ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Wrong return codes (Counting warnings as errors?)
jObo


Joined: 05 May 2010
Posts: 0
Reply with quote
Hello guys.

I'm using your clamscan binaries for a few scripts of mine and I've run into a weird problem with 0.96.

Here's a log from one of about 100 machines that gave me the same thing.

Code:

ClamAV full scan process starting at Wed May 5 03:53:49 2010

-------------------------------------------------------------------------------

 *** Scanning Programs in Computer Memory ***
 *** Memory Scan: using ToolHelp ***


 *** Scanned 35 processes - 352 modules ***
 *** Computer Memory Scan Completed ***

WARNING: Can't open file \\?\C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\Administrator\Local Settings\Temp\hsperfdata_Administrator\4028: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\Administrator\NTUSER.DAT: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\Administrator\ntuser.dat.LOG: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\LocalService\NTUSER.DAT: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\LocalService\ntuser.dat.LOG: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\NetworkService\NTUSER.DAT: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\NetworkService\ntuser.dat.LOG: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\user\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\user\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\user\NTUSER.DAT: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\user\ntuser.dat.LOG: Permission denied
WARNING: Can't open file \\?\C:\pagefile.sys: Permission denied
WARNING: Can't open file \\?\C:\WINDOWS\system32\CatRoot2\edb.log: Permission denied
WARNING: Can't open file \\?\C:\WINDOWS\system32\CatRoot2\tmp.edb: Permission denied
WARNING: Can't open file \\?\C:\WINDOWS\system32\config\default: Permission denied
WARNING: Can't open file \\?\C:\WINDOWS\system32\config\default.LOG: Permission denied
WARNING: Can't open file \\?\C:\WINDOWS\system32\config\SAM: Permission denied
WARNING: Can't open file \\?\C:\WINDOWS\system32\config\SAM.LOG: Permission denied
WARNING: Can't open file \\?\C:\WINDOWS\system32\config\SECURITY: Permission denied
WARNING: Can't open file \\?\C:\WINDOWS\system32\config\SECURITY.LOG: Permission denied
WARNING: Can't open file \\?\C:\WINDOWS\system32\config\software: Permission denied
WARNING: Can't open file \\?\C:\WINDOWS\system32\config\software.LOG: Permission denied
WARNING: Can't open file \\?\C:\WINDOWS\system32\config\system: Permission denied
WARNING: Can't open file \\?\C:\WINDOWS\system32\config\system.LOG: Permission denied
WARNING: Can't open file \\?\C:\WINDOWS\Temp\hsperfdata_SYSTEM\2324: Permission denied
WARNING: Can't open file \\?\C:\WINDOWS\Temp\Perflib_Perfdata_25c.dat: Permission denied
WARNING: Can't open file \\?\C:\WINDOWS\Temp\RMS6.tmp: Permission denied
WARNING: Can't open file \\?\C:\WINDOWS\Temp\RMS7.tmp: Permission denied

----------- SCAN SUMMARY -----------
Known viruses: 761656
Engine version: 0.96
Scanned directories: 4069
Scanned files: 51035
Infected files: 0
Total errors: 34
Data scanned: 6988.94 MB
Data read: 10516.23 MB (ratio 0.66:1)
Time: 1333.692 sec (22 m 13 s)


The weird thing here is this line on the summary and its implication:
Total errors: 34

It seems as if, for some reason I can't understand, it's counting the Warnings as errors.
More importantly, the return codes are also error codes.

You can only imagine the script nightmare.

I've seen this on XP (SP2, SP3) boxes but it's not consistent.


Any ideas?


p.s. I'm still trying to reproduce this, I'll keep you updated.
View user's profileSend private message
Wrong return codes (Counting warnings as errors?)
cmarcum


Joined: 06 May 2010
Posts: 0
Location: Huber Heights OH
Reply with quote
jObo,

Since I think my issue maybe related I'll add to this thread.

I am experiencing a very similar issue since upgrading to 0.96. One thing I noticed is there are now "\\?\" preceding the path where there were none before. The difference is I'm getting only 1 error total.

*********** 0.95.3 No Error *****************

AT Scheduled C Drive Scan Started Fri 04/16/2010 23:30:05.04
-------------------------------------------------------------------------------


-------------------------------------------------------------------------------

c:\pagefile.sys: Permission denied
c:\WINDOWS\system32\config\default: Permission denied
c:\WINDOWS\system32\config\SAM: Permission denied
c:\WINDOWS\system32\config\SECURITY: Permission denied
c:\WINDOWS\system32\config\software: Permission denied
c:\WINDOWS\system32\config\system: Permission denied
c:\WINDOWS\Temp\hsperfdata_SYSTEM\2564: Permission denied

----------- SCAN SUMMARY -----------
Known viruses: 756450
Engine version: 0.95.3
Scanned directories: 8819
Scanned files: 79991
Infected files: 0
Data scanned: 14571.19 MB
Data read: 14250.85 MB (ratio 1.02:1)
Time: 8180.188 sec (136 m 20 s)

************** 0.96 With Error ******************

AT Scheduled C Drive Scan Started Mon 04/26/2010 23:30:03.42
-------------------------------------------------------------------------------


-------------------------------------------------------------------------------

WARNING: Can't open file \\?\c:\pagefile.sys: Permission denied
WARNING: Can't open file \\?\c:\WINDOWS\system32\config\default: Permission denied
WARNING: Can't open file \\?\c:\WINDOWS\system32\config\SAM: Permission denied
WARNING: Can't open file \\?\c:\WINDOWS\system32\config\SECURITY: Permission denied
WARNING: Can't open file \\?\c:\WINDOWS\system32\config\software: Permission denied
WARNING: Can't open file \\?\c:\WINDOWS\system32\config\system: Permission denied
WARNING: Can't open file \\?\c:\WINDOWS\Temp\hsperfdata_SYSTEM\2564: Permission denied

----------- SCAN SUMMARY -----------
Known viruses: 758061
Engine version: 0.96
Scanned directories: 8777
Scanned files: 79685
Infected files: 0
Total errors: 1
Data scanned: 11100.04 MB
Data read: 14350.03 MB (ratio 0.77:1)
Time: 5991.656 sec (99 m 51 s)

Thanks,
Carl
View user's profileSend private message
Wrong return codes (Counting warnings as errors?)
cmarcum


Joined: 06 May 2010
Posts: 0
Location: Huber Heights OH
Reply with quote
Sorry, Forgot:
System with issue is Windows XP Pro SP3 32 bit.

Carl
View user's profileSend private message
sherpya


Joined: 22 Mar 2006
Posts: 0
Location: Italy
Reply with quote
we have changed the behavior of permission denied to be only a warn (so not counted as error and influencing return code)
in the 0.96.0.1 fix
View user's profileSend private message
Wrong return codes (Counting warnings as errors?)
cmarcum


Joined: 06 May 2010
Posts: 0
Location: Huber Heights OH
Reply with quote
Great.. Thanks.
View user's profileSend private message
jObo


Joined: 05 May 2010
Posts: 0
Reply with quote
I'm almost certain I was running .1 fix at that point.

I'll give it a test and let you know.
View user's profileSend private message
jObo


Joined: 05 May 2010
Posts: 0
Reply with quote
Here's another example that illustrates the issue:

Code:

 *** Scanning Programs in Computer Memory ***
 *** Memory Scan: using ToolHelp ***


 *** Scanned 36 processes - 513 modules ***
 *** Computer Memory Scan Completed ***

WARNING: Can't open file \\?\C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\LocalService\NTUSER.DAT: Permission denied
WARNING: Can't open file \\?\C:\Documents and Settings\LocalService\ntuser.dat.LOG: Permission denied

----------- SCAN SUMMARY -----------
Known viruses: 803604
Engine version: 0.96.1
Scanned directories: 30
Scanned files: 563
Infected files: 0
Total errors: 4
Data scanned: 284.18 MB
Data read: 0.56 MB (ratio 505.21:1)
Time: 55.282 sec (0 m 55 s)
ClamAV full scan process finished at Mon Jul 5 05:38:54 2010



This gave return code "2"
The 0.96 man page says

Quote:
2 : Some error(s) occured.



If it helps, here's the commit that introduced that behaviour https://git.clamav.net/gitweb?p=clamav-devel.git;a=commit;h=8770404a47d1cb9b15a793da98521e170402c41a
View user's profileSend private message
Report says errors but there aren't any
sirius2000


Joined: 22 Aug 2010
Posts: 0
Location: Sydney Australia
Reply with quote
Hello Everybody,

I have been having the same problem with clamwin reporting errors but not displaying any.

I have just updated to 9.6.02 but the problem persists.

I am running Windows 2008 server 64 bit.

The scan report is attached

Thanks,
Colin Douglass


Scan Started Mon Aug 23 01:30:00 2010
-------------------------------------------------------------------------------

*** Scanning Programs in Computer Memory ***
*** Memory Scan: using ToolHelp ***


*** Scanned 10 processes - 126 modules ***
*** Computer Memory Scan Completed ***

WARNING: Can't open file \\?\E:\SQL Databases\Data\DSS_Data.MDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\DSS_Log.LDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\helena.mdf: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\helena_log.ldf: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\helena_orig.mdf: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\helena_orig_1.ldf: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\installed_Data.MDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\installed_Log.LDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\MSSQL10_50.MSSQLSERVER\MSSQL\DATA\master.mdf: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\MSSQL10_50.MSSQLSERVER\MSSQL\DATA\mastlog.ldf: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\MSSQL10_50.MSSQLSERVER\MSSQL\DATA\model.mdf: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\MSSQL10_50.MSSQLSERVER\MSSQL\DATA\modellog.ldf: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\MSSQL10_50.MSSQLSERVER\MSSQL\DATA\MSDBData.mdf: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\MSSQL10_50.MSSQLSERVER\MSSQL\DATA\MSDBLog.ldf: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\NZMedical_Data.MDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\NZMedical_Log.LDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\Organic_Data.MDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\Organic_Log.LDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\PChurch_Orig_Source.MDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\PChurch_Orig_Source_Log.LDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\PChurch_Source.MDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\PChurch_Source_Log.LDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\PDC_Data.MDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\PDC_Log.LDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\recovery.MDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\recovery_1.LDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\ReportServer.mdf: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\ReportServerTempDB.mdf: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\ReportServerTempDB_log.LDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\ReportServer_log.LDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\SIRIUSV8_Data.MDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\SIRIUSV8_Log.LDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\testshapes.mdf: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\testshapes_log.ldf: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\testv8.mdf: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\testv8_log.ldf: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\Time_Sheets_Data.MDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Data\Time_Sheets_Log.LDF: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Log\tempdb.mdf: Permission denied
WARNING: Can't open file \\?\E:\SQL Databases\Log\templog.ldf: Permission denied

----------- SCAN SUMMARY -----------
Known viruses: 816918
Engine version: 0.96.2
Scanned directories: 7094
Scanned files: 124555
Infected files: 0
Total errors: 6
Data scanned: 47966.71 MB
Data read: 55061.48 MB (ratio 0.87:1)
Time: 7596.022 sec (126 m 36 s)
View user's profileSend private message
Wrong return codes (Counting warnings as errors?)
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic