ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
clamscan 1508 open_stackdumpfile: Dumping stack trace
lars


Joined: 23 Feb 2006
Posts: 12
Reply with quote
ClamWIN 0.88
Virus DB Version: (main: 36; daily: 1297)
Updated: 23:44 21 Feb 2006

ClamWin worked fine for a lot of weeks.
Then abrupt, the summary line in the Log is missing.

COMSPEC is correct.
The cygwin1.dll is only one time on my system in the ClamWin\bin directory.

I started the clamscan in the DOS-Box with the command
Code:
C:\Programme\ClamWin\bin\clamscan.exe --database="C:\Dokumente und Einstellungen\All Users\.clamwin\db" --log="C:\Dokumente und Einstellungen\All Users\.clamwin\log\ClamScanLog.txt" --bell --move="C:\Dokumente und Einstellungen\All Users\.clamwin\quarantine" --recursive C:\


After any hours i see this:
    ------------------- DOS-Box Start ------------------------------
    C:\/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/
    DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/doc/hglegal2003.htm: OK
    C:\/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/
    DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/doc/ngibmcpy2003.gif: OK
    4168 [main] clamscan 1508 handle_exceptions: Exception: STATUS_ACCESS_VIOLATI
    ON
    10812 [main] clamscan 1508 open_stackdumpfile: Dumping stack trace to clamscan
    .exe.stackdump
    ---------------- DOS-Box Ende -----------------------------------------------------


I'm scanning the last file ngibmcpy2003.gif with the IE-Extension. It works fine?! I'm scanning the folder where this file is in. It works fine?!

Confused

Any suggestions?

Thanks! Lars
View user's profileSend private message
lars


Joined: 23 Feb 2006
Posts: 12
Reply with quote
hello? there still is someone?
Bests! Lars Rolling Eyes
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1748
Reply with quote
it is hard to help in this case. Can you try scanning from command line with clamscan.exe and see if it does the same?
View user's profileSend private message
lars


Joined: 23 Feb 2006
Posts: 12
Reply with quote
yes, i have tried already. see my first posting from Thu Feb 23, 2006 2:18 pm in this topic.

What can i do to help you / me / us to detect the problem? With the option "--debug"? Or, there are any other 'undocumented' options to detect the problem?

Bests! Lars
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1748
Reply with quote
lars wrote:
yes, i have tried already. see my first posting from Thu Feb 23, 2006 2:18 pm in this topic.

What can i do to help you / me / us to detect the problem? With the option "--debug"? Or, there are any other 'undocumented' options to detect the problem?

Bests! Lars


Yes that is what I meant to say, use --debug switch with clamscan.exe It would produce verbose output and then we are intersetd in the last portion of the log when clamscan.exe crashes
View user's profileSend private message
lars


Joined: 23 Feb 2006
Posts: 12
Reply with quote
alch wrote:
lars wrote:
yes, i have tried already. see my first posting from Thu Feb 23, 2006 2:18 pm in this topic.

What can i do to help you / me / us to detect the problem? With the option "--debug"? Or, there are any other 'undocumented' options to detect the problem?

Bests! Lars


Yes that is what I meant to say, use --debug switch with clamscan.exe It would produce verbose output and then we are intersetd in the last portion of the log when clamscan.exe crashes


The stack dump will be produced, when i scan the complete drive C, only. Any partial scans are without stack dump. The complete scan of drive C will run some time. I try this with the debug-flag at the night. next message at the next day.
Thanks! Lars
View user's profileSend private message
lars


Joined: 23 Feb 2006
Posts: 12
Reply with quote
... and here are ... Wink
Command:
Code:

C:\Programme\ClamWin\bin\clamscan.exe --database="C:\Dokumente und Einstellungen\All Users\.clamwin\db" --log="C:\Dokumente und Einstellungen\All Users\.clamwin\log\ClamScanLog-060313.txt" --bell --move="C:\Dokumente und Einstellungen\All Users\.clamwin\quarantine" --debug --verbose --stdout --recursive C:\


complete Log-File:
Code:

--------------------------------------
Scan started: Mon Mar 13 22:01:56 2006

C:\/Dokumente und Einstellungen/lkrueger/Anwendungsdaten/Mozilla/Firefox/Profiles/r30qm361.default/Cache/7B0C84BFd01: Oversized.Zip FOUND
C:\/Dokumente und Einstellungen/lkrueger/Anwendungsdaten/Mozilla/Firefox/Profiles/r30qm361.default/Cache/7B0C84BFd01: moved to 'C:\Dokumente und Einstellungen\All Users\.clamwin\quarantine//7B0C84BFd01'
C:\/Dokumente und Einstellungen/lkrueger/Eigene Dateien/Download/palm/games/HandchessIIv1.1a.zip: Oversized.Zip FOUND
C:\/Dokumente und Einstellungen/lkrueger/Eigene Dateien/Download/palm/games/HandchessIIv1.1a.zip: moved to 'C:\Dokumente und Einstellungen\All Users\.clamwin\quarantine//HandchessIIv1.1a.zip'
ERROR: Can't open file C:\/Dokumente und Einstellungen/lkrueger/Lokale Einstellungen/Anwendungsdaten/Microsoft/Windows/UsrClass.dat
ERROR: Can't open file C:\/Dokumente und Einstellungen/lkrueger/Lokale Einstellungen/Anwendungsdaten/Microsoft/Windows/UsrClass.dat.LOG
ERROR: Can't open file C:\/Dokumente und Einstellungen/lkrueger/NTUSER.DAT
ERROR: Can't open file C:\/Dokumente und Einstellungen/lkrueger/ntuser.dat.LOG


the last messages from the Shell-Window (have got the last 9999 lines from shell output, when is required):
Code:

C:\/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.team.ui_2.1.0/teamui.jar: OK
Scanning C:\/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.text_2.1.0/about.html
LibClamAV debug: Matched signature for file type: HTML data
LibClamAV debug: Calculated MD5 checksum: 173b06e0277933c518bd174e2290ae9d
LibClamAV debug: in cli_scanhtml()
LibClamAV debug: Calculated MD5 checksum: 772b2798807ccf3af7c791f00cc5d809
LibClamAV debug: Calculated MD5 checksum: 2b84ebf769d86324467c7b01f9fed47a
LibClamAV debug: Calculated MD5 checksum: d41d8cd98f00b204e9800998ecf8427e
C:\/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.text_2.1.0/about.html: OK
Scanning C:\/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.text_2.1.0/plugin.properties
LibClamAV debug: Type: 0, expected: 519 (HTML.Phishing.Bank-281)
LibClamAV debug: Calculated MD5 checksum: 9bab0f53432c30b531bd3a56323c14bb
C:\/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.text_2.1.0/plugin.properties: OK
Scanning C:\/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.text_2.1.0/plugin.xml
LibClamAV debug: Calculated MD5 checksum: 607a85928f4e9adcca5bd2b3c87807bf
C:\/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.text_2.1.0/plugin.xml: OK
Scanning C:\/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.text_2.1.0/text.jar
LibClamAV debug: Recognized ZIP file
LibClamAV debug: in scanzip()
LibClamAV debug: Zip: META-INF/, crc32: 0x0, offset: 0, encrypted: 0, compressed: 0, normal: 0, method: 0, ratio: 0 (max: 250)
LibClamAV debug: Zip: META-INF/MANIFEST.MF, crc32: 0x23348bf2, offset: 39, encrypted: 0, compressed: 56, normal: 55, method: 8, ratio: 0 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 29f947c595702ccccd0ad96d8e82a02a
LibClamAV debug: Zip: org/, crc32: 0x0, offset: 161, encrypted: 0, compressed: 0, normal: 0, method: 0, ratio: 0 (max: 250)
LibClamAV debug: Zip: org/eclipse/, crc32: 0x0, offset: 195, encrypted: 0, compressed: 0, normal: 0, method: 0, ratio: 0 (max: 250)
LibClamAV debug: Zip: org/eclipse/jface/, crc32: 0x0, offset: 237, encrypted: 0, compressed: 0, normal: 0, method: 0, ratio: 0 (max: 250)
LibClamAV debug: Zip: org/eclipse/jface/text/, crc32: 0x0, offset: 285, encrypted: 0, compressed: 0, normal: 0, method: 0, ratio: 0 (max: 250)
LibClamAV debug: Zip: org/eclipse/jface/text/AbstractDocument$RegisteredReplace.class, crc32: 0x85ed6c01, offset: 338, encrypted: 0, compressed: 392, normal: 767, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: e302987bde79f9a4a3f7b249a020ca94
LibClamAV debug: Zip: org/eclipse/jface/text/AbstractDocument.class, crc32: 0xa85796f, offset: 839, encrypted: 0, compressed: 8527, normal: 19937, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Virus offset: 10341, expected: 24 (Exploit.WMF.Gen-4)
LibClamAV debug: Virus offset: 10341, expected: 2 (Exploit.WMF.Gen-3)
LibClamAV debug: Calculated MD5 checksum: 913be3c1eef4651dc76f2928381207c6
LibClamAV debug: Zip: org/eclipse/jface/text/AbstractLineTracker.class, crc32: 0x9426a612, offset: 9457, encrypted: 0, compressed: 3306, normal: 6570, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Virus offset: 4301, expected: 24 (Exploit.WMF.Gen-4)
LibClamAV debug: Virus offset: 4301, expected: 2 (Exploit.WMF.Gen-3)
LibClamAV debug: Virus offset: 4421, expected: 24 (Exploit.WMF.Gen-4)
LibClamAV debug: Virus offset: 4421, expected: 2 (Exploit.WMF.Gen-3)
LibClamAV debug: Calculated MD5 checksum: a05d4902523a62d22b46e1970d6322d2
LibClamAV debug: Zip: org/eclipse/jface/text/AbstractLineTracker$DelimiterInfo.class, crc32: 0xd06e2692, offset: 12857, encrypted: 0, compressed: 315, normal: 547, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: a5562b1b7e2b3d5fa0ab367e39d9f906
LibClamAV debug: Zip: org/eclipse/jface/text/Assert$AssertionFailedException.class, crc32: 0x72d4fc9d, offset: 13280, encrypted: 0, compressed: 332, normal: 586, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 459c42d8a5938dd1690688f8716bda3b
LibClamAV debug: Zip: org/eclipse/jface/text/Assert.class, crc32: 0xaf8f237b, offset: 13718, encrypted: 0, compressed: 737, normal: 1489, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: ed7a31037d28b492414ad813cf231e0f
LibClamAV debug: Zip: org/eclipse/jface/text/BadLocationException.class, crc32: 0x2d17e6e3, offset: 14536, encrypted: 0, compressed: 287, normal: 479, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 44d8d03fc0c171042c2e7d6af0089048
LibClamAV debug: Zip: org/eclipse/jface/text/BadPositionCategoryException.class, crc32: 0x646b8a54, offset: 14918, encrypted: 0, compressed: 297, normal: 503, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 90664f4543321bc268283fa2f4ec6f0a
LibClamAV debug: Zip: org/eclipse/jface/text/ChildDocument$TextStore.class, crc32: 0x43455f5e, offset: 15318, encrypted: 0, compressed: 759, normal: 1704, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 7bfc8f936127f2151bdb82495b8a2739
LibClamAV debug: Zip: org/eclipse/jface/text/ChildDocument.class, crc32: 0x14a33c0a, offset: 16175, encrypted: 0, compressed: 3293, normal: 7420, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Virus offset: 5713, expected: 24 (Exploit.WMF.Gen-4)
LibClamAV debug: Virus offset: 5713, expected: 2 (Exploit.WMF.Gen-3)
LibClamAV debug: Calculated MD5 checksum: b68f18659042aa853d6fc4d49c2fd95b
LibClamAV debug: Zip: org/eclipse/jface/text/ChildDocumentManager.class, crc32: 0xef263f01, offset: 19556, encrypted: 0, compressed: 2035, normal: 5078, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 3e1b0fc1bd53366b131cb6daa0f7202f
LibClamAV debug: Zip: org/eclipse/jface/text/ChildDocumentManager$ChildPartitioner.class, crc32: 0xdd8f24da, offset: 21686, encrypted: 0, compressed: 981, normal: 2333, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 0782a8da9196becc0aeeda1fd7494768
LibClamAV debug: Zip: org/eclipse/jface/text/ChildDocumentManager$ChildPositionUpdater.class, crc32: 0x805bc718, offset: 22779, encrypted: 0, compressed: 1039, normal: 2053, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Virus offset: 1560, expected: 24 (Exploit.WMF.Gen-4)
LibClamAV debug: Virus offset: 1560, expected: 2 (Exploit.WMF.Gen-3)
LibClamAV debug: Calculated MD5 checksum: 1b2b78448139203d64487a9eff569d5e
LibClamAV debug: Zip: org/eclipse/jface/text/ChildDocumentManager$ChildPosition.class, crc32: 0xdd9b5592, offset: 23934, encrypted: 0, compressed: 490, normal: 933, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 9aebd7ecf432e748c8d860d52718916d
LibClamAV debug: Zip: org/eclipse/jface/text/ConfigurableLineTracker.class, crc32: 0x9d4f81bf, offset: 24533, encrypted: 0, compressed: 687, normal: 1423, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: aa04ffd5786dfae566018ad15b8b16a6
LibClamAV debug: Zip: org/eclipse/jface/text/DefaultLineTracker.class, crc32: 0xfb24d06d, offset: 25318, encrypted: 0, compressed: 767, normal: 1460, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 784f669cf44fe5ec961cc8e497e79974
LibClamAV debug: Zip: org/eclipse/jface/text/DefaultPositionUpdater.class, crc32: 0x352347f3, offset: 26178, encrypted: 0, compressed: 1553, normal: 3149, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: afe2881cbe12301e9a41d978e36e4986
LibClamAV debug: Zip: org/eclipse/jface/text/Document.class, crc32: 0x1b909f5b, offset: 27828, encrypted: 0, compressed: 771, normal: 1614, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 0def2a824ddf83c06f0f14a44ff47261
LibClamAV debug: Zip: org/eclipse/jface/text/DocumentEvent.class, crc32: 0x58c72240, offset: 28682, encrypted: 0, compressed: 592, normal: 1230, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 5c002d886be1153be67c7626d8346767
LibClamAV debug: Zip: org/eclipse/jface/text/GapTextStore.class, crc32: 0xeaaa86d1, offset: 29362, encrypted: 0, compressed: 1911, normal: 3448, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Virus offset: 1677, expected: 24 (Exploit.WMF.Gen-4)
LibClamAV debug: Virus offset: 1677, expected: 2 (Exploit.WMF.Gen-3)
LibClamAV debug: Calculated MD5 checksum: 48094ab05bfcd19cd75d1705ccb46510
LibClamAV debug: Zip: org/eclipse/jface/text/IDocument.class, crc32: 0x1fad4aea, offset: 31360, encrypted: 0, compressed: 936, normal: 2736, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: f585ee03e1cce81b489f7e9ce7625a03
LibClamAV debug: Zip: org/eclipse/jface/text/IDocumentExtension$IReplace.class, crc32: 0x8f118893, offset: 32380, encrypted: 0, compressed: 199, normal: 338, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: d0abfd15becea757211c906299876b3d
LibClamAV debug: Zip: org/eclipse/jface/text/IDocumentExtension.class, crc32: 0xcaed8dcb, offset: 32681, encrypted: 0, compressed: 323, normal: 610, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: a922f9cb3f1cabaf9d792b6e0ce9dbfe
LibClamAV debug: Zip: org/eclipse/jface/text/IDocumentExtension2.class, crc32: 0x9da8b567, offset: 33097, encrypted: 0, compressed: 202, normal: 302, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 8212be55414fda277ca5538d03254755
LibClamAV debug: Zip: org/eclipse/jface/text/IDocumentInformationMapping.class, crc32: 0x9d347d6d, offset: 33393, encrypted: 0, compressed: 301, normal: 669, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 2e680bf9a3614bb37f450cd8a3363411
LibClamAV debug: Zip: org/eclipse/jface/text/IDocumentListener.class, crc32: 0xcc981c3, offset: 33796, encrypted: 0, compressed: 171, normal: 243, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: a446000f0656ebf8bf5f92522ed561e5
LibClamAV debug: Zip: org/eclipse/jface/text/IDocumentPartitioner.class, crc32: 0x1b596697, offset: 34059, encrypted: 0, compressed: 309, normal: 623, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: a2cb6b3553b0ecbce1dd59fff3351473
LibClamAV debug: Zip: org/eclipse/jface/text/IDocumentPartitionerExtension.class, crc32: 0xfc970a69, offset: 34463, encrypted: 0, compressed: 173, normal: 264, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 21d11f5ed745b08c9f213c2613dd950b
LibClamAV debug: Zip: org/eclipse/jface/text/IDocumentPartitioningListener.class, crc32: 0x9ce3d719, offset: 34740, encrypted: 0, compressed: 160, normal: 240, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 0af43334e3a3fc4726c99b6df7833908
LibClamAV debug: Zip: org/eclipse/jface/text/IDocumentPartitioningListenerExtension.class, crc32: 0xec7f15a4, offset: 35004, encrypted: 0, compressed: 174, normal: 290, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 18142caca990557879c8ba763bace2c9
LibClamAV debug: Zip: org/eclipse/jface/text/ILineTracker.class, crc32: 0x97dde82f, offset: 35291, encrypted: 0, compressed: 355, normal: 755, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 9a1879ca81053eb8763f30e2c3b99482
LibClamAV debug: Zip: org/eclipse/jface/text/IPositionUpdater.class, crc32: 0x1db87fc, offset: 35733, encrypted: 0, compressed: 151, normal: 197, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 18ef0dc45734e423c5b66290dbc54b7b
LibClamAV debug: Zip: org/eclipse/jface/text/IRegion.class, crc32: 0xb41ca98c, offset: 35975, encrypted: 0, compressed: 141, normal: 164, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 26ca74c4faf011143da5c5c83d2a3a9b
LibClamAV debug: Zip: org/eclipse/jface/text/ISlaveDocumentManager.class, crc32: 0x51339111, offset: 36198, encrypted: 0, compressed: 265, normal: 606, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: c191eb6dd6f4e54462a8a1d9e9e26518
LibClamAV debug: Zip: org/eclipse/jface/text/ITextStore.class, crc32: 0x3495b231, offset: 36559, encrypted: 0, compressed: 200, normal: 286, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 4d8d22e6db51d3884f9f951e5a01e31e
LibClamAV debug: Zip: org/eclipse/jface/text/ITypedRegion.class, crc32: 0x742a295d, offset: 36844, encrypted: 0, compressed: 154, normal: 207, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 54afcbc1f5ed9ff109126bee8b30571d
LibClamAV debug: Zip: org/eclipse/jface/text/Line.class, crc32: 0xdf2df9cf, offset: 37085, encrypted: 0, compressed: 451, normal: 799, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 0a6e7238e9be90834d25344ec6d68b9f
LibClamAV debug: Zip: org/eclipse/jface/text/ParentChildMapping.class, crc32: 0xa6d0c498, offset: 37615, encrypted: 0, compressed: 1528, normal: 3393, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 1946a7ae5ce2c371f8c1c7fa12a29271
LibClamAV debug: Zip: org/eclipse/jface/text/Position.class, crc32: 0xf5a87321, offset: 39236, encrypted: 0, compressed: 978, normal: 1980, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: e92b3b90a6193790340455750dd824d7
LibClamAV debug: Zip: org/eclipse/jface/text/Region.class, crc32: 0xab2c7e49, offset: 40297, encrypted: 0, compressed: 509, normal: 939, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 3ed235af96478299b00ca83109bddd81
LibClamAV debug: Zip: org/eclipse/jface/text/SequentialRewriteTextStore$Replace.class, crc32: 0xd89d20fa, offset: 40887, encrypted: 0, compressed: 413, normal: 703, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 0bd0deb456b0b0521ee8c8449575648c
LibClamAV debug: Zip: org/eclipse/jface/text/SequentialRewriteTextStore.class, crc32: 0x12ef6b4e, offset: 41409, encrypted: 0, compressed: 2092, normal: 4158, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Virus offset: 2981, expected: 24 (Exploit.WMF.Gen-4)
LibClamAV debug: Virus offset: 2981, expected: 2 (Exploit.WMF.Gen-3)
LibClamAV debug: Calculated MD5 checksum: 3fe18715e42901ea6693d6c4ccda47d2
LibClamAV debug: Zip: org/eclipse/jface/text/SlaveDocumentEvent.class, crc32: 0x3fe49f6a, offset: 43602, encrypted: 0, compressed: 398, normal: 868, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 64ec7966196e8f217270d8f3a9efbd16
LibClamAV debug: Zip: org/eclipse/jface/text/TextUtilities.class, crc32: 0x217b7a99, offset: 44093, encrypted: 0, compressed: 2555, normal: 4978, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Virus offset: 2779, expected: 24 (Exploit.WMF.Gen-4)
LibClamAV debug: Virus offset: 2779, expected: 2 (Exploit.WMF.Gen-3)
LibClamAV debug: Calculated MD5 checksum: 14a152253fc48c4dc0c58df476deb3cd
LibClamAV debug: Zip: org/eclipse/jface/text/TypedPosition.class, crc32: 0xe1af07f6, offset: 46736, encrypted: 0, compressed: 668, normal: 1270, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 123d67d6fc2087d2588c723fd1efd4fd
LibClamAV debug: Zip: org/eclipse/jface/text/TypedRegion.class, crc32: 0xf62f3ada, offset: 47492, encrypted: 0, compressed: 564, normal: 982, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 56845010dc43fb7eef3ca651a9bcb739
LibClamAV debug: Zip: org/eclipse/jface/text/CoordinatesTranslator.class, crc32: 0x3933d860, offset: 48142, encrypted: 0, compressed: 3244, normal: 6903, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: b47a7d57096ccc1843d4943dd4b1b456
LibClamAV debug: Zip: org/eclipse/jface/text/Fragment.class, crc32: 0xa90964, offset: 51482, encrypted: 0, compressed: 376, normal: 731, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 581f06bbe2b1fb838d095f22500a2335
LibClamAV debug: Zip: org/eclipse/jface/text/FragmentUpdater.class, crc32: 0x33eb567, offset: 51941, encrypted: 0, compressed: 1190, normal: 2310, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: d6ab28eb1af105adb32ffd2bca80331a
LibClamAV debug: Zip: org/eclipse/jface/text/ProjectionDocument$1.class, crc32: 0x278e360e, offset: 53221, encrypted: 0, compressed: 503, normal: 922, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 5830a9285a5d9108914baffa4c06bd96
LibClamAV debug: Zip: org/eclipse/jface/text/ProjectionDocument.class, crc32: 0xedd244cd, offset: 53819, encrypted: 0, compressed: 6219, normal: 13296, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Virus offset: 12936, expected: 24 (Exploit.WMF.Gen-4)
LibClamAV debug: Virus offset: 12936, expected: 2 (Exploit.WMF.Gen-3)
LibClamAV debug: Virus offset: 13145, expected: 24 (Exploit.WMF.Gen-4)
LibClamAV debug: Virus offset: 13145, expected: 2 (Exploit.WMF.Gen-3)
LibClamAV debug: Calculated MD5 checksum: 13d47f6893d0ffb641a730d11e0f52ca
LibClamAV debug: Zip: org/eclipse/jface/text/ProjectionDocumentManager.class, crc32: 0xa8700279, offset: 60131, encrypted: 0, compressed: 2112, normal: 5065, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: f950408a260040c73be92995166e2849
LibClamAV debug: Zip: org/eclipse/jface/text/ProjectionPosition.class, crc32: 0xcdcfdd9b, offset: 62343, encrypted: 0, compressed: 417, normal: 868, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: e88a3436b9172e1af907f1c829178065
LibClamAV debug: Zip: org/eclipse/jface/text/ProjectionPositionUpdater.class, crc32: 0xdf48de12, offset: 62853, encrypted: 0, compressed: 611, normal: 1052, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 74508fa4b7e0b5f53b813e7a9792a18f
LibClamAV debug: Zip: org/eclipse/jface/text/ProjectionTextStore.class, crc32: 0x7529d5d3, offset: 63564, encrypted: 0, compressed: 1450, normal: 2906, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 23f468634d2c39a4f459487c1b7a8afd
LibClamAV debug: Calculated MD5 checksum: 94485ea32192296f1cec0095ae81014b
C:\/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.text_2.1.0/text.jar: OK
Scanning C:\/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/about.html
LibClamAV debug: Matched signature for file type: HTML data
LibClamAV debug: Calculated MD5 checksum: c4276136a113141abbd5ac1c1424feb0
LibClamAV debug: in cli_scanhtml()
     10 [main] clamscan 1496 handle_exceptions: Exception: STATUS_ACCESS_VIOLATION
  10152 [main] clamscan 1496 open_stackdumpfile: Dumping stack trace to clamscan.exe.stackdump

C:\Dokumente und Einstellungen\lkrueger>


and the clamscan.exe.stackdump from 14.03.2006 03:57h 1.362 Bytes :
Code:
Exception: STATUS_ACCESS_VIOLATION at eip=610022AE
eax=61259018 ebx=61259018 ecx=FFFF0000 edx=61259120 esi=00000008 edi=61156AD0
ebp=0022C878 esp=0022C870 program=C:\Programme\ClamWin\bin\clamscan.exe, pid 1496, thread main
cs=001B ds=0023 es=0023 fs=0038 gs=0000 ss=0023
Stack trace:
Frame     Function  Args
0022C878  610022AE  (00000000, 000001A0, 0022C8C8, 0000008F)
0022C8A8  610022E8  (000002BC, 0022C8E8, 61157700, 61156A90)
0022C8D8  6105C023  (61156A90, 611576C0, 000001A0, 00000000)
0022C8F8  610E10E7  (61156A90, 611576C0, 0022C938, 00000000)
0022C928  61011CFB  (61154A78, 611576C0, 00000000, 00000000)
0022C968  61011E38  (61154A78, 0000000D, 0000000E, 77881F55)
0022C9A8  6108E3FD  (0000000D, 00000000, 00000000, 00000000)
0022DA88  610844FF  (1090E100, 00000000, 00000000, 00000000)
0022DED8  0040F424  (0044BE5C, 10032470, 1090B310, 0000006B)
0022E118  0040C521  (0000000D, 0022E178, 0044BE5C, 10032470)
0022E148  0040F720  (0000000D, 0022E178, 0044BE5C, 10032470)
0022E188  0040442F  (1090E068, 10032470, 1090B310, 0000006B)
0022E1C8  00405ED8  (1090E068, 10032470, 00000000, 100301E0)
0022E278  00406F8F  (1090DE08, 10032470, 00000000, 100301E0)
0022E328  00406F52  (1090DBE8, 10032470, 00000000, 100301E0)
0022E3D8  00406F52  (10910BC0, 10032470, 00000000, 100301E0)
End of stack trace (more stack frames may be present)


I hope, we get ahead thereby.
Bests! Lars
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1748
Reply with quote
thanks for the info, could you send this file
C:/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/about.html
to my email address: clamwin at clamwin dot com.

It won't be easy to debug though. We had that issue popping up rarely and it was never reproducable in Unix, so I presume cygwin is the culprit here. Clamwin version 1 to be release soon will have native windows implementation of clamav and should be free form this issue.

In the meanwhile you may exclude this folder by adding this regular expression (keep the <>):
<C:\\Programme\\Install-DeveloperStudio_51030724_15\\.*> to your exclusion filter
View user's profileSend private message
lars


Joined: 23 Feb 2006
Posts: 12
Reply with quote
alch wrote:
thanks for the info, could you send this file
C:/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/about.html
to my email address: clamwin at clamwin dot com.

It won't be easy to debug though. We had that issue popping up rarely and it was never reproducable in Unix, so I presume cygwin is the culprit here. Clamwin version 1 to be release soon will have native windows implementation of clamav and should be free form this issue.

In the meanwhile you may exclude this folder by adding this regular expression (keep the <>):
<C:\\Programme\\Install-DeveloperStudio_51030724_15\\.*> to your exclusion filter


eMail sent with subject "from lars: clamscan 1508 open_stackdumpfile: Dumping stack trace"
View user's profileSend private message
lars


Joined: 23 Feb 2006
Posts: 12
Reply with quote
... mmmmhhhhhhhhh .....
I have scaned the 'susbected' folder C:/Programme/Install-DeveloperStudio_51030724_15/ without "Dumping stack trace"?!

Command:
Code:
C:\Programme\ClamWin\bin\clamscan.exe --database="C:\Dokumente und Einstellungen\All Users\.clamwin\db" --log="C:\Dokumente und Einstellungen\All Users\.clamwin\log\ClamScanLog-060314-develStudio.txt" --bell --move="C:\Dokumente und Einstellungen\All Users\.clamwin\quarantine" --debug --verbose --stdout --recursive C:/Programme/Install-DeveloperStudio_51030724_15/


last messages from schell window:
Code:
LibClamAV debug: Section 3
LibClamAV debug: Section name: .rsrc
LibClamAV debug: VirtualSize: 182952
LibClamAV debug: VirtualAddress: 0x1a000
LibClamAV debug: SizeOfRawData: 184320
LibClamAV debug: PointerToRawData: 0x17000 (94208)
LibClamAV debug: ------------------------------------
LibClamAV debug: EntryPoint offset: 0x8947 (35143)
C:/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/MAXDB/NT/SETUPS/SQLSTD75.exe: OK
Scanning C:/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/MAXDB/README.TXT
LibClamAV debug: Calculated MD5 checksum: a41d836134f304d22d45d55793684ac2
C:/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/MAXDB/README.TXT: OK
Scanning C:/Programme/Install-DeveloperStudio_51030724_15/META-INF/MANIFEST.MF
LibClamAV debug: Calculated MD5 checksum: efc4c24abdeb3c0f01098ec11f1a73cd
C:/Programme/Install-DeveloperStudio_51030724_15/META-INF/MANIFEST.MF: OK

----------- SCAN SUMMARY -----------
Known viruses: 46222
Engine version: 0.88
Scanned directories: 2035
Scanned files: 10202
Infected files: 0
Data scanned: 1445.38 MB
Time: 4170.217 sec (69 m 30 s)

C:\Dokumente und Einstellungen\lkrueger>


But, in the other way, the problems with clamscan started with the installation of DeveloperStudio. I do not know it exactly at this time.

And now? Question

Bests! Lars
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1748
Reply with quote
Quote:

But, in the other way, the problems with clamscan started with the installation of DeveloperStudio. I do not know it exactly at this time.


I got your email and the file does not crash clamwin here both using the same command line as yours and clamwin gui. Can you try the following tests

1. run the clamdscan.exe with c:\ replaced with /cygdrive/c (clamwin does that for you):
C:\Programme\ClamWin\bin\clamscan.exe --database="/cygdrive/c/Dokumente und Einstellungen/All Users/.clamwin/db" --log="/cygdrive/c/Dokumente und Einstellungen/All Users/.clamwin/log/ClamScanLog-060314-develStudio.txt" --bell --move="/cygdrive/c/Dokumente und Einstellungen/All Users/.clamwin/quarantine" --recursive /cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/

2. scan with clamwin gui this dir:
C:/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/

3. rerun your original clamdscan that crashed it to see if it still does that
View user's profileSend private message
lars


Joined: 23 Feb 2006
Posts: 12
Reply with quote
Quote:
1. run the clamdscan.exe with c:\ replaced with /cygdrive/c (clamwin does that for you):
C:\Programme\ClamWin\bin\clamscan.exe --database="/cygdrive/c/Dokumente und Einstellungen/All Users/.clamwin/db" --log="/cygdrive/c/Dokumente und Einstellungen/All Users/.clamwin/log/ClamScanLog-060314-develStudio.txt" --bell --move="/cygdrive/c/Dokumente und Einstellungen/All Users/.clamwin/quarantine" --recursive /cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/

without stack dump
Code:
C:\Dokumente und Einstellungen\lkrueger>C:\Programme\ClamWin\bin\clamscan.exe --database="/cygdrive/c/Dokumente und Einstellungen/All Users/.clamwin/db" --log="/cygdrive/c/Dokumente und Einstellungen/All Users/.clamwin/log/ClamScanLog-060314-develStudio.txt" --bell --move="/cygdrive/c/Dokumente und Einstellungen/All Users/.clamwin/quarantine" --recursive /cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/about.html: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/bootstrap.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/catalina.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/commons-logging.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/conf/catalina.policy: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/conf/tomcat-users.xml: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/conf/web.xml: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/doc/hglegal2003.htm: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/doc/ngibmcpy2003.gif: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/doc/org_eclipse_tomcat.html: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/jakarta-regexp-1.2.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/jasper-compiler.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/jasper-runtime.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/naming-common.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/naming-factory.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/naming-resources.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/plugin.properties: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/plugin.xml: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/preferences.ini: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/servlet.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/servlets-common.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/servlets-default.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/servlets-invoker.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/servlets-manager.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/servlets-webdav.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/tomcat-coyote.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/tomcat-http11.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/tomcat-util.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/tomcatwrapper.jar: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/webapps/ROOT/index.html: OK
/cygdrive/c/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/webapps/ROOT/WEB-INF/web.xml: OK

----------- SCAN SUMMARY -----------
Known viruses: 46222
Engine version: 0.88
Scanned directories: 6
Scanned files: 31
Infected files: 0
Data scanned: 2.90 MB
Time: 12.305 sec (0 m 12 s)

C:\Dokumente und Einstellungen\lkrueger>
View user's profileSend private message
lars


Joined: 23 Feb 2006
Posts: 12
Reply with quote
Quote:
2. scan with clamwin gui this dir:
C:/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/

over the IE Extension ...
without stack dump

Code:
--------------------------------------
Scan started: Tue Mar 14 14:28:21 2006


-- summary --
Known viruses: 46222
Engine version: 0.88
Scanned directories: 6
Scanned files: 31
Infected files: 0

Data scanned: 2.90 MB
Time: 12.238 sec (0 m 12 s)
-------------------
Completed
-------------------
View user's profileSend private message
lars


Joined: 23 Feb 2006
Posts: 12
Reply with quote
Quote:
3. rerun your original clamdscan that crashed it to see if it still does that

is running ... this need some hours. results in the next morning.
Bests! Lars
View user's profileSend private message
lars


Joined: 23 Feb 2006
Posts: 12
Reply with quote
Quote:
3. rerun your original clamdscan that crashed it to see if it still does that

with Dumping stack trace
command:
Code:
C:\Dokumente und Einstellungen\lkrueger>C:\Programme\ClamWin\bin\clamscan.exe --database="C:\Dokumente und Einstellungen\All Users\.clamwin\db" --log="C:\Dokumente und Einstellungen\All Users\.clamwin\log\ClamScanLog-060313.txt" --bell --move="C:\Dokumente und Einstellungen\All Users\.clamwin\quarantine" --debug --verbose --stdout --recursive C:\

last messages:
Code:
LibClamAV debug: Zip: org/eclipse/jface/text/ProjectionDocumentManager.class, crc32: 0xa8700279, offset: 60131, encrypted: 0, compressed: 2112, normal: 5065, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: f950408a260040c73be92995166e2849
LibClamAV debug: Zip: org/eclipse/jface/text/ProjectionPosition.class, crc32: 0xcdcfdd9b, offset: 62343, encrypted: 0, compressed: 417, normal: 868, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: e88a3436b9172e1af907f1c829178065
LibClamAV debug: Zip: org/eclipse/jface/text/ProjectionPositionUpdater.class, crc32: 0xdf48de12, offset: 62853, encrypted: 0, compressed: 611, normal: 1052, method: 8, ratio: 1 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 74508fa4b7e0b5f53b813e7a9792a18f
LibClamAV debug: Zip: org/eclipse/jface/text/ProjectionTextStore.class, crc32: 0x7529d5d3, offset: 63564, encrypted: 0, compressed: 1450, normal: 2906, method: 8, ratio: 2 (max: 250)
LibClamAV debug: Calculated MD5 checksum: 23f468634d2c39a4f459487c1b7a8afd
LibClamAV debug: Calculated MD5 checksum: 94485ea32192296f1cec0095ae81014b
C:\/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.text_2.1.0/text.jar: OK
Scanning C:\/Programme/Install-DeveloperStudio_51030724_15/DVD_NW_04_SR1_SAP_Web_AS_JAVA/DEVST/IDE/eclipse/plugins/org.eclipse.tomcat_4.0.6.2/about.html
LibClamAV debug: Matched signature for file type: HTML data
LibClamAV debug: Calculated MD5 checksum: c4276136a113141abbd5ac1c1424feb0
LibClamAV debug: in cli_scanhtml()
   4806 [main] clamscan 580 handle_exceptions: Exception: STATUS_ACCESS_VIOLATION
  33342 [main] clamscan 580 open_stackdumpfile: Dumping stack trace to clamscan.exe.stackdump

C:\Dokumente und Einstellungen\lkrueger>
View user's profileSend private message
clamscan 1508 open_stackdumpfile: Dumping stack trace
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 2  

  
  
 Reply to topic