Mailing List Archive: ClamAV: win32

clamd process hangs on particular file

Index | Next | Previous | View Threaded

autosear at hotmail

Dec 23, 2007, 12:58 AM

Post #1 of 8 (2189 views)
Permalink

clamd process hangs on particular file

Greetings,
I have one file on my system that causes clamd.exe to hang when scanned via clamdscan:

C:\Program Files\Movie Maker\MUI\0409\moviemk.chm

Using Process Monitor, it appears clamd.exe never leaves my clamav temp directory after accessing the above file. It loops in the temp directory forever until i stop the service. As this should be a common file on WinXP systems, has anyone else experienced this problem?

My setup:
Clamav 0.92 with clamd.exe running as a service via srvany.exe
Configs are default except for custom log, data, and temp directories
Command I execute: clamdscan -v --log="c:\program files\clamav\log\scan.log" "C:\Program Files\Movie Maker\MUI\0409\moviemk.chm"
Windows XP Pro SP2 (all updates, clean install)

TIA & Happy Holidays,
Auto

_________________________________________________________________
Don't get caught with egg on your face. Play Chicktionary!
http://club.live.com/chicktionary.aspx?icid=chick_wlhmtextlink1_dec
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

ryanreg at e-telligent

Dec 23, 2007, 4:22 AM

Post #2 of 8 (2106 views)
Permalink

Re: clamd process hangs on particular file [In reply to]

I see what you mean. On my Win2003SP2 mail server clamav 0.92 didn't like
CHM files either, and not just the one you indicated. I saw the same
behavior scanning other CHM files (endless temp file creation, high CPU &
disk utilization until clamd proc killed). I backed up to 0.91.2 which
doesn't seem to have this problem. I'd hate to get DOS'd because someone
sent me a CHM file.

Ryan

----- Original Message -----
From: "Auto Sear" <autosear [at] hotmail>
To: <clamav-win32 [at] lists>
Sent: Saturday, December 22, 2007 23:58
Subject: [clamav-win32] clamd process hangs on particular file

> Greetings,
> I have one file on my system that causes clamd.exe to hang when scanned
> via clamdscan:
>
> C:\Program Files\Movie Maker\MUI\0409\moviemk.chm
>
> Using Process Monitor, it appears clamd.exe never leaves my clamav temp
> directory after accessing the above file. It loops in the temp directory
> forever until i stop the service. As this should be a common file on WinXP
> systems, has anyone else experienced this problem?
>
> My setup:
> Clamav 0.92 with clamd.exe running as a service via srvany.exe
> Configs are default except for custom log, data, and temp directories
> Command I execute: clamdscan -v --log="c:\program
> files\clamav\log\scan.log" "C:\Program Files\Movie
> Maker\MUI\0409\moviemk.chm"
> Windows XP Pro SP2 (all updates, clean install)
>
> TIA & Happy Holidays,
> Auto
>

_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

njh at bandsman

Dec 23, 2007, 5:11 AM

Post #3 of 8 (2105 views)
Permalink

Re: clamd process hangs on particular file [In reply to]

Auto Sear wrote:
> Greetings,
> I have one file on my system that causes clamd.exe to hang when scanned via clamdscan:
>
> C:\Program Files\Movie Maker\MUI\0409\moviemk.chm

This happens on all systems, not just Windows, so the best place to discuss this would be
clamav-users, not clamav-win32.

Please raise it as a bug report at www.clamav.net.

> TIA & Happy Holidays,
> Auto

-Nigel

jeff_j_dunlap at yahoo

Dec 23, 2007, 7:49 AM

Post #4 of 8 (2102 views)
Permalink

Re: clamd process hangs on particular file [In reply to]

FYI, it does not seem to be limited to .chm files, clamav win hangs indefinately if I try and scan a winzip.exe installation file.

Nigel Horne <njh [at] bandsman> wrote: Auto Sear wrote:
> Greetings,
> I have one file on my system that causes clamd.exe to hang when scanned via clamdscan:
>
> C:\Program Files\Movie Maker\MUI\0409\moviemk.chm

This happens on all systems, not just Windows, so the best place to discuss this would be
clamav-users, not clamav-win32.

Please raise it as a bug report at www.clamav.net.

> TIA & Happy Holidays,
> Auto

-Nigel
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

---------------------------------
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

njh at bandsman

Dec 23, 2007, 7:57 AM

Post #5 of 8 (2099 views)
Permalink

Re: clamd process hangs on particular file [In reply to]

> FYI, it does not seem to be limited to .chm files, clamav win
> hangs indefinately if I try and scan a winzip.exe installation file.

Please read:

> > This happens on all systems, not just Windows, so the best place to
discuss this would be
> > clamav-users, not clamav-win32

Please also read:

> Please raise it as a bug report at www.clamav.net.

Please take note of this as well:

BTW, never ever ever divulge possible DOSs on a public mailing list. You
never
know who may be reading.

-Nigel

_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

ryanreg at e-telligent

Dec 23, 2007, 3:08 PM

Post #6 of 8 (2097 views)
Permalink

Re: clamd process hangs on particular file [In reply to]

Nigel,

Since I couldn't find any other reference to current CHM bugs at clamav.net
I went ahead and posted one:
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=742

They seem pretty emphatic about not supporting clamav-win32...
"Please do not report any bug affecting software derived from ClamAV and
distributed by a third party (e.g. ClamWin, clamav-win32, ClamXav) because
we have no control over them. Contact their developers instead. Bugs in the
CygWin based ports like ClamWin and clamav-win32 should be reported to Reini
Urban"
...so I mentioned your specific instruction to post there

Finally, I understand your point of view with regards to broadcasting
vulnerabilities, but I figured it was already implied by the common use of
clamav as an MTA scanner, and in my defense I simultaneously offered a
solution that I've already tested and implemented (downgrade to 0.91.2).

On that note, I STRONGLY URGE anyone using clamav 0.92 for MTA scanning or
other exposed uses in production systems to immediately test their
susceptibility to this problem and take appropriate action (possibly
including a downgrade to 0.91.2).

Ryan

----- Original Message -----
From: "Nigel Horne" <njh [at] bandsman>
To: <clamav-win32 [at] lists>
Sent: Sunday, December 23, 2007 06:57
Subject: Re: [clamav-win32] clamd process hangs on particular file

>
>> FYI, it does not seem to be limited to .chm files, clamav win
>> hangs indefinately if I try and scan a winzip.exe installation file.
>
> Please read:
>
>> > This happens on all systems, not just Windows, so the best place to
> discuss this would be
>> > clamav-users, not clamav-win32
>
> Please also read:
>
>> Please raise it as a bug report at www.clamav.net.
>
> Please take note of this as well:
>
> BTW, never ever ever divulge possible DOSs on a public mailing list. You
> never
> know who may be reading.
>
> -Nigel
>
> _______________________________________________
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32
>

_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

autosear at hotmail

Dec 23, 2007, 9:43 PM

Post #7 of 8 (2095 views)
Permalink

Re: clamd process hangs on particular file [In reply to]

Thanks for the quick responses. I do apologize for posting this issue to the public list. I had only just installed clamav and assumed the issue was a configuration problem or some other oversight on my part. I submitted a bug report for the issue earlier today.

Best,
Auto

_________________________________________________________________
i�m is proud to present Cause Effect, a series about real people making a difference.
http://im.live.com/Messenger/IM/MTV/?source=text_Cause_Effect
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

njh at bandsman

Dec 24, 2007, 1:24 AM

Post #8 of 8 (2097 views)
Permalink

Re: clamd process hangs on particular file [In reply to]

Ryan wrote:
> Nigel,
>
> Since I couldn't find any other reference to current CHM bugs at clamav.net
> I went ahead and posted one:
> https://wwws.clamav.net/bugzilla/show_bug.cgi?id=742

Thanks. 740 and 742 now cover it, so it's "in the system".

> They seem pretty emphatic about not supporting clamav-win32...
> "Please do not report any bug affecting software derived from ClamAV and
> distributed by a third party (e.g. ClamWin, clamav-win32, ClamXav) because
> we have no control over them. Contact their developers instead. Bugs in the
> CygWin based ports like ClamWin and clamav-win32 should be reported to Reini
> Urban"

ClamWin, clamav-win32 and ClamXav are indeed 3rd party products, so we can't help. It's
rather confusing because what you're probably using is the "official" binary build
for Windows of ClamAV from w32.clamav.net, which people also call clamav-win32.
Anyway, what you've done is spot on, and thanks for raising it, it is now in the
system.

To avoid any further doubt though, I get the same results when scanning the file
under Linux, it is therefore a clamAV generic issue (which has also recently been
discussed in clamav-users).

> Ryan

-Nigel

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads