Antivirus timeout error reported in filtering log file: Command Line Scanner Process needed to be forcefully terminated


SYMPTOMS

Anti-virus timeout error in my filtering log file: 

>AttachmentInfected::Error - Command Line Scanner Process needed to be forcefully terminated.

CAUSE

The anti-virus command line scanner is timing out.

RESOLUTION

This error usually indicates that there are anti-virus command line processes timing out. Usually caused from the timeout process registry setting being too low. Or, this can also be caused from the MTA thread setting being too high. Thread settings usually depend on what system hardware is being used in the server. The higher the thread setting on the MTA the higher I/O usage the server will use, thus causing timeouts on processes.

To resolve the issue, raise this timeout setting to accommodate how long the process should wait for the anti-virus command line scanner before timing out. The registry setting found in this regkey location: HKEY_LOCAL_MACHINE\SOFTWARE\Mail Enable\Mail Enable\Agents\MTA\Filters . Select filters, and in the right hand side preview pane, locate the regkey "Process timeout". This setting is in milliseconds.



Product:MailEnable (Pro-Any Pro-1.X Ent-Any Ent-1.X)
Category:Configuration
Article:ME020380
Module:MTA Filtering
Keywords:Process timeout AV I/O MTA filers filtering attachmentinfected, attachment
Class:ERR: Product Error
Revised:Wednesday, May 4, 2016
Author:
Publisher:MailEnable