ClamSup default install

Question asked by Eric Tykwinski - 9/9/2016 at 11:09 AM

Answered

We just had a Lockey macro get through, or at least I think it is.

I tested the same email through a linux box I also run which was caught from SaneSecurity's Malware db.

Linux Box shows: A virus found: Sanesecurity.Malware.26311.JsHeur.UNOFFICIAL FOUND

I'm seeing ClamSup.bat on SmarterMail download the same definitions, so is there anything special to enable them?

6 Replies

Reply to Thread

Employee Replied

9/9/2016 at 2:23 PM

Employee Post Marked As Answer

Hi Eric. Check your Delivery logs for any ClamAV errors. They would look like:

Unable to run Clam virus checks: System.Net.Sockets.SocketException (0x80004005): No connection could be made because the target machine actively refused it 127.0.0.1:3310

If you see these, then make sure you have the Microsoft C++ 2010 Redistributable Packages installed.

https://www.microsoft.com/en-us/download/details.aspx?id=13523

https://www.microsoft.com/en-us/download/details.aspx?id=8328

CCC Replied

9/13/2016 at 10:56 AM

What is the next step if I am still seeing those errors and both of the VS C++2010 redistributable packages are installed? I also have VS C++2005 packages installed, could they need removal?

Eric Tykwinski Replied

9/19/2016 at 1:15 PM

@CCC @Rod We reinstalled VS C++ 2010 Update 1, but didn't have an effect. Is there any other tweaks you can think of? (StreamMinPort,StreamMaxPort, et al?) I setup another Linux VM running ClamAV and stopped getting the errors, but I think I need to tweak the settings as the queue was growing rather quickly. I saw you have default at 100 MaxThreads and MaxQueue to 200, same for a remote server?

PS. We were receiving those errors, so I'm under the assumption that it might be a Windows TCP/IP stack issue on localhost?

Eric Tykwinski Replied

9/22/2016 at 9:33 AM

Just a quick follow-up, post trouble ticket. We had Rod remote into our server and he quickly noticed that we only installed VC++ 64bit. Apparently both 32 bit and 64 bit are needed. So from 50K failures yesterday on ClamAV to currently sitting at 9 failures. I think we solved the issue. Thanks Rod...

Micky Witztum Replied

1/26/2017 at 8:00 PM

Does anyone know if SmarterMail calls the "ClamSup.bat" file while updating the main ClamAV system via freshclam?

I had the same problem mentioned above but while manually running the ClamSup.bat update process. I had already installed the 64bit version of the Microsoft library to get ClamAV working at all on a NEW install of SmarterMail.

I installed it on a new Windows 2008 R2 server that I was preparing to migrate my SmarterMail install over to.

****Note that I used the latest installer of version 15.5.6222*** so there may be a problem with the installer? I didn't see the library listed in the documentation for system requirements...so I am guessing that something got missed in the installer build? I did not see any errors when installing the product.

Eric Tykwinski Replied

1/27/2017 at 6:08 PM

Micky,

My issue was I didn't have 32-bit installed as well. More of a ClamAV requirement, but necessary for it to work. I can't tell you about timings right now, as I'm having a different issue, but I think they usually run in sequence.

Back to Community Threads

Please leave this box unchecked

Reply to Thread

Enter the verification text