RE: [Declude.Virus] You should not use an on-access virus scanner that scans the ....
1) 86 the read receipt requests! 2) You should be running 4.3.46 at this point due to a problem with a recent change in AVG. 3) Is this happening on every email, or random? 4) Since you are only running one virus scanner (aside from the built in AVG,) I do not think you need to have the number 1 for each line, i.e. SCANFILE1 and VIRUSCODE1. John T From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hirthe, Alexander Sent: Tuesday, April 17, 2007 12:29 AM To: declude.virus@declude.com Subject: [Declude.Virus] You should not use an on-access virus scanner that scans the Hello, after updating to 4.0.46 I've got these entries in one of our Mailservers: 04/17/2007 08:49:18.391 q6de201f80068.smd Virus scanner 1 reports exit code of 0 04/17/2007 08:49:18.391 q6de201f80068.smd 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the \IMail directory or sub-directories. 04/17/2007 08:49:18.391 q6de201f80068.smd Scanned: Virus Free [MIME: 1 2108] Yes, I know I should disable to on-access Scanner :) But: - there is a local AVG installed, *without* real-time scanner - and ClamAV - and nothing else (F-Prot is removed after changing the licensing :) so I can't find anything that could delete a virus. Could it be a wrong setting from ClamAV (not ClamWin)? SCANFILE1 C:\imail\declude\runclamscan.exe log=1 C:\clamav-devel\bin\clamdscan.exe --quiet -l report.txt VIRUSCODE1 1 REPORT1 FOUND Clam is running with Sanesecurity and malware.com.br signatures. Alex _ Siller AG, Wannenäckerstraße 43, 74078 Heilbronn Vorstand: Prof. H.-F. Siller (Vorsitzender), Jörn Bülow, Ralf Michi Aufsichtsratsvorsitzender: Armin Sohler Reg. Gericht Stuttgart, HRB 107707, Ust-Id Nr. DE145782955 _ --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
AW: [Declude.Virus] You should not use an on-access virus scanner that scans the ....
Hello John, 1) 86 the read receipt requests! Sorry. I'm trying, but sometimes I forget to disable it. 2) You should be running 4.3.46 at this point due to a problem with a recent change in AVG. Typo, it *is* 4.3.46 3) Is this happening on every email, or random? This morning (after updating) it happend all times, now I can't see any entries in the log. (and we are getting virusmails :) I'll keep an eye on the logfiles. 4) Since you are only running one virus scanner (aside from the built in AVG,) I do not think you need to have the number 1 for each line, i.e. SCANFILE1 and VIRUSCODE1. modified (and no entry before and after) Alex -- Siller AG, Wannenaeckerstrasse 43, 74078 Heilbronn Vorstand: Prof. H.-F. Siller (Vorsitzender), Joern Buelow, Ralf Michi Aufsichtsratsvorsitzender: Armin Sohler Reg. Gericht Stuttgart, HRB 107707, Ust-Id Nr. DE145782955 -- --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] You should not use an on-access virus scanner that scans the ....
Unfortunately, I am still up, at least for another 15 minutes or so. If you want to zip and send me a log file I will have a look see. John Tolmachoff eServices For You [EMAIL PROTECTED] (626) 737-6003 Fax (626) 737-6004 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hirthe, Alexander Sent: Tuesday, April 17, 2007 1:54 AM To: declude.virus@declude.com Subject: AW: [Declude.Virus] You should not use an on-access virus scanner that scans the Hello John, 1) 86 the read receipt requests! Sorry. I'm trying, but sometimes I forget to disable it. 2) You should be running 4.3.46 at this point due to a problem with a recent change in AVG. Typo, it *is* 4.3.46 3) Is this happening on every email, or random? This morning (after updating) it happend all times, now I can't see any entries in the log. (and we are getting virusmails :) I'll keep an eye on the logfiles. 4) Since you are only running one virus scanner (aside from the built in AVG,) I do not think you need to have the number 1 for each line, i.e. SCANFILE1 and VIRUSCODE1. modified (and no entry before and after) Alex _ Siller AG, Wannenäckerstraße 43, 74078 Heilbronn Vorstand: Prof. H.-F. Siller (Vorsitzender), Jörn Bülow, Ralf Michi Aufsichtsratsvorsitzender: Armin Sohler Reg. Gericht Stuttgart, HRB 107707, Ust-Id Nr. DE145782955 _ --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Temp files ClamAV Windows not deleting
Jared: That is what happened to us.. ran out of C drive space .. and that cause a ton of issues. Kami From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jared Pickerell Sent: Tuesday, April 17, 2007 6:15 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] Temp files ClamAV Windows not deleting I'm running into the same problem. I ended up with a server out of hard drive space before I figured out what was going on. What can you do to let Declude/ClamWin delete them in the first place? As the administrator I can already delete the folders/files after the fact, but that doesn't solve the problem. Who needs to have ownership of the temp directory for Declude/ClamWin to delete these on its own? Also ClamWin was using very high CPU. Is ClamWin know for high CPU usage? With the temp files not deleting and the high CPU utilization, I ended up just removing ClamWin as one of the scanners. When the AVG fix came out it wasn't really an issue, but I would like to use Clam as a secondary scanner if possible? Any thoughts? Thanks Jared From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, April 17, 2007 1:58 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] Temp files ClamAV Windows not deleting You need to take ownership of the files as the administrator and then you can delete them. _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan Sent: Tuesday, April 17, 2007 2:41 PM To: declude.virus@declude.com Subject: [Declude.Virus] Temp files ClamAV Windows not deleting Hi; I am having problem with viruses not being deleted from the temp directory when using the ClamWin - the following is the config entries: # CLAM- 1st Scanner #SCANFILE1 C:\Progra~1\ClamWin\bin\clamscan.exe --verbose --database=C:\Progra~1\ClamWin\db --tempdir=c:\Temp --no-summary -l report.txt #VIRUSCODE1 1 Any idea what I can do to have the virus files deleted from C:\temp? Thanks -Kami --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Temp files ClamAV Windows not deleting
We've always used the SOSDG port of ClamAV with little problem. The current version is quite stable. We have it on a W2K3 server using runclamd and runclamscan. http://www.sosdg.org/clamav-win32 This is also the same version that SmarterMail has incorporated into their 4.x release. I don't know if this is relevant or not, but a problem I ran into a while back was while installing the ClamAV port, it was installed from an administrator account that wasn't THE Administrator account. It created some permissions problems that were solved by uninstalling then reinstalling using the main Administrator account. Original Message From: Jared Pickerell [EMAIL PROTECTED] Sent: Tuesday, April 17, 2007 6:29 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] Temp files ClamAV Windows not deleting I'm running into the same problem. I ended up with a server out of hard drive space before I figured out what was going on. What can you do to let Declude/ClamWin delete them in the first place? As the administrator I can already delete the folders/files after the fact, but that doesn't solve the problem. Who needs to have ownership of the temp directory for Declude/ClamWin to delete these on its own? Also ClamWin was using very high CPU. Is ClamWin know for high CPU usage? With the temp files not deleting and the high CPU utilization, I ended up just removing ClamWin as one of the scanners. When the AVG fix came out it wasn't really an issue, but I would like to use Clam as a secondary scanner if possible? Any thoughts? Thanks Jared From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, April 17, 2007 1:58 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] Temp files ClamAV Windows not deleting You need to take ownership of the files as the administrator and then you can delete them. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan Sent: Tuesday, April 17, 2007 2:41 PM To: declude.virus@declude.com Subject: [Declude.Virus] Temp files ClamAV Windows not deleting Hi; I am having problem with viruses not being deleted from the temp directory when using the ClamWin - the following is the config entries: # CLAM- 1st Scanner #SCANFILE1 C:\Progra~1\ClamWin\bin\clamscan.exe --verbose --database=C:\Progra~1\ClamWin\db --tempdir=c:\Temp --no-summary -l report.txt #VIRUSCODE1 1 Any idea what I can do to have the virus files deleted from C:\temp? Thanks -Kami --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
