RE: [Declude.Virus] High CPU F-Prot

2005-04-29 Thread Dan Horne
uld not find parse string Infection" log entries I found. Bill - Original Message - From: Matt To: Declude.Virus@declude.com Sent: Thursday, April 28, 2005 10:58 AM Subject: Re: [Declude.Virus] High CPU F-Prot Andrew, If you are only using F-Prot, you should be able

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Matt
After further review, I'm pretty sure that there is an F-Prot issue going on here. My server hasn't been hitting 100% yet today, and I also haven't seen any F-Prot timeouts, however I have found more compelling evidence that there is an issue with F-Prot that would probably lead to timeouts

RE: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Markus Gufler
On Behalf Of MattSent: Thursday, April 28, 2005 6:57 PMTo: Declude.Virus@declude.comSubject: Re: [Declude.Virus] High CPU F-Prot After further review, I'm pretty sure that there is an F-Prot issue going on here.My server hasn't been hitting 100% yet today, and I also haven't seen

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Matt
alf Of Matt Sent: Thursday, April 28, 2005 6:57 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] High CPU F-Prot After further review, I'm pretty sure that there is an F-Prot issue going on here. My server hasn't been hitting 100% yet today, and I also ha

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Nick
On 28 Apr 2005 at 12:57, Matt wrote: Matt - If this becomes a real problem that you see and can monitor I would revert back to an older scan.exe to eliminate the issue of versions. This is a possible clue: Could not find parse string Infection: in report.txt What does this mean? Your

RE: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Markus Gufler
from x.x.x.x]04/28/2005 08:00:13 Q7be703950112a342 Subject: Re: Markus From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Thursday, April 28, 2005 7:28 PMTo: Declude.Virus@declude.comSubject: Re: [Declude.Virus] High CPU F-Prot Markus,Take the spool

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Darrell \([EMAIL PROTECTED])
Matt, I am seeing the same thing - but my server (this one) is way more loaded than it should. Scanner 2 is F-Prot as you can see there is an excessive amount of time when this issue occurs. It was so bad that I ended up disabling F-Prot until I can get to the bottom of this. Darrell

RE: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Colbeck, Andrew
the evidence of a space gap. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Sent: Thursday, April 28, 2005 10:29 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] High CPU F-Prot On 28 Apr 2005 at 12:57, Matt wrote: Matt

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Matt
Nick, Thanks for the reply, but I think you missed part of the discussion. This is an F-Prot issue. Also, regardless of not finding a parse string in report.txt, F-Prot isn't throwing one of the three codes that people around here consider to be a virus, i.e. 3, 6 or 8. If it threw that code,

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Matt
t Sent: Thursday, April 28, 2005 7:28 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] High CPU F-Prot Markus, Take the spool file name corresponding to the "could not find parse string" and look above it for the beginning of the log entries for that f

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Matt
ith only one antivirus scanner, I don't see the evidence of a space gap. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nick Sent: Thursday, April 28, 2005 10:29 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] High CPU F-Prot

RE: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Markus Gufler
office now) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Thursday, April 28, 2005 7:48 PMTo: Declude.Virus@declude.comSubject: Re: [Declude.Virus] High CPU F-Prot Markus,It's there (or should be). Search for "Q7be703950112a342" appearing befor

RE: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Colbeck, Andrew
ge- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nick Sent: Thursday, April 28, 2005 10:29 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] High CPU F-Prot On 28 Apr 2005 at 12:57, Matt wrote: Matt - If this becomes a real problem that you see and ca

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Nick
On 28 Apr 2005 at 13:50, Matt wrote: Sorry about being wrong on both counts.. but I was trying to help! -Nick Nick, Thanks for the reply, but I think you missed part of the discussion.This is an F-Prot issue. Also, regardless of not finding a parse string in report.txt, F-Prot isn't

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Matt
Nick, I know. I sometimes don't read carefully myself :) Matt Nick wrote: On 28 Apr 2005 at 13:50, Matt wrote: Sorry about being wrong on both counts.. but I was trying to help! -Nick Nick, Thanks for the reply, but I think you missed part of the discussion.This is an

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Matt
]] On Behalf Of Matt Sent: Thursday, April 28, 2005 10:58 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] High CPU F-Prot Andrew, If you are only using F-Prot, you should be able to find evidence of at least the delays by searching for "Could not find

RE: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Dan Horne
991704 Subject: Good day From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Thursday, April 28, 2005 1:58 PMTo: Declude.Virus@declude.comSubject: Re: [Declude.Virus] High CPU F-Prot Andrew,If you are only using F-Prot, you should be able to fin

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Bill Landry
the "Could not find parse string Infection" log entries I found. Bill - Original Message - From: Matt To: Declude.Virus@declude.com Sent: Thursday, April 28, 2005 10:58 AM Subject: Re: [Declude.Virus] High CPU F-Prot Andrew,If you are only using F-Prot, you shoul

RE: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Markus Gufler
: [Declude.Virus] High CPU F-Prot Matt, I searched 2 weeks of logs on both of my servers (both of which run F-Prot and TrendMicro) and could only find 4 instances of "Could not find parse string Infection", and they were found on the server that is very heavily loa

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Matt
idn't find a time gap in any of the "Could not find parse string Infection" log entries I found. Bill - Original Message - From: Matt To: Declude.Virus@declude.com Sent: Thursday, April 28, 2005 10:58 AM Subject: Re: [Declude.Virus] High CPU F-P

RE: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Markus Gufler
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Thursday, April 28, 2005 8:52 PMTo: Declude.Virus@declude.comSubject: Re: [Declude.Virus] High CPU F-Prot Markus and Andrew,I think I have an idea as to possibly why. I run Declude Virus at LOGLEVEL HIGH. Maybe you guys are

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Nick
Free [MIME: 2 13549] I didn't find a time gap in any of the Could not find parse string Infection log entries I found. Bill - Original Message - From: Matt To: Declude.Virus@declude.com Sent: Thursday, April 28, 2005 10:58 AM Subject: Re: [Declude.Virus] High CPU F-Prot

RE: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Dan Horne
log entries I found. Bill - Original Message - From: Matt To: Declude.Virus@declude.com Sent: Thursday, April 28, 2005 10:58 AM Subject: Re: [Declude.Virus] High CPU F-Prot Andrew,If you are on

Re: [Declude.Virus] High CPU F-Prot

2005-04-28 Thread Matt
ot; log entries I found. Bill - Original Message - From: Matt To: Declude.Virus@declude.com Sent: Thursday, April 28, 2005 10:58 AM Subject: Re: [Declude.Virus] High CPU F-Prot Andrew, If you are only using F-Prot, you should be able to find evidence of at least the delays by searc

[Declude.Virus] High CPU F-Prot

2005-04-27 Thread Darrell \([EMAIL PROTECTED])
In the last 24 hours I have seen F-Prot start to use an excessive amount of CPU. Normally it very rarely shows up in task manager and now it has been using a considerable amount of CPU. Thoughts? Darrell Comprehensive Declude Virus and

Re: [Declude.Virus] High CPU F-Prot

2005-04-27 Thread Matt
I saw F-Prot time out 3 times today in my logs, and I can't remember that ever happening before. McAfee didn't time out once, and that's usually the first to go. Maybe this explains the issue. I think it's time to so some performance monitoring to see what is up. Matt Darrell ([EMAIL

RE: [Declude.Virus] High CPU F-Prot

2005-04-27 Thread Markus Gufler
] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Wednesday, April 27, 2005 11:53 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] High CPU F-Prot I saw F-Prot time out 3 times today in my logs, and I can't remember that ever happening before. McAfee didn't time out once

RE: [Declude.Virus] High CPU F-Prot

2005-04-27 Thread Colbeck, Andrew
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Wednesday, April 27, 2005 2:47 PM To: Declude.Virus@declude.com Subject: [Declude.Virus] High CPU F-Prot In the last 24 hours I have seen F-Prot start to use an excessive amount of CPU. Normally it very

Re: [Declude.Virus] High CPU F-Prot

2005-04-27 Thread Matt
To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] High CPU F-Prot I saw F-Prot time out 3 times today in my logs, and I can't remember that ever happening before. McAfee didn't time out once, and that's usually the first to go. Maybe this explains the issue. I think it's time to so some

Re: [Declude.Virus] High CPU F-Prot

2005-04-27 Thread Darrell \([EMAIL PROTECTED])
. - Original Message - From: Matt To: Declude.Virus@declude.com Sent: Wednesday, April 27, 2005 6:57 PM Subject: Re: [Declude.Virus] High CPU F-Prot I did some monitoring and fpcmd.exe isn't normally causing excessive load and it's completely updated

RE: [Declude.Virus] High CPU F-Prot

2005-04-27 Thread Colbeck, Andrew
eclude.com Subject: Re: [Declude.Virus] High CPU F-Prot I saw F-Prot time out 3 times today in my logs, and I can't remember that ever happening before. McAfee didn't time out once, and that's usually the first to go. Maybe this explains the issue. I think it's time to so some performance monitor

Re: [Declude.Virus] High CPU F-Prot

2005-04-27 Thread Matt
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Wednesday, April 27, 2005 3:58 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] High CPU F-Prot I did some monitoring and fpcmd.exe isn't normally causing excessive load and it's complete