[Declude.Virus] mc afee 8.7 not scanning

2010-12-20 Thread Bernd.Goebbels
hello,

we just updated our mcafee virus-scanner for 7.? to 8.7. 

after installing the virus scan commandline 6.00.1 we are catching NO virusses!

we did not change the virus.cfg except for the path - now it looks like this:

SCANFILEc:\mcafee\scan.exe /ALL /NOMEM /NOBREAK /UNZIP /NODDA /NOBEEP 
/SILENT /REPORT report.txt
VIRUSCODE 13
REPORT Found

here's a snap out of our virus.log:

12/19/2010 23:56:29.176 q893d01763439.smd  Vulnerability flags = 28
12/19/2010 23:59:20.908 q893d01763439.smd  Scanned: Virus Free [MIME: 2 
40736]
12/19/2010 23:56:31.239 q893f01763449.smd  Vulnerability flags = 28
12/19/2010 23:59:19.283 q893f01763449.smd  Scanned: Virus Free [MIME: 2 
40736]
12/19/2010 23:56:35.207 q894000d9345c.smd  Vulnerability flags = 28
12/19/2010 23:59:20.689 q894000d9345c.smd  ERROR: Virus scanner 1 didn't 
finish after 120 seconds; terminating.
12/19/2010 23:59:20.689 q894000d9345c.smd  Couldn't delete 
E:\IMail\spool\proc\work\D894000d9345c.vir\report.txt: 32. Error String: 
[Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen 
Prozess verwendet wird.]
12/19/2010 23:59:50.705 q894000d9345c.smd  Scanned: Virus Free [MIME: 2 
40736]
12/19/2010 23:56:35.488 q894001763459.smd  Vulnerability flags = 28
12/19/2010 23:59:21.252 q894001763459.smd  ERROR: Virus scanner 1 didn't 
finish after 120 seconds; terminating.
12/19/2010 23:59:21.252 q894001763459.smd  Couldn't delete 
E:\IMail\spool\proc\work\D894001763459.vir\report.txt: 32. Error String: 
[Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen 
Prozess verwendet wird.]
12/19/2010 23:59:51.298 q894001763459.smd  Scanned: Virus Free [MIME: 2 
40736]
12/19/2010 23:56:55.848 q894300dc3481.smd  Vulnerability flags = 28
12/19/2010 23:59:21.424 q894300dc3481.smd  Scanned: Virus Free [MIME: 2 
40736]
12/19/2010 23:56:55.754 q89430176347c.smd  Vulnerability flags = 28
12/19/2010 23:59:17.580 q89430176347c.smd  Scanned: Virus Free [MIME: 2 
40736]
12/19/2010 23:57:44.222 q894301c9347d.smd  Vulnerability flags = 28
12/20/2010 00:00:07.408 q894301c9347d.smd  Scanned: Virus Free [MIME: 2 
40736]

the error string says that the file can't be accessed because it's used by 
something else.

our on-access scanner is deactivated for e:\ and its subdirectories.

does anyone know if we did something wrong?

greetings

bernd goebbels
it.nrw.de

---
[This E-mail was scanned by Declude]


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] mc afee 8.7 not scanning

2010-12-20 Thread Andy Schmidt
The new virus scanner command line version now uses compressed virus
signature and clean files etc. 

It's intended for the occasional one-time use for a situation where the
command line is the only option and where you wouldn't mind to wait a minute
or two for the uncompressing to be complete.

There IS a way how you can uncompress a new virus signature file every time
you download an updated one. Then, the command line tool won't have to do it
each and every time.

If you lucky that might just be fast enough for Declude to cope.

Best Regards,
Andy

-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of
bernd.goebb...@it.nrw.de
Sent: Monday, December 20, 2010 3:23 AM
To: declude.virus@declude.com
Subject: [Declude.Virus] mc afee 8.7 not scanning

hello,

we just updated our mcafee virus-scanner for 7.? to 8.7. 

after installing the virus scan commandline 6.00.1 we are catching NO
virusses!

we did not change the virus.cfg except for the path - now it looks like
this:

SCANFILEc:\mcafee\scan.exe /ALL /NOMEM /NOBREAK /UNZIP /NODDA
/NOBEEP /SILENT /REPORT report.txt
VIRUSCODE 13
REPORT Found

here's a snap out of our virus.log:

12/19/2010 23:56:29.176 q893d01763439.smd  Vulnerability flags = 28
12/19/2010 23:59:20.908 q893d01763439.smd  Scanned: Virus Free [MIME: 2
40736]
12/19/2010 23:56:31.239 q893f01763449.smd  Vulnerability flags = 28
12/19/2010 23:59:19.283 q893f01763449.smd  Scanned: Virus Free [MIME: 2
40736]
12/19/2010 23:56:35.207 q894000d9345c.smd  Vulnerability flags = 28
12/19/2010 23:59:20.689 q894000d9345c.smd  ERROR: Virus scanner 1 didn't
finish after 120 seconds; terminating.
12/19/2010 23:59:20.689 q894000d9345c.smd  Couldn't delete
E:\IMail\spool\proc\work\D894000d9345c.vir\report.txt: 32. Error String:
[Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen
Prozess verwendet wird.]
12/19/2010 23:59:50.705 q894000d9345c.smd  Scanned: Virus Free [MIME: 2
40736]
12/19/2010 23:56:35.488 q894001763459.smd  Vulnerability flags = 28
12/19/2010 23:59:21.252 q894001763459.smd  ERROR: Virus scanner 1 didn't
finish after 120 seconds; terminating.
12/19/2010 23:59:21.252 q894001763459.smd  Couldn't delete
E:\IMail\spool\proc\work\D894001763459.vir\report.txt: 32. Error String:
[Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen
Prozess verwendet wird.]
12/19/2010 23:59:51.298 q894001763459.smd  Scanned: Virus Free [MIME: 2
40736]
12/19/2010 23:56:55.848 q894300dc3481.smd  Vulnerability flags = 28
12/19/2010 23:59:21.424 q894300dc3481.smd  Scanned: Virus Free [MIME: 2
40736]
12/19/2010 23:56:55.754 q89430176347c.smd  Vulnerability flags = 28
12/19/2010 23:59:17.580 q89430176347c.smd  Scanned: Virus Free [MIME: 2
40736]
12/19/2010 23:57:44.222 q894301c9347d.smd  Vulnerability flags = 28
12/20/2010 00:00:07.408 q894301c9347d.smd  Scanned: Virus Free [MIME: 2
40736]

the error string says that the file can't be accessed because it's used by
something else.

our on-access scanner is deactivated for e:\ and its subdirectories.

does anyone know if we did something wrong?

greetings

bernd goebbels
it.nrw.de

---
[This E-mail was scanned by Declude]


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.





---
[This E-mail was scanned by Declude]


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.