Virus] Virus or Junk?


Hey Everyone -

Last night I received a junk mail with no body and a small PDF attachment.
This morning I received two more from different people, and differently
named small PDF attachments.

Anyone else seeing this, know what it is, and doing anything special yet to
combat it?  I would certainly hate to ban PDF files...

Thanks,

Todd




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.





---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



re: [Declude.Virus] ClamAV with a strong aroma

2007-06-26 Thread Gary Steiner
I'm using the SOSDG port which is currently at version 0.90.3-3c and have not 
encountered the problem you describe.  Then again, I'm also using SmarterMail, 
so don't know if this may be an IMail compatibility problem.


 Original Message 
 From: John Shacklett [EMAIL PROTECTED]
 Sent: Tuesday, June 26, 2007 8:25 AM
 To: Declude.Virus@declude.com
 Subject: [Declude.Virus] ClamAV with a strong aroma
 
 Is anyone using ClamWin 0.90.2.1 with Declude AV? I was, using the following
 line from the virus.cfg:
  
 SCANFILE4 C:\Progra~1\ClamWin\bin\clamscan.exe --verbose
 --database=C:\Docume~1\AllUse~1\.clamwin\db
 --tempdir=C:\PROGRA~1\IPSWITCH\IMAIL\Declude\Scanners\ClamAV --no-summary -l
 report.txt
 
 All of a sudden last week, it started filling my
 C:\PROGRA~1\IPSWITCH\IMAIL\Declude\Scanners\ClamAV folder with *.clamtmp
 folders that wouldn't clear [and chewed up 100GB of free space in a couple
 of days], and I also started getting did not finish in time messages in
 the vir.logs, and it threw my CPU usage to 100% constantly. I commented
 clam back out and the performance went right back to normal.
  
 Has anyone else seen anything unusual with clamav performance recently?
  
  
 John S.
 
 
 




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.