Byteplant Forum

Home » CleanMail Support » CleanMail Add-ons » McAfee configuration
McAfee configuration [message #271] Tue, 19 April 2005 17:21
raul
Messages: 1
Registered: April 2005
Junior Member
Hello

I download now the nospamtoday! and Im setting in my test mail server. I have Imail 8.15, and Mcafee Viruscan Enterprise 8.0.0. I configured a new rules, but I have a problem , when I click in the button "Test with Sample Virus", in the outpot read:

Apr 19, 2005, 17:07:29 Session 0: (McAfee Antivirus) Executing: c:\Archivos de programa\Network Associates\VirusScan\scan32.exe
Apr 19, 2005, 17:08:00 Session 0: (McAfee Antivirus) Command execution timed out
Apr 19, 2005, 17:08:00 Session 0: (McAfee Antivirus) Filter result is accept/deliver (unknown result)

How have I configured?

Thanks

Im sorry by english
Re: McAfee configuration [message #272 is a reply to message #271] Tue, 19 April 2005 17:35 Go to previous message
support
Messages: 918
Registered: April 2004
Senior Member
Maybe McAfee was not updated for some time on the test system, and it is unable to update within the timeout period of 30s.

Try the same without the timeout, or make sure McAfee is updated before testing with NoSpamToday!.



Customer Support
Byteplant GmbH
Re: McAfee configuration [message #273 is a reply to message #271] Wed, 20 April 2005 03:50 Go to previous message
Heidner
Messages: 121
Registered: February 2005
Senior Member
Does McAfee virusscan enterprise work like the Symantec Corporate edition, that is unless you create a special INI file, the default is to always scan the in memory programs first, then some of the critical system files, and then the file you specified?

You can test to see what is happening by opening up a command shell and entering in the same commands as in the virus scanner command line... if it is checking memory resident programs - it would say..
Re: McAfee configuration [message #274 is a reply to message #271] Thu, 21 April 2005 11:49 Go to previous message
Mario Konst
Messages: 12
Registered: November 2004
Junior Member
I'm testing also with virusscan 8i. In my case I get the following error statement while testing with testvirus-button:

Apr 21, 2005, 11:46:18 Session 0: (McAfee Antivirus) Can't spawn process: The system cannot find the file specified

In commandshell:
C:\Program Files\Network Associates\VirusScan>scan32 c:\*.txt /ALL /UNZIP /ANALYSE /MIME /NOMEM /NOBOOT /SILENT /REPORT %ERR% gives no error and completes in no-time.
Re: McAfee configuration [message #275 is a reply to message #271] Fri, 22 April 2005 10:14 Go to previous message
Mario Konst
Messages: 12
Registered: November 2004
Junior Member
I also tried with timeout field empty. In that case no mail is being processed (takes forever I guess) with mcafee virusscan.
Re: McAfee configuration [message #276 is a reply to message #271] Wed, 04 May 2005 10:02 Go to previous message
Mario Konst
Messages: 12
Registered: November 2004
Junior Member
Follow up: Some messages get rejected because the sender disconnects while Mcafee is busy timing out. Here are some snippets from the log-file:

May 04, 2005, 09:49:10 Session 1: (McAfee Antivirus) Executing: "C:\Program Files\Network Associates\VirusScan\scan32.exe" C:\WINNT\TEMP\McAfeeAV1i.msg /ALL /UNZIP /ANALYSE /MIME /NOMEM /NOBOOT /SILENT /REPORT C:\WINNT\TEMP\McAfeeAV1e.log
May 04, 2005, 09:50:11 Session 1: (McAfee Antivirus) Command execution timed out
May 04, 2005, 09:50:11 Session 1: (McAfee Antivirus) Filter result is accept/deliver (unknown result)

Command in NST:
%SCANNER% %IN% /ALL /UNZIP /ANALYSE /MIME /NOMEM /NOBOOT /SILENT /REPORT %ERR%

Anyone has an idea?
Re: McAfee configuration [message #277 is a reply to message #276] Wed, 04 May 2005 12:09 Go to previous message
support
Messages: 918
Registered: April 2004
Senior Member
Mario Konst wrote:

> Follow up: Some messages get rejected because the sender
> disconnects while Mcafee is busy timing out. Here are some
> snippets from the log-file:

This could be a McAfee bug. You could try and capture one of these messages with a mail storage filter. Then try and scan this message with scan32 from a command line window, and see what happens.



Customer Support
Byteplant GmbH
Re: McAfee configuration [message #278 is a reply to message #271] Thu, 05 May 2005 00:30 Go to previous message
Heidner
Messages: 121
Registered: February 2005
Senior Member
Also check the "C:\WINNT\TEMP\McAfeeAV1e.log" and the PC's Windows Event Log, there may be some better descriptions of the problem...
Re: McAfee configuration [message #279 is a reply to message #271] Wed, 09 August 2006 22:37 Go to previous message
lleachii
Messages: 13
Registered: August 2006
Junior Member
for Virus Scan enterprise 8.0i I had to change the directory to the correct folder and filename (scan32.exe):

"c:\Program Files\Network Associates\VirusScan\scan32.exe"

I also had to I had to edit the command line parameters to their 8.0i equivalents:

%SCANNER% %IN% /ALL /ARCHIVE /MIME /NOMEM /NOBOOT /UINONE /LOG %ERR%

unzip=archive
report=log
silent=unione

There is no equivalent for the "analyze" parameter; and in my personal testing of these options on the command line, I could not determine that the "analyze" parameter functions with this version of VirusScan.

for more details, see the help topic "On-Demand Scanning Command-Line Options"



Post Edited (08-09-06 22:41)
Re: McAfee configuration [message #280 is a reply to message #271] Thu, 10 August 2006 23:00 Go to previous message
ScubaCat
Messages: 27
Registered: May 2005
Junior Member
Use "scan.exe", not scan32.exe. I posted this under another heading "McAfee Tip".

http://www.byteplant.com/forum/read.php?f=1&i=746&t=746
Previous Topic: What is the correct command line for F-prot
Next Topic: Virus Scan Problem
Goto Forum:
  


Current Time: Thu Sep 29 12:08:59 CEST 2016