MxScan with Clam AV didn't find the virus ...

Discussion, support and announcements for third party applications that work with MailEnable.
Post Reply
infoclick
Posts: 12
Joined: Wed Sep 26, 2007 2:18 pm
Location: Quebec

MxScan with Clam AV didn't find the virus ...

Post by infoclick » Mon Sep 08, 2008 1:58 pm

Hi !

Before i used Pavcl.com with spam Assasin for MTA on our mailserver but with the new virus type (Network Worms) include in a ZIP file Panda command line can't detect it.
So i move to MxScan UNREGISTRED for now , but Clam AV say alway [clean] so i where is the mistake ?
All virus signature are new , MTA work normaly
here a sample of the header

Subject: Fw: Credit card transaction report
Date: Mon, 8 Sep 2008 09:34:37 -0400
Organization: xxxxxxxxx
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0062_01C91196.1C4D62D0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
X-MXScan-Scan: Scanned by MxScan 1.6.720.0
X-MXScan-Msgid: BEF52A8BE4EB4A6E8D6BA6FA553472E5
X-MXScan-License: {Unregistered Version} Only for personal and non-commercial use. Commercial use is PROHIBITED and requires a license.
X-MXScan-Country-Sequence: CANADA->Destination
X-MXScan-AntiVirus: ClamAV SOSDG_0.93.3-1 [Clean]
X-MXScan-Tests: KEYWORD [Pass], URLBL [Pass], RDNSBL [Pass], SPAMASSASSIN [2.8 (DOS_OE_TO_MX,RDNS_NONE)], DCC_CHECK [Pass]
X-MXScan-SpamScore: 2.8
X-MXScan-ProcessingTime: 10.547 sec(s)
X-ME-Bayesian: 0.000000


I use ME ENTERPRISE VER 2.52 full registred with all patch on win 2K server

I check the MTA log it remove the message but route it to the smtp connector ??

09/08/08 09:34:11 Processing file BEF52A8BE4EB4A6E8D6BA6FA553472E5.MAI from queue SMTP
09/08/08 09:34:11 MTADeliverMessage::Pre Pickup Event executing: CMD /C "C:\Program Files\MxUptime\MxScanME\MxScan_ME.cmd" BEF52A8BE4EB4A6E8D6BA6FA553472E5.MAI SMTP
09/08/08 09:34:11 Pre Pickup Event removed message BEF52A8BE4EB4A6E8D6BA6FA553472E5.MAI.
09/08/08 09:34:30 Processing file BEF52A8BE4EB4A6E8D6BA6FA553472E5.MAI from queue SMTP
09/08/08 09:34:30 MTADeliverMessage::Pre Pickup Event executing: CMD /C "C:\Program Files\MxUptime\MxScanME\MxScan_ME.cmd" BEF52A8BE4EB4A6E8D6BA6FA553472E5.MAI SMTP
09/08/08 09:34:31 ME-MTA-ROUTE [BEF52A8BE4EB4A6E8D6BA6FA553472E5.MAI] from [SMTP] Connector queued to [SF] Connector as [0E78CF5AFAB445E69A8306397B81B0D2.MAI]

Any idea ?

polarisie
Posts: 696
Joined: Mon Mar 27, 2006 2:58 pm

Re: MxScan with Clam AV didn't find the virus ...

Post by polarisie » Mon Sep 08, 2008 3:20 pm

infoclick wrote:Hi !

Before i used Pavcl.com with spam Assasin for MTA on our mailserver but with the new virus type (Network Worms) include in a ZIP file Panda command line can't detect it.
So i move to MxScan UNREGISTRED for now , but Clam AV say alway [clean] so i where is the mistake ?
All virus signature are new , MTA work normaly
here a sample of the header

Subject: Fw: Credit card transaction report
Date: Mon, 8 Sep 2008 09:34:37 -0400
Organization: xxxxxxxxx
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0062_01C91196.1C4D62D0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
X-MXScan-Scan: Scanned by MxScan 1.6.720.0
X-MXScan-Msgid: BEF52A8BE4EB4A6E8D6BA6FA553472E5
X-MXScan-License: {Unregistered Version} Only for personal and non-commercial use. Commercial use is PROHIBITED and requires a license.
X-MXScan-Country-Sequence: CANADA->Destination
X-MXScan-AntiVirus: ClamAV SOSDG_0.93.3-1 [Clean]
X-MXScan-Tests: KEYWORD [Pass], URLBL [Pass], RDNSBL [Pass], SPAMASSASSIN [2.8 (DOS_OE_TO_MX,RDNS_NONE)], DCC_CHECK [Pass]
X-MXScan-SpamScore: 2.8
X-MXScan-ProcessingTime: 10.547 sec(s)
X-ME-Bayesian: 0.000000


I use ME ENTERPRISE VER 2.52 full registred with all patch on win 2K server

I check the MTA log it remove the message but route it to the smtp connector ??

09/08/08 09:34:11 Processing file BEF52A8BE4EB4A6E8D6BA6FA553472E5.MAI from queue SMTP
09/08/08 09:34:11 MTADeliverMessage::Pre Pickup Event executing: CMD /C "C:\Program Files\MxUptime\MxScanME\MxScan_ME.cmd" BEF52A8BE4EB4A6E8D6BA6FA553472E5.MAI SMTP
09/08/08 09:34:11 Pre Pickup Event removed message BEF52A8BE4EB4A6E8D6BA6FA553472E5.MAI.
09/08/08 09:34:30 Processing file BEF52A8BE4EB4A6E8D6BA6FA553472E5.MAI from queue SMTP
09/08/08 09:34:30 MTADeliverMessage::Pre Pickup Event executing: CMD /C "C:\Program Files\MxUptime\MxScanME\MxScan_ME.cmd" BEF52A8BE4EB4A6E8D6BA6FA553472E5.MAI SMTP
09/08/08 09:34:31 ME-MTA-ROUTE [BEF52A8BE4EB4A6E8D6BA6FA553472E5.MAI] from [SMTP] Connector queued to [SF] Connector as [0E78CF5AFAB445E69A8306397B81B0D2.MAI]

Any idea ?
1. Are you running any other filters now or previously? From the MTA logs it does appear that you have an additional MTA Filter running.

2. When you say "Clam AV didn't find the virus ", how are you testing this?

Just to add the above, when i re-read your message i noted that you are running this on Windows 2000 Server, if that is the case please do take note that while it is possible that MxScan will run on Win2k, it is not officially supported on this platform.

Cheers
MXSCAN :: AntiSpam & AntiVirus for MailEnable (now with Spamtrap/Honeypot!)
Built-in SpamAssassin, Clam, MessageSniffer, DNSBL, URLBL, DCC, Senderbase, SpamTrap, ShortCircuit, Content Filters, Disclamers, Archiving and more.
Visit www.mxuptime.com

infoclick
Posts: 12
Joined: Wed Sep 26, 2007 2:18 pm
Location: Quebec

Post by infoclick » Mon Sep 08, 2008 4:18 pm

1. Are you running any other filters now or previously? From the MTA logs it does appear that you have an additional MTA Filter running.
Yes i think it was MESpamC , i used it before with Spamassassin i remove it now from the Mxscan_ME.cmd It wasn't under REM

I test it again , same problem

09/08/08 12:08:52 Processing file 0D0D89E492584DD081A5E0BDCB643EBC.MAI from queue SMTP
09/08/08 12:08:52 MTADeliverMessage::Pre Pickup Event executing: CMD /C "C:\Program Files\MxUptime\MxScanME\MxScan_ME.cmd" 0D0D89E492584DD081A5E0BDCB643EBC.MAI SMTP
09/08/08 12:08:52 Pre Pickup Event removed message 0D0D89E492584DD081A5E0BDCB643EBC.MAI.
09/08/08 12:09:01 Processing file 0D0D89E492584DD081A5E0BDCB643EBC.MAI from queue SMTP
09/08/08 12:09:01 MTADeliverMessage::Pre Pickup Event executing: CMD /C "C:\Program Files\MxUptime\MxScanME\MxScan_ME.cmd" 0D0D89E492584DD081A5E0BDCB643EBC.MAI SMTP
09/08/08 12:09:02 ME-MTA-ROUTE [0D0D89E492584DD081A5E0BDCB643EBC.MAI] from [SMTP] Connector queued to [SF] Connector as



2. When you say "Clam AV didn't find the virus ", how are you testing this?
I send me file "report.zip" file it same virus than Fedex extremely destructive malware called Trojan.Spy.Zbot or its variant named Trojan.Spy.Wsnpoem.HA.

In the header i have " X-MXScan-AntiVirus: ClamAV SOSDG_0.93.3-1 [Clean]"
it didn't remove the virus ...

Thank's for help, if you need to access to this server send me an MP !

polarisie
Posts: 696
Joined: Mon Mar 27, 2006 2:58 pm

Post by polarisie » Mon Sep 08, 2008 5:04 pm

infoclick wrote:
1. Are you running any other filters now or previously? From the MTA logs it does appear that you have an additional MTA Filter running.
Yes i think it was MESpamC , i used it before with Spamassassin i remove it now from the Mxscan_ME.cmd It wasn't under REM

I test it again , same problem

09/08/08 12:08:52 Processing file 0D0D89E492584DD081A5E0BDCB643EBC.MAI from queue SMTP
09/08/08 12:08:52 MTADeliverMessage::Pre Pickup Event executing: CMD /C "C:\Program Files\MxUptime\MxScanME\MxScan_ME.cmd" 0D0D89E492584DD081A5E0BDCB643EBC.MAI SMTP
09/08/08 12:08:52 Pre Pickup Event removed message 0D0D89E492584DD081A5E0BDCB643EBC.MAI.
09/08/08 12:09:01 Processing file 0D0D89E492584DD081A5E0BDCB643EBC.MAI from queue SMTP
09/08/08 12:09:01 MTADeliverMessage::Pre Pickup Event executing: CMD /C "C:\Program Files\MxUptime\MxScanME\MxScan_ME.cmd" 0D0D89E492584DD081A5E0BDCB643EBC.MAI SMTP
09/08/08 12:09:02 ME-MTA-ROUTE [0D0D89E492584DD081A5E0BDCB643EBC.MAI] from [SMTP] Connector queued to [SF] Connector as



2. When you say "Clam AV didn't find the virus ", how are you testing this?
I send me file "report.zip" file it same virus than Fedex extremely destructive malware called Trojan.Spy.Zbot or its variant named Trojan.Spy.Wsnpoem.HA.

In the header i have " X-MXScan-AntiVirus: ClamAV SOSDG_0.93.3-1 [Clean]"
it didn't remove the virus ...

Thank's for help, if you need to access to this server send me an MP !
What are the content of the Report.Zip file? Is this an .exe or some other executable?
MXSCAN :: AntiSpam & AntiVirus for MailEnable (now with Spamtrap/Honeypot!)
Built-in SpamAssassin, Clam, MessageSniffer, DNSBL, URLBL, DCC, Senderbase, SpamTrap, ShortCircuit, Content Filters, Disclamers, Archiving and more.
Visit www.mxuptime.com

infoclick
Posts: 12
Joined: Wed Sep 26, 2007 2:18 pm
Location: Quebec

Post by infoclick » Mon Sep 08, 2008 5:48 pm

I just send you an PM

polarisie
Posts: 696
Joined: Mon Mar 27, 2006 2:58 pm

Post by polarisie » Mon Sep 08, 2008 6:55 pm

infoclick wrote:I just send you an PM
Hi

I've tested this on few of my MxScan test servers with the attachment enclosed into an email it catches the virus as "Virus 'Trojan.Zbot-2108"

Please make sure that your signatures are updated. You can manually force an update by clicking the "Manual Update Now" button in the clamAV tab

Cheers
MXSCAN :: AntiSpam & AntiVirus for MailEnable (now with Spamtrap/Honeypot!)
Built-in SpamAssassin, Clam, MessageSniffer, DNSBL, URLBL, DCC, Senderbase, SpamTrap, ShortCircuit, Content Filters, Disclamers, Archiving and more.
Visit www.mxuptime.com

infoclick
Posts: 12
Joined: Wed Sep 26, 2007 2:18 pm
Location: Quebec

Post by infoclick » Mon Sep 08, 2008 8:17 pm

Yes update is OK






Image



I can't open the C:\Program Files\MxUptime\MxScanME\clam\log\clamd.log

polarisie
Posts: 696
Joined: Mon Mar 27, 2006 2:58 pm

Post by polarisie » Tue Sep 09, 2008 4:47 am

infoclick wrote:Yes update is OK

I can't open the C:\Program iles\MxUptime\MxScanME\clam\log\clamd.log
Did you modify your clamd.conf file? By default the clamD.log is not enabled with an MxScan installation unless it is modified.

One last thing you can do on your own is to:

1. To stop the mxscan and terminate the clamd process if it running

2. Then manually delete all the virus signatures from C:\Program Files\MxUptime\MxScanME\clam\share\clamav\ . The only file you SHOULD NOT delete from here is the mirrors.dat

3. Then manually download a new copy of the virus signatures from
- http://db.local.clamav.net/main.cvd
- http://db.local.clamav.net/daily.cvd

4. Start back MxScan

I can confirm that the message is being scanned and processed correctly because i have run it through my systems and it gets tagged as "Virus 'Trojan.Zbot-2108" . On one of my test system the message got through without being caught, but when i updated the virus signatures it got caught on the second try

infoclick
Posts: 12
Joined: Wed Sep 26, 2007 2:18 pm
Location: Quebec

Post by infoclick » Tue Sep 09, 2008 2:08 pm

OK i find the error
On ME , Fillter, MailEnable Message Filter, Antivirus was complete with PAnda Again .
I removed PAVCL from MTA connector but didn't think than ME keep it in the Fillter

So now Clam AV Work !
Another question how update signature of CLam AV hourly instead DAILY?

For exemple this morning at 4:54 AM we receive email with BANK_DETAILS.ZIP files CLAM AV didn't remove it becasue signature was yesterday.

I try to put Freshclam.exe in Scheduled task but there is an error :
Can't parse the config file /cygdriver/c/clamav-devel/etc/clamd.conf

i try to put clamd.conf in same directory than freshclam but it didn't work

polarisie
Posts: 696
Joined: Mon Mar 27, 2006 2:58 pm

Post by polarisie » Thu Sep 11, 2008 5:37 am

infoclick wrote:OK i find the error
On ME , Fillter, MailEnable Message Filter, Antivirus was complete with PAnda Again .
I removed PAVCL from MTA connector but didn't think than ME keep it in the Fillter

So now Clam AV Work !
Another question how update signature of CLam AV hourly instead DAILY?

For exemple this morning at 4:54 AM we receive email with BANK_DETAILS.ZIP files CLAM AV didn't remove it becasue signature was yesterday.

I try to put Freshclam.exe in Scheduled task but there is an error :
Can't parse the config file /cygdriver/c/clamav-devel/etc/clamd.conf

i try to put clamd.conf in same directory than freshclam but it didn't work
You can use something like this. If you are running into errors delete the main.* and daily.*, download a new copy from www.clamav.net.

C:\Progra~1\MxUptime\MxScanME\clam\bin\freshclam.exe --config-file=C:\Progra~1\MxUptime\MxScanME\clam\etc\freshclam.conf
MXSCAN :: AntiSpam & AntiVirus for MailEnable (now with Spamtrap/Honeypot!)
Built-in SpamAssassin, Clam, MessageSniffer, DNSBL, URLBL, DCC, Senderbase, SpamTrap, ShortCircuit, Content Filters, Disclamers, Archiving and more.
Visit www.mxuptime.com

infoclick
Posts: 12
Joined: Wed Sep 26, 2007 2:18 pm
Location: Quebec

Re: automate ClamAV and Spam assassin Hourly instaead Daily

Post by infoclick » Sat Sep 20, 2008 3:38 pm

Sorry for the delay !

I try the C:\Progra~1\MxUptime\MxScanME\clam\bin\freshclam.exe --config-file=C:\Progra~1\MxUptime\MxScanME\clam\etc\freshclam.conf

but on my server MxScan lock this directory , so i need to Stop MxSCan start the task to update ClamAV and restart MxScan .

I can't do that every hour ....
Please modifiy Mxscan to put hourly same thing for Spamassasin
I think than user who need to pay around 249 $ to use your software, didn't need to patch it no ?
Another think if you put more 4 IP white list adress with comment
i have this error after stop and restarting MxScan
See the end of this message for details on invoking
just-in-time (JIT) debugging instead of this dialog box.

************** Exception Text **************
System.InvalidOperationException: Operation is not valid because it results in a reentrant call to the SetCurrentCellAddressCore function.
at System.Windows.Forms.DataGridView.SetCurrentCellAddressCore(Int32 columnIndex, Int32 rowIndex, Boolean setAnchorCellAddress, Boolean validateCurrentCell, Boolean throughMouseClick)
at System.Windows.Forms.DataGridView.set_CurrentCell(DataGridViewCell value)
at System.Windows.Forms.DataGridView.OnBindingContextChanged(EventArgs e)
at System.Windows.Forms.Control.CreateControl()
at System.Windows.Forms.Control.WmShowWindow(Message& m)
at System.Windows.Forms.Control.WndProc(Message& m)
at System.Windows.Forms.DataGridView.WndProc(Message& m)
at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m)
at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)


************** Loaded Assemblies **************
mscorlib
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///c:/WINNT/Microsoft.NET/Framework/v2.0.50727/mscorlib.dll
----------------------------------------
MxScanConfig
Assembly Version: 1.6.720.0
Win32 Version: 1.6.720.0
CodeBase: file:///C:/Program%20Files/MxUptime/MxScanME/MxScanConfig.exe
----------------------------------------
Microsoft.VisualBasic
Assembly Version: 8.0.0.0
Win32 Version: 8.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_MSIL/Microsoft.VisualBasic/8.0.0.0__b03f5f7f11d50a3a/Microsoft.VisualBasic.dll
----------------------------------------
System
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll
----------------------------------------
System.Windows.Forms
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
----------------------------------------
System.Drawing
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
----------------------------------------
System.Runtime.Remoting
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_MSIL/System.Runtime.Remoting/2.0.0.0__b77a5c561934e089/System.Runtime.Remoting.dll
----------------------------------------
System.Configuration
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll
----------------------------------------
System.Xml
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll
----------------------------------------
System.Data
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_32/System.Data/2.0.0.0__b77a5c561934e089/System.Data.dll
----------------------------------------
System.ServiceProcess
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_MSIL/System.ServiceProcess/2.0.0.0__b03f5f7f11d50a3a/System.ServiceProcess.dll
----------------------------------------
System.Transactions
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_32/System.Transactions/2.0.0.0__b77a5c561934e089/System.Transactions.dll
----------------------------------------
System.EnterpriseServices
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_32/System.EnterpriseServices/2.0.0.0__b03f5f7f11d50a3a/System.EnterpriseServices.dll
----------------------------------------
Accessibility
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_MSIL/Accessibility/2.0.0.0__b03f5f7f11d50a3a/Accessibility.dll
----------------------------------------

************** JIT Debugging **************
To enable just-in-time (JIT) debugging, the .config file for this
application or computer (machine.config) must have the
jitDebugging value set in the system.windows.forms section.
The application must also be compiled with debugging
enabled.

For example:

<configuration>
<system.windows.forms jitDebugging="true" />
</configuration>

When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.

Thank's for the support

polarisie
Posts: 696
Joined: Mon Mar 27, 2006 2:58 pm

Re: automate ClamAV and Spam assassin Hourly instaead Daily

Post by polarisie » Sat Sep 20, 2008 4:38 pm

infoclick wrote:Sorry for the delay !

I try the C:\Progra~1\MxUptime\MxScanME\clam\bin\freshclam.exe --config-file=C:\Progra~1\MxUptime\MxScanME\clam\etc\freshclam.conf

but on my server MxScan lock this directory , so i need to Stop MxSCan start the task to update ClamAV and restart MxScan .

I can't do that every hour ....
Please modifiy Mxscan to put hourly same thing for Spamassasin
I think than user who need to pay around 249 $ to use your software, didn't need to patch it no ?
Another think if you put more 4 IP white list adress with comment
i have this error after stop and restarting MxScan
See the end of this message for details on invoking
just-in-time (JIT) debugging instead of this dialog box.

************** Exception Text **************
System.InvalidOperationException: Operation is not valid because it results in a reentrant call to the SetCurrentCellAddressCore function.
at System.Windows.Forms.DataGridView.SetCurrentCellAddressCore(Int32 columnIndex, Int32 rowIndex, Boolean setAnchorCellAddress, Boolean validateCurrentCell, Boolean throughMouseClick)
at System.Windows.Forms.DataGridView.set_CurrentCell(DataGridViewCell value)
at System.Windows.Forms.DataGridView.OnBindingContextChanged(EventArgs e)
at System.Windows.Forms.Control.CreateControl()
at System.Windows.Forms.Control.WmShowWindow(Message& m)
at System.Windows.Forms.Control.WndProc(Message& m)
at System.Windows.Forms.DataGridView.WndProc(Message& m)
at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m)
at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)


************** Loaded Assemblies **************
mscorlib
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///c:/WINNT/Microsoft.NET/Framework/v2.0.50727/mscorlib.dll
----------------------------------------
MxScanConfig
Assembly Version: 1.6.720.0
Win32 Version: 1.6.720.0
CodeBase: file:///C:/Program%20Files/MxUptime/MxScanME/MxScanConfig.exe
----------------------------------------
Microsoft.VisualBasic
Assembly Version: 8.0.0.0
Win32 Version: 8.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_MSIL/Microsoft.VisualBasic/8.0.0.0__b03f5f7f11d50a3a/Microsoft.VisualBasic.dll
----------------------------------------
System
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll
----------------------------------------
System.Windows.Forms
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
----------------------------------------
System.Drawing
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
----------------------------------------
System.Runtime.Remoting
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_MSIL/System.Runtime.Remoting/2.0.0.0__b77a5c561934e089/System.Runtime.Remoting.dll
----------------------------------------
System.Configuration
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll
----------------------------------------
System.Xml
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll
----------------------------------------
System.Data
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_32/System.Data/2.0.0.0__b77a5c561934e089/System.Data.dll
----------------------------------------
System.ServiceProcess
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_MSIL/System.ServiceProcess/2.0.0.0__b03f5f7f11d50a3a/System.ServiceProcess.dll
----------------------------------------
System.Transactions
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_32/System.Transactions/2.0.0.0__b77a5c561934e089/System.Transactions.dll
----------------------------------------
System.EnterpriseServices
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_32/System.EnterpriseServices/2.0.0.0__b03f5f7f11d50a3a/System.EnterpriseServices.dll
----------------------------------------
Accessibility
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.1433 (REDBITS.050727-1400)
CodeBase: file:///C:/WINNT/assembly/GAC_MSIL/Accessibility/2.0.0.0__b03f5f7f11d50a3a/Accessibility.dll
----------------------------------------

************** JIT Debugging **************
To enable just-in-time (JIT) debugging, the .config file for this
application or computer (machine.config) must have the
jitDebugging value set in the system.windows.forms section.
The application must also be compiled with debugging
enabled.

For example:

<configuration>
<system.windows.forms jitDebugging="true" />
</configuration>

When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.

Thank's for the support
You may try patching this to the latest version available at http://www.mxuptime.com/documents.aspx to see if this will help with the Errors you are running into
MXSCAN :: AntiSpam & AntiVirus for MailEnable (now with Spamtrap/Honeypot!)
Built-in SpamAssassin, Clam, MessageSniffer, DNSBL, URLBL, DCC, Senderbase, SpamTrap, ShortCircuit, Content Filters, Disclamers, Archiving and more.
Visit www.mxuptime.com

infoclick
Posts: 12
Joined: Wed Sep 26, 2007 2:18 pm
Location: Quebec

Post by infoclick » Sat Sep 20, 2008 6:06 pm

Yes now it's working !

Thank's a lot !

Do you add hourly update in the next Mxcan version ?

polarisie
Posts: 696
Joined: Mon Mar 27, 2006 2:58 pm

Post by polarisie » Sat Sep 20, 2008 6:17 pm

infoclick wrote:Yes now it's working !

Thank's a lot !

Do you add hourly update in the next Mxcan version ?
No, not at this point of time.
MXSCAN :: AntiSpam & AntiVirus for MailEnable (now with Spamtrap/Honeypot!)
Built-in SpamAssassin, Clam, MessageSniffer, DNSBL, URLBL, DCC, Senderbase, SpamTrap, ShortCircuit, Content Filters, Disclamers, Archiving and more.
Visit www.mxuptime.com

Post Reply