Hello everyone,

I hope everyone's new year is going well. I was just appointed the task to manage ClamAV for our environment. I am happy to know that I am going to learn how to use, but I am seeking some guidance from my fellow brofessionals regarding an issue I am having. I am currently running ClamAV on AWS Windows and Linux environments. From time to time I notice large spikes in the memory usage as well as the CPU which appears to be causing the program to crash. Currently I am troubleshooting a Windows Server 2012 R2 Standard server. It is 64 bit with 4 GB of RAM and dual core processor running @ 2.50 Ghz each. (I have multiple servers running with those specs and not all servers care crashing.)

I went to c:\ProgramData\.clamwin\log and no log files are written there. I do have the following crash error

Problem signature:
Problem Event Name: BEX64
Application Name: clamscan.exe
Application Version: 0.99.1.0
Application Timestamp: 56d62e82
Fault Module Name: MSVCR100.dll
Fault Module Version: 10.0.40219.325
Fault Module Timestamp: 4df2bcac
Exception Offset: 0000000000070693
Exception Code: c0000409
Exception Data: 0000000000000000
OS Version: 6.3.9600.2.0.0.272.7

Below is from Windows Event viewer

+ System

- Provider

[ Name] Application Error

- EventID 1000

[ Qualifiers] 0

Level 2

Task 100

Keywords 0x80000000000000

- TimeCreated

[ SystemTime] 2017-01-30T04:33:17.000000000Z

EventRecordID 15848

Channel Application

Computer *****

Security


- EventData

clamscan.exe
0.99.1.0
56d62e82
MSVCR100.dll
10.0.40219.325
4df2bcac
c0000409
0000000000070693
10cc
01d27ab1cdde19f3
C:\progra~1\clamav~1\clamscan.exe
C:\Windows\SYSTEM32\MSVCR100.dll
38082f02-e6a5-11e6-8117-0accab75343c


Any assistance and guidance will be greatly appreciated.

The forums here are for the ClamWin open source antivirus program for Windows GUI environments. It uses a Windows port of the original Clam AV source code, but it is not the same program. In addition, ClamWin is not designed/tested specifically for use in network environments. We can not be of much help to you. I suggest you look elsewhere. Good luck!

Regards,