Hello Terry,
Sunday, June 5, 2005, 8:14:04 AM, you wrote:
It took a reboot of both machines to fix the problem. On one I had 288
process running which fouls everything else up. Clam is SCANNER2
Any ideas?
TF What did the runclamscan log report if anything? What kind of times
TF are
TF What did the runclamscan log report if anything? What kind of times
TF are you seeing in it for the actual scanning?
I do have some weird log lines on one of the machines:
06-04-2005 13:48:35 0.4840,0.015,0.469 HTML.Phishing.Pay-39 65 0
06-04-2005 13:49:02 0.2660,0.031,0.235
TF These exist because the scanner never completed and the files are
TF owned by SYSTEM. You'll have to select them - right click - and
TF change the owner to your Admin account so you can then change the
TF permissions to delete them.
So, it looks like the genesis of the problem is
Hello Terry,
Monday, June 6, 2005, 3:39:42 PM, you wrote:
it looks like the genesis of the problem is that clam started
timing out.
TF It may be but I haven't been able to force it to happen so far. For
TF me this is the first instance of this in more than one year.
TF I am suspicious
Hello Terry,
TF Normally the service establishes a socket - meaning a hole punched
TF through the OS - to allow such communication to occur. However, for
TF ClamD in the configuration file there is an option to bind the
TF service to a specific IP address and a specific port assignment.
Hello Scott,
Friday, June 3, 2005, 10:48:47 PM, you wrote:
SF One last ClamAV comment...
SF I've added the command line switch --max-ratio 0
SF I've had some false positives on some .zip files that forced me to add the
SF switch.
Thanks for the info. I've been running clam now with Terry's
] [mailto:Declude.Virus-
[EMAIL PROTECTED] On Behalf Of David Sullivan
Sent: Sábado, 04 de Junio de 2005 01:18 p.m.
To: Declude.Virus@declude.com
Subject: Re[2]: [Declude.Virus] Second Scanner
Hello Scott,
Friday, June 3, 2005, 10:48:47 PM, you wrote:
SF One last ClamAV comment...
SF I've added
@declude.com
Sent: Saturday, June 04, 2005 1:18 PM
Subject: Re[2]: [Declude.Virus] Second Scanner
Hello Scott,
Friday, June 3, 2005, 10:48:47 PM, you wrote:
SF One last ClamAV comment...
SF I've added the command line switch --max-ratio 0
SF I've had some false positives on some .zip files
Hello Terry,
TF ClamAV -
TF http://www.sosdg.org/clamav-win32/index.php
TF Get my utilities: runclamd, runclamdscan
TF http://www.smartbusiness.com/imail/declude/
TF Set up a scheduled task to periodically run freshclam to keep the
TF database update.
TF Works extremely well for us.
Thanks,
-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Sullivan
Sent: Friday, June 03, 2005 11:14 AM
To: Terry Fritts
Subject: Re[2]: [Declude.Virus] Second Scanner
Hello Terry,
TF ClamAV -
TF http://www.sosdg.org/clamav-win32/index.php
TF Get my utilities: runclamd, runclamdscan
TF
Hello Terry,
Friday, June 3, 2005, 3:26:33 PM, you wrote:
How can I figure out if freshclam is grabbing the latest defs?
TF I set up a scheduled task update_clamav to run every 2 hours or so:
TF start in: c:\clamav-devel\bin\
TF run: freshclam.exe --quiet -l c:\clamav-devel\log\freshclam.log
PROTECTED]
To: Terry Fritts Declude.Virus@declude.com
Sent: Friday, June 03, 2005 11:14 AM
Subject: Re[2]: [Declude.Virus] Second Scanner
Hello Terry,
TF ClamAV -
TF http://www.sosdg.org/clamav-win32/index.php
TF Get my utilities: runclamd, runclamdscan
TF http://www.smartbusiness.com/imail/declude
]: [Declude.Virus] Second Scanner
Hello Terry,
Friday, June 3, 2005, 3:26:33 PM, you wrote:
How can I figure out if freshclam is grabbing the latest defs?
TF I set up a scheduled task update_clamav to run every 2 hours or so:
TF start in: c:\clamav-devel\bin\
TF run: freshclam.exe --quiet -l c:\clamav
13 matches
Mail list logo
