uvscan does not go away

[Kai Wang]

<x-flowed>
Hi,

I found recently that there are some McAfee uvscan process chewing the mail
server cpu. MailScanner was the one that started the process. The directory,
which MailScanner started the process, disappeared already. But the uvscan
process just does not go.


[root at smtp2 root]# top

 13:21:14  up 80 days, 19:21,  2 users,  load average: 4.73, 4.02, 3.58
70 processes: 61 sleeping, 9 running, 0 zombie, 0 stopped
CPU states:  cpu    user    nice  system    irq  softirq  iowait    idle
           total   87.6%    0.0%   11.8%   0.0%     0.2%    0.4%    0.0%
Mem:  2064736k av, 2049120k used,   15616k free,       0k shrd,   34520k
buff
                   1527848k actv,  297596k in_d,   34784k in_c
Swap: 2048248k av,   27644k used, 2020604k free                 1811092k
cached

  PID USER     PRI  NI  SIZE  RSS SHARE STAT %CPU %MEM   TIME CPU COMMAND
 7747 root      25   0  7488 6440  2008 R    24.2  0.3  56:41   0 uvscan
26478 root      18   0 17804  15M  2060 R    22.8  0.7   6:11   0
MailScanner
26375 root      24   0 17792  15M  2060 S    12.2  0.7   6:36   0
MailScanner
26522 root      20   0 17808  15M  2060 S     6.0  0.7   6:37   0
MailScanner
26421 root      18   0 17856  15M  2060 S     2.6  0.7   6:48   0
MailScanner
26456 root      17   0 17856  15M  2060 S     2.6  0.7   6:47   0
MailScanner
18491 root      21   0  4104 3996  2872 S     0.8  0.1   0:00   0 sendmail
18498 root      21   0  3776 3648  2576 R     0.4  0.1   0:00   0 sendmail
18495 root      21   0  2960 2760  2080 R     0.2  0.1   0:00   0 sendmail
18497 root      17   0  3132 2972  2088 R     0.2  0.1   0:00   0 sendmail
    1 root      23   0   504  476   448 S     0.0  0.0   0:49   0 init

[root at smtp2 root]# ps eaxf | grep uvscan
 7747 ?        R     58:44 /usr/local/uvscan/uvscan -d /usr/local/uvscan
--recursive --ignore-links --analyze --mime --secure --noboot .
TERM=dumb LD_LIBRARY_PATH=/usr/local/uvscan
PATH=/sbin:/bin:/usr/sbin:/usr/bin
PWD=/var/spool/MailScanner/incoming/7090 LANG=en_US.iso885915 SHLVL=3

[root at smtp2 root]# ls -l /var/spool/MailScanner/incoming/7090
ls: /var/spool/MailScanner/incoming/7090: No such file or directory


Kai Wang

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>