<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=ISO-8859-1" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 11.00.10570.1001"></HEAD>
<BODY>
<DIV style="FONT-SIZE: 8px; FONT-FAMILY: Arial"><FONT size=3>Ola,</FONT></DIV>
<DIV style="FONT-SIZE: 8px; FONT-FAMILY: Arial"><FONT size=3></FONT> </DIV>
<DIV style="FONT-SIZE: 8px; FONT-FAMILY: Arial">
<DIV style="FONT-SIZE: 8px; FONT-FAMILY: Arial"><FONT size=3>II just raised the
timeout in MailScanner.conf::</FONT></DIV>
<DIV style="FONT-SIZE: 8px; FONT-FAMILY: Arial"><FONT size=3></FONT> </DIV>
<DIV style="FONT-SIZE: 8px; FONT-FAMILY: Arial"><FONT size=3>#Virus Scanner
Timeout = 300<BR>Virus Scanner Timeout = 600</FONT></DIV>
<DIV style="FONT-SIZE: 8px; FONT-FAMILY: Arial"><FONT size=3></FONT> </DIV>
<DIV style="FONT-SIZE: 8px; FONT-FAMILY: Arial"><FONT size=3>And it works
again...</FONT></DIV>
<DIV style="FONT-SIZE: 8px; FONT-FAMILY: Arial"> </DIV><FONT
size=3></FONT></DIV>
<DIV style="FONT-SIZE: 8px; FONT-FAMILY: Arial"><FONT size=3>ps. You can ignore
the Clamav outdated message...
<DIV style="FONT-SIZE: 8px; FONT-FAMILY: Arial"><BR></DIV></FONT></DIV><PRE>--
Polleke <ERVANDEPOL@GMAIL.COM>
</PRE><STRONG>Original Message</STRONG><BR>
<TABLE cellSpacing=0 width="90%" border=0>
<TBODY>
<TR>
<TD
style="FONT-SIZE: 8px; FONT-FAMILY: Arial; FONT-WEIGHT: 400; COLOR: #000000"
width=16>From:</TD>
<TD
style="FONT-SIZE: 8px; FONT-FAMILY: Arial; FONT-WEIGHT: 400; COLOR: #000000">Sebastiano
Dante Alighieri <SALIGHIE@GMAIL.COM></TD></TR>
<TR>
<TD
style="FONT-SIZE: 8px; FONT-FAMILY: Arial; FONT-WEIGHT: 400; COLOR: #000000"
width=16>To:</TD>
<TD
style="FONT-SIZE: 8px; FONT-FAMILY: Arial; FONT-WEIGHT: 400; COLOR: #000000">mailscanner@lists.mailscanner.info
</TD></TR>
<TR>
<TD
style="FONT-SIZE: 8px; FONT-FAMILY: Arial; FONT-WEIGHT: 400; COLOR: #000000"
width=16>Subject:</TD>
<TD
style="FONT-SIZE: 8px; FONT-FAMILY: Arial; FONT-WEIGHT: 400; COLOR: #000000">All
Emails tagged as {VIRUS}</TD></TR>
<TR>
<TD
style="FONT-SIZE: 8px; FONT-FAMILY: Arial; FONT-WEIGHT: 400; COLOR: #000000"
width=16>Date:</TD>
<TD
style="FONT-SIZE: 8px; FONT-FAMILY: Arial; FONT-WEIGHT: 400; COLOR: #000000">6-4-2019
01:03:43</TD></TR></TBODY></TABLE><BR>
<DIV dir=ltr>
<DIV dir=ltr>
<DIV dir=ltr>
<DIV dir=ltr>
<DIV dir=ltr>
<DIV dir=ltr>Hi,Â
<DIV><BR></DIV>
<DIV>In the past couple of days my email is all coming in with the subject line
tagged as {VIRUS}. This is true for all mail, but of course there's no virus
involved.</DIV>
<DIV><BR></DIV>
<DIV>Mailscanner v5.0.7</DIV>
<DIV>ClamAV v0.100.0</DIV></DIV></DIV>
<BLOCKQUOTE
style="BORDER-TOP: medium none; BORDER-RIGHT: medium none; BORDER-BOTTOM: medium none; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: medium none; MARGIN: 0px 0px 0px 40px; PADDING-RIGHT: 0px">
<DIV>
<DIV>
<DIV>
<DIV>ClamAV update process started at Fri Apr 5 18:41:07
2019</DIV></DIV></DIV></DIV>
<DIV>
<DIV>
<DIV>
<DIV>WARNING: Your ClamAV installation is OUTDATED!</DIV></DIV></DIV></DIV>
<DIV>
<DIV>
<DIV>
<DIV>WARNING: Local version: 0.100.0 Recommended version:
0.101.2</DIV></DIV></DIV></DIV>
<DIV>
<DIV>
<DIV>
<DIV>DON'T PANIC! Read <A
href="https://www.clamav..net/documents/upgrading-clamav">https://www.clamav.net/documents/upgrading-clamav</A></DIV></DIV></DIV></DIV>
<DIV>
<DIV>
<DIV>
<DIV>main.cvd is up to date (version: 58, sigs: 4566249, f-level: 60, builder:
sigmgr)</DIV></DIV></DIV></DIV>
<DIV>
<DIV>
<DIV>
<DIV>daily.cld is up to date (version: 25410, sigs: 1552552, f-level: 63,
builder: raynman)</DIV></DIV></DIV></DIV>
<DIV>
<DIV>
<DIV>
<DIV>bytecode.cld is up to date (version: 328, sigs: 94, f-level: 63, builder:
neo)</DIV></DIV></DIV></DIV></BLOCKQUOTE>
<DIV><BR></DIV>A review of /var/log/maillog suggests that there's a problem with
ClamAV</DIV></DIV>
<BLOCKQUOTE
style="BORDER-TOP: medium none; BORDER-RIGHT: medium none; BORDER-BOTTOM: medium none; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: medium none; MARGIN: 0px 0px 0px 40px; PADDING-RIGHT: 0px">
<DIV>
<DIV>
<DIV>Apr 5 18:31:22 myhost MailScanner[7448]: Virus and Content
Scanning: Starting</DIV></DIV></DIV>
<DIV>
<DIV>
<DIV>Apr 5 18:34:23 myhost MailScanner[7448]: <B><FONT
color=#ff0000>AV engine clamav timed out</FONT></B></DIV></DIV></DIV>
<DIV>
<DIV>
<DIV>Apr 5 18:34:23 myhost MailScanner[7448]: <B><FONT
color=#ff0000>clamav: Failed to complete, timed
out</FONT></B></DIV></DIV></DIV>
<DIV>
<DIV>
<DIV>Apr 5 18:34:23 myhost MailScanner[7448]: <B><FONT
color=#ff0000>Virus Scanning: Denial Of Service attack
detected!</FONT></B></DIV></DIV></DIV></BLOCKQUOTE>
<DIV dir=ltr>
<DIV dir=ltr>
<DIV><BR></DIV>
<DIV>I've tried to observe what is happening on the system, while mail is being
scanned and what i can surmise is that clamscan is timing-out (uses 100%
CPU)</DIV>
<DIV>
<DIV><IMG alt=image.png src="cid:20190406111522.780D.3FC183F3@gmail.com"
width=494 height=42><BR></DIV></DIV>
<DIV><BR></DIV>
<DIV>any pointers would be greatly appreciated. I have not been able to find
anything online..</DIV>
<DIV><BR></DIV>
<DIV>I'll try upgrading to the latest and greatest MailScanner in the mean
time.</DIV>
<DIV><BR></DIV>
<DIV>thanks</DIV>
<DIV>Salighie</DIV></DIV></DIV></DIV></DIV><BR>-- <BR>This message has been
scanned for viruses and <BR>dangerous content by <A
href="http://www.mailscanner.info/"><B>MailScanner</B></A>, and is <BR>believed
to be clean. œ‘h</BODY></HTML>