SMTP Blocks function broken, IDS Rules keep disappearing. ClamAV and Declude are Creating errors
Problem reported by network admin - December 11, 2017 at 1:47 PM
Submitted
Late last week my IDS Rule Set disappeared and the SMTP Blocks on the Settings>Security page stopped working.  The page acts like it is doing what I ask it to do - add new, edit, or delete but then nothing happens.  Popup window disappears and it does nothing.  So I stopped the web server, and the SMTP Mail service.  uninstalled the software and then reinstalled it after a reboot.   At the same time I see in my Windows Application event logs that BOTH ClamAV and Declude are both creating 1000's of errors.  

ClamD is generating the following error:
Log Name:      Application
Source:        Application Error
Date:          12/11/2017 14:12:12
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      MAIL.alsconetwork.com
Description:
Faulting application name: clamdscan.exe, version: 0.97.1.0, time stamp: 0x5058d225
Faulting module name: MSVCR100.dll, version: 6.3.9600.18821, time stamp: 0x59ba8666
Exception code: 0xc0000135
Fault offset: 0x0009d4c2
Faulting process id: 0xe64
Faulting application start time: 0x01d372bc54dd329d
Faulting application path: C:\PROGRA~2\SMARTE~1\SMARTE~1\Service\Clam\bin\clamdscan.exe
Faulting module path: MSVCR100.dll
Report Id: 928e82df-deaf-11e7-80be-00155d647203
Faulting package full name: 
Faulting package-relative application ID: 
 
 
Declude is generating the following Error: 
Log Name:      Application
Source:        DecludeJunkMail
Date:          12/11/2017 14:38:04
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      MAIL.alsconetwork.com
Description:
The description for Event ID 0 from source DecludeJunkMail cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
 
Looking for suggestions.  Help? 

2 Replies

Reply to Thread
2
Scarab Replied
Looks like your Visual C++ files got replaced with an older version (6.0) from 2000. You should have Visual C++ 2010 for Declude and Clamdscan (MSVCR100.dll version 10.00.30319.1 for example).
 
Try downloading and reinstalling Visual C++ 2010 Redistributable Package
32-bit https://www.microsoft.com/en-us/download/details.aspx?id=5555
0
network admin Replied
So I stopped the IIS Site and app pool. Stopped the mail service.  Uninstalled SM16, uninstalled the Visual C++ packages. Rebooted.  Reinstalled.  IDS Rule set disappears.  SMTP blocks are not changeable.   Additionally I now have the following:
 
Log Name:      Application
Source:        ASP.NET 4.0.30319.0
Date:          12/12/2017 09:07:59
Event ID:      1309
Task Category: Web Event
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      MAIL.alsconetwork.com
Description:
Event code: 3005 
Event message: An unhandled exception has occurred. 
Event time: 12/12/2017 9:07:59 AM 
Event time (UTC): 12/12/2017 3:07:59 PM 
Event ID: cd5faf0de8d443298bdf7fdafafb738b 
Event sequence: 10614 
Event occurrence: 15 
Event detail code: 0 
 
Application information: 
    Application domain: /LM/W3SVC/3/ROOT-1-131575356019263343 
    Trust level: Full 
    Application Virtual Path: / 
    Application Path: C:\Program Files (x86)\SmarterTools\SmarterMail\MRS\ 
    Machine name: MAIL 
 
Process information: 
    Process ID: 3804 
    Process name: w3wp.exe 
    Account name: NT AUTHORITY\NETWORK SERVICE 
 
Exception information: 
    Exception type: HttpException 
    Exception message: Server cannot set status after HTTP headers have been sent.
   at System.Web.HttpResponse.set_StatusCode(Int32 value)
   at System.Web.Http.WebHost.HttpControllerHandler.<CopyResponseStatusAndHeadersAsync>d__31.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Web.Http.WebHost.HttpControllerHandler.<CopyResponseAsync>d__7.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Web.Http.WebHost.HttpControllerHandler.<ProcessRequestAsyncCore>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Web.TaskAsyncHelper.EndTask(IAsyncResult ar)
   at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
 
 
Request information: 
    Request URL: https://mail.americanlenders.com:443/attachment/download?data=R2SXtCF6sxDZX0EYMoLFyUvDP5U9Br0hFKMH6VDPQ0oRwCV0scZl1NA1f2LmrrGbOsy/enQi1/Nlh5xKqjyir0nINz5ifU3R96VsVXJ8QQ9zDRymanB+9iA7NcvOr+QymScB4AfRdTjT0nkoNh0wWd0z6zMA1A4pXWdVf7Rx1GI= ;
    Request path: /attachment/download 
    User host address: 73.201.166.76 
    User:  
    Is authenticated: False 
    Authentication Type:  
    Thread account name: MAIL\Administrator 
 
Thread information: 
    Thread ID: 51 
    Thread account name: MAIL\Administrator 
    Is impersonating: False 
    Stack trace:    at System.Web.HttpResponse.set_StatusCode(Int32 value)
   at System.Web.Http.WebHost.HttpControllerHandler.<CopyResponseStatusAndHeadersAsync>d__31.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Web.Http.WebHost.HttpControllerHandler.<CopyResponseAsync>d__7.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Web.Http.WebHost.HttpControllerHandler.<ProcessRequestAsyncCore>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Web.TaskAsyncHelper.EndTask(IAsyncResult ar)
   at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
 
 

Reply to Thread