[sniffer] .smd.tmp files being left in proc\work folders
i:\imail\declude\snf\utgi97vy.20160808.log.xml: i:\imail\declude\snf\utgi97vy.20160808.log.xml: Sent via the WebMail system at net1media.com # This message is sent to you because you are subscribed to the mailing list . This list is for discussing Message Sniffer, Anti-spam, Anti-Malware, and related email topics. For More information see http://www.armresearch.com To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to To switch to the INDEX mode, E-mail to Send administrative queries to
[sniffer] .smd.tmp files being left in proc\work folders
These file are being left and not being delivered. They are usually over 20mg. Some log entries: i:\imail\declude\snf\utgi97vy.20160808.log.xml: i:\imail\declude\snf\utgi97vy.20160808.log.xml: What can I do to stop this? Is there anything else you need from me? Thanks, Don Sent via the WebMail system at net1media.com # This message is sent to you because you are subscribed to the mailing list . This list is for discussing Message Sniffer, Anti-spam, Anti-Malware, and related email topics. For More information see http://www.armresearch.com To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to To switch to the INDEX mode, E-mail to Send administrative queries to
[sniffer] Re: .smd.tmp files being left in proc\work folders
On 08/09/2016 05:11 PM, Don Winsauer wrote: These file are being left and not being delivered. They are usually over 20mg. Something is preventing SNF from renaming the file. Find out what it is and then prevent it from blocking SNF. Perhaps a virus scanner has the file open when SNF comes by to rename it?? SNF tries to do everything safely, so when injecting it's headers it writes the new message file with a .tmp extension and makes sure that succeeded before it removes the original and then renames the .tmp. My guess is that the new .tmp file catches the attention of some scanner or other program and that when SNF goes to rename the .tmp file to replace the original it is unable to do it. Hope this helps, _M -- Pete McNeil Chief Scientist ARM Research Labs, LLC www.armresearch.com 866-770-1044 x7010 twitter/codedweller # This message is sent to you because you are subscribed to the mailing list . This list is for discussing Message Sniffer, Anti-spam, Anti-Malware, and related email topics. For More information see http://www.armresearch.com To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to To switch to the INDEX mode, E-mail to Send administrative queries to