Scott,
Today we had a 'horrible' thing happened with our scanner (have two in place
F-Prot and InoculateIT), not sure which one had issues:
06/04/2003 14:51:29 Q3ef6000501666762 ERROR: Virus scanner didn't finish after 60
seconds; terminating.
06/04/2003 14:51:29 Q3ef6000501666762 WARNING: Couldn't remove .vir directory
C:\IMail\spool\D3ef6000501666762.vir\: SHARING VIOLATION.
06/04/2003 14:51:29 Q3ef6000501666762 Likely problem: An on-access scanner is
interfering; disable or set not to scan subdirectories off of \IMail\spool.
06/04/2003 14:52:45 Q3ef60005015e65fb Error 183 creating temp directory
C:\IMail\spool\D3ef60005015e65fb.vir\.
06/04/2003 14:52:45 Q3ef60005015e65fb Scanned: Error starting scanner
06/04/2003 14:52:58 Q3ef60005015e65fb Couldn't rename SMD to SM$ [32]. Priority back
to 32.
06/04/2003 14:54:12 Q3efb000101a07b86 ERROR: Virus scanner didn't finish after 60
seconds; terminating.
06/04/2003 14:54:12 Q3efb000101a07b86 WARNING: Couldn't remove .vir directory
C:\IMail\spool\D3efb000101a07b86.vir\: SHARING VIOLATION.
06/04/2003 14:54:12 Q3efb000101a07b86 Likely problem: An on-access scanner is
interfering; disable or set not to scan subdirectories off of \IMail\spool.
06/04/2003 14:54:35 Q3efc0004018a7d8a ERROR: Virus scanner didn't finish after 60
seconds; terminating.
06/04/2003 14:54:35 Q3efc000101a67e74 ERROR: Virus scanner didn't finish after 60
seconds; terminating.
06/04/2003 14:54:35 Q3efc0004018a7d8a WARNING: Couldn't remove .vir directory
C:\IMail\spool\D3efc0004018a7d8a.vir\: SHARING VIOLATION.
06/04/2003 14:54:35 Q3efc000101a67e74 WARNING: Couldn't remove .vir directory
C:\IMail\spool\D3efc000101a67e74.vir\: SHARING VIOLATION.
06/04/2003 14:54:35 Q3efc0004018a7d8a Likely problem: An on-access scanner is
interfering; disable or set not to scan subdirectories off of \IMail\spool.
06/04/2003 14:54:35 Q3efc000101a67e74 Likely problem: An on-access scanner is
interfering; disable or set not to scan subdirectories off of \IMail\spool.
06/04/2003 14:55:33 Q3efc000101aa80c6 Error 183 creating temp directory
C:\IMail\spool\D3efc000101aa80c6.vir\.
06/04/2003 14:55:33 Q3efc000101aa80c6 Scanned: Error starting scanner
06/04/2003 14:56:14 Q3efe0002019285e6 Error 183 creating temp directory
C:\IMail\spool\D3efe0002019285e6.vir\.
06/04/2003 14:56:14 Q3efe0002019285e6 Scanned: Error starting scanner
06/04/2003 14:56:49 Q3f07000101d8abdd ERROR: Virus scanner didn't finish after 60
seconds; terminating.
06/04/2003 14:56:49 Q3f07000101d8abdd WARNING: Couldn't remove .vir directory
C:\IMail\spool\D3f07000101d8abdd.vir\: SHARING VIOLATION.
06/04/2003 14:56:49 Q3f07000101d8abdd Likely problem: An on-access scanner is
interfering; disable or set not to scan subdirectories off of \IMail\spool.
06/04/2003 14:57:02 Q3efe0002019285e6 Couldn't rename SMD to SM$ [32]. Priority back
to 32.
06/04/2003 14:57:04 Q3ef60006016a67b0 Error 183 creating temp directory
C:\IMail\spool\D3ef60006016a67b0.vir\.
06/04/2003 14:57:04 Q3ef60006016a67b0 Scanned: Error starting scanner
06/04/2003 14:57:28 Q3ef60006016a67b0 Couldn't rename SMD to SM$ [32]. Priority back
to 32.
This took our server to a crawl as it couldn't scan emails, there was 30 min. of
living he.. there. When I checked the spool folder we were in overflow due to the
backup of the virus scanning. We are also still continuing to receive a ton of these
in my logs:
06/04/2003 08:45:39 Qe9ec092201523842 No filename in disp Content-Disposition:
attachment.
06/04/2003 08:45:39 Qe9ec092201523842 No filename in disp Content-Disposition:
attachment.
06/04/2003 08:53:52 Qebde168600f8d098 No filename in disp Content-Disposition:
attachment.
06/04/2003 08:55:12 Qec2d09cf0056085d No filename in disp Content-Disposition:
attachment.
06/04/2003 08:55:12 Qec2d09cf0056085d No filename in disp Content-Disposition:
attachment.
06/04/2003 08:55:12 Qec2d09cf0056085d No filename in disp Content-Disposition:
attachment.
06/04/2003 08:55:12 Qec2d09cf0056085d No filename in disp Content-Disposition:
attachment.
06/04/2003 08:55:12 Qec2d09cf0056085d No filename in disp Content-Disposition:
attachment.
06/04/2003 08:55:12 Qec2d09cf0056085d No filename in disp Content-Disposition:
attachment.
We are running 1.69beta. Should I have logging turned up higher than LOW? Also, if I
have issues with the scanners, what should be the sequence to aid in the problem
above. We simply had to reboot the machine (I removed the .vir directories) so that
viruses would not be allowed to pass. Within 10 min. of the reboot all returned to a
normal operation. During the 30 min. the scanners were reporting errors, we had lots
of Declude.exe processes running and smtp32.exe processes running. Any aid would be
helpful, thanks.
Keith
+,qyǬo r[yXm
ynu(8bIWkax7^V*f)+-Nrz;ǧuęj)l^r[y&jwmʗ˛mr[yXy܆+ޱƧmwZm
Vry&
