From: "Massimo S." Received: from [192.168.100.201] (HELO mail.2rosenthals.com) by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10) with ESMTPS id 8580611 for ecs-isp@2rosenthals.com; Sun, 26 Nov 2023 16:16:41 -0500 Received: from [192.168.200.201] (port=48458 helo=mail2.2rosenthals.com) by mail.2rosenthals.com with esmtp (Exim 4.96) (envelope-from ) id 1r7MUQ-0007o0-2q for ecs-isp@2rosenthals.com; Sun, 26 Nov 2023 16:16:32 -0500 Received: from mail2.quasarbbs.net ([80.86.52.115]:10057) by mail2.2rosenthals.com with esmtp (Exim 4.96) (envelope-from ) id 1r7MUC-0000wb-0Y for ecs-isp@2rosenthals.com; Sun, 26 Nov 2023 16:16:19 -0500 X-SASI-Hits: BODYTEXTP_SIZE_3000_LESS 0.000000, BODY_SIZE_2000_2999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_7BIT 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, MSGID_SAMEAS_FROM_HEX_844412 0.100000, NO_CTA_URI_FOUND 0.000000, NO_URI_HTTPS 0.000000, REPLYTO_SAMEAS_FROM 0.000000, SENDER_NO_AUTH 0.000000, __ANY_URI 0.000000, __BODY_NO_MAILTO 0.000000, __BODY_VOICEMAIL 0.000000, __CT 0.000000, __CTE 0.000000, __CT_TEXT_PLAIN 0.000000, __EXTORTION_MALWARE 0.000000, __FROM_DOMAIN_NOT_IN_BODY 0.000000, __FROM_NAME_NOT_IN_ADDR 0.000000, __FROM_NAME_NOT_IN_BODY 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REPLYTO 0.000000, __HEADER_ORDER_FROM 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MOZILLA_USER_AGENT 0.000000, __MSGID_HEX_844412 0.000000, __NO_HTML_TAG_RAW 0.000000, __PHISH_SPEAR_SUBJ_ALERT 0.000000, __REPLYTO_SAMEAS_FROM_ACC 0.000000, __REPLYTO_SAMEAS_FROM_ADDY 0.000000, __REPLYTO_SAMEAS_FROM_DOMAIN 0.000000, __SANE_MSGID 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_START 0.000000, __SUBJ_SHORT 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_NO_MAILTO 0.000000, __URI_NO_WWW 0.000000, __URI_NS 0.000000, __USER_AGENT 0.000000 X-SASI-Probability: 8% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2023.11.26.205117 X-SASI-Hits: BODYTEXTP_SIZE_3000_LESS 0.000000, BODY_SIZE_2000_2999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_7BIT 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, MSGID_SAMEAS_FROM_HEX_844412 0.100000, NO_CTA_URI_FOUND 0.000000, NO_URI_HTTPS 0.000000, REPLYTO_SAMEAS_FROM 0.000000, __ANY_URI 0.000000, __AUTH_RES_PASS 0.000000, __BODY_NO_MAILTO 0.000000, __BODY_VOICEMAIL 0.000000, __CT 0.000000, __CTE 0.000000, __CT_TEXT_PLAIN 0.000000, __EXTORTION_MALWARE 0.000000, __FROM_DOMAIN_NOT_IN_BODY 0.000000, __FROM_NAME_NOT_IN_ADDR 0.000000, __FROM_NAME_NOT_IN_BODY 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REPLYTO 0.000000, __HEADER_ORDER_FROM 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MOZILLA_USER_AGENT 0.000000, __MSGID_HEX_844412 0.000000, __NO_HTML_TAG_RAW 0.000000, __PHISH_SPEAR_SUBJ_ALERT 0.000000, __REPLYTO_SAMEAS_FROM_ACC 0.000000, __REPLYTO_SAMEAS_FROM_ADDY 0.000000, __REPLYTO_SAMEAS_FROM_DOMAIN 0.000000, __SANE_MSGID 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_START 0.000000, __SUBJ_SHORT 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_NO_MAILTO 0.000000, __URI_NO_WWW 0.000000, __URI_NS 0.000000, __USER_AGENT 0.000000 X-SASI-Probability: 8% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2023.11.26.205117 Received: from [192.168.10.199] (dtp [192.168.10.199]) by srv2 (Weasel v2.849) for ; Sun, 26 Nov 2023 22:16:19 To: eCS ISP Mailing List Reply-To: ml@ecomstation.it Subject: clamscan issue Organization: eComStation dot it Message-ID: <88c4b46e-0215-ce23-6afb-6ec35bfc557e@ecomstation.it> Date: Sun, 26 Nov 2023 22:16:11 +0100 User-Agent: Mozilla/5.0 (OS/2; U; Warp 4.5; it-IT; rv:1.7.13) Gecko/20060424 Thunderbird/1.0.8 Mnenhy/0.7.4.0 MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-15; format=flowed Content-Language: it-IT Content-Transfer-Encoding: 7bit Hi all, it seems that clamscan have some difficulties scanning dirs with a lot of files inside: you can see some of these: cli_realloc(): Can't re-allocate memory to 25952256 bytes. and these: X:/weasel/MailRoot/mydomain.com/info/O9GTJ5.MSG: Can't read file ERROR (i don't understand "can't read file error, since the file is there on the f.sys and it can be read) X:/weasel/MailRoot/mydomain.com/email/NXL7HZ.MSG: Sanesecurity.Phishing.Fake.28722.Coin.UNOFFICIAL FOUND X:/weasel/MailRoot/mydomain.com/email/NXL7HZ.MSG: moved to 'X:/quarantine/NXL7HZ.MSG' X:/weasel/MailRoot/mydomain.com/email/O29DV1.MSG: Sanesecurity.Phishing.Fake.29768.UNOFFICIAL FOUND X:/weasel/MailRoot/mydomain.com/email/O29DV1.MSG: moved to 'X:/quarantine/O29DV1.MSG' cli_realloc(): Can't re-allocate memory to 25952256 bytes. cli_realloc(): Can't re-allocate memory to 25952256 bytes. X:/weasel/MailRoot/mydomain.com/DOMAIN.TNI: Excluded X:/weasel/MailRoot/mydomain.com/info/O72B44.MSG: Sanesecurity.Phishing.Fake.29739.UNOFFICIAL FOUND X:/weasel/MailRoot/mydomain.com/info/O72B44.MSG: moved to 'X:/quarantine/O72B44.MSG' X:/weasel/MailRoot/mydomain.com/info/O72D9Q.MSG: Sanesecurity.Phishing.Fake.29739.UNOFFICIAL FOUND X:/weasel/MailRoot/mydomain.com/info/O72D9Q.MSG: moved to 'X:/quarantine/O72D9Q.MSG' X:/weasel/MailRoot/mydomain.com/info/O97440.MSG: Sanesecurity.Phishing.Fake.28638.Coin.UNOFFICIAL FOUND X:/weasel/MailRoot/mydomain.com/info/O97440.MSG: moved to 'X:/quarantine/O97440.MSG' X:/weasel/MailRoot/mydomain.com/info/O9G4P9.MSG: Can't read file ERROR X:/weasel/MailRoot/mydomain.com/info/O9G5TD.MSG: Can't read file ERROR X:/weasel/MailRoot/mydomain.com/info/O9G7FV.MSG: Can't read file ERROR X:/weasel/MailRoot/mydomain.com/info/O9GTG2.MSG: Can't read file ERROR X:/weasel/MailRoot/mydomain.com/info/O9GTIB.MSG: Can't read file ERROR X:/weasel/MailRoot/mydomain.com/info/O9GTJ5.MSG: Can't read file ERROR X:/weasel/MailRoot/mydomain.com/info/O9H45K.MSG: Can't read file ERROR X:/weasel/MailRoot/mydomain.com/info/O9HS2A.MSG: Can't read file ERROR etc. ----------- SCAN SUMMARY ----------- Known viruses: 8722520 Engine version: 0.103.10 Scanned directories: 23 Scanned files: 6789 Infected files: 6 Total errors: 349 Data scanned: 4664.84 MB Data read: 3395.75 MB (ratio 1.37:1) Time: 1812.689 sec (30 m 12 s) Start Date: 2023:11:26 17:21:50 End Date: 2023:11:26 17:52:03 massimo