ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Re: I am also experiencing this problem
atarione


Joined: 04 Jan 2010
Posts: 0
Location: San Diego
Reply with quote
alch wrote:
atarione wrote:
Hi I Have ClamWin on 2x win2k3R2 Servers and 1 of the 2 is having this issue for some reason the 2nd server seems fine but I've had to disable ClamWin on the other at this point.


please advise if I can provide you with any logs to aid your research into this issue.


Thank you much indeed.

and for (current issue not withstanding Very Happy ) y'alls work on clamwin.



I think I found the problem, please try to replace your %programfiles%\clamwin\lib\clamwin.zip with this one:
https://files.clamwin.com/y2010/clamwin.zip
and let us know how it went and paste %tmp%\clamwin1.log file (don't open clamwin prior to reading the log file as it will overwrite the old info)



hello I am sorry to report that ClamWin will not run with the replacement clamwin.zip file provided, it fails to launch at system start and trying to manually launch also fails. Restoring the clamwin.zip file to the orig version restored program operation (albeit with bug still in effect).

clamwin1.log file (i believe this to be from the orig clamwin.zip run as I can't see a change after the abortive attempts to run clamwin with the replacement clamwin.zip)..
Quote:

System Locale: ('en_US', 'cp1252')
Default Encoding: cp1252
command line path:
Scheduler <built>((328464, 273, 1024, 1)), frequency :Daily terminated
Scheduler <built>((328464, 1047, 0, 2)), frequency :Daily terminated



I will be going to bed shortly (as it is after 11PM here in San Diego) but I'll check again tomorrow to see if i can do/try anything else to attempt to assist with this.

thank you again for your efforts certainly.
View user's profileSend private message
Re: Me too, again
jimbobmcgee


Joined: 29 Dec 2009
Posts: 0
Reply with quote
alch wrote:
The fix went into 0.95.2:
https://clamwin.svn.sourceforge.net/viewvc/clamwin/trunk/clamwin/py/Scheduler.py?r1=2553&r2=2732

I'll debug and find out what went wrong

This might seem silly, as I know next to nothing about Python and have not read that far into of the other code in that file but I assume that
Code:
self._scheduleMissed

is later checked to determine whether the job should run again immediately. If this is the case, should it really be set to True in the exception handler? This suggests that, if ever an error occurs parsing the date, the job will run again straight away, which looks like the cause of this issue.

Also, rather than build up the time from composite, would it make more sense to do something like:

Code:
schedTime = self._lastRun
delta = datetime.timedelta.min
if   self._frequency == 'Hourly':              delta = datetime.timedelta(hours=1)
elif self._frequency in ('Daily', 'Workdays'): delta = datetime.timedelta(days=1)
elif self._frequency == 'Weekly':              delta = datetime.timedelta(days=7)

if delta != datetime.timedelta.min:
  while (schedTime < datetime.datetime.now()):
    schedTime += delta

  while (self._frequency == 'Workdays' and schedTime.isoweekday() in (6, 7)):
    schedTime += delta
else:
  schedTime = datetime.datetime.min

#...
return schedTime
View user's profileSend private message
Re: I am also experiencing this problem
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Reply with quote
Quote:

hello I am sorry to report that ClamWin will not run with the replacement clamwin.zip file provided, it fails to launch at system start and trying to manually launch also fails. Restoring the clamwin.zip file to the orig version restored program operation (albeit with bug still in effect).

clamwin1.log file (i believe this to be from the orig clamwin.zip run as I can't see a change after the abortive attempts to run clamwin with the replacement



The upload interrupted half way for some reason, please try the new file (it might be necessary to change your system clock a day or two back as the problem is going to disappear very soon by itself)
View user's profileSend private message
Re: Me too, again
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Reply with quote
jimbobmcgee wrote:

This might seem silly, as I know next to nothing about Python and have not read that far into of the other code in that file but I assume that
Code:
self._scheduleMissed

is later checked to determine whether the job should run again immediately. If this is the case, should it really be set to True in the exception handler? This suggests that, if ever an error occurs parsing the date, the job will run again straight away, which looks like the cause of this issue.

The opposite, if the scheduled task has _runMissed = false and _scheduleMissed = true - then the task shouldn't run.

jimbobmcgee wrote:

Also, rather than build up the time from composite, would it make more sense to do something like:

Code:
schedTime = self._lastRun
delta = datetime.timedelta.min
if   self._frequency == 'Hourly':              delta = datetime.timedelta(hours=1)
elif self._frequency in ('Daily', 'Workdays'): delta = datetime.timedelta(days=1)
elif self._frequency == 'Weekly':              delta = datetime.timedelta(days=7)

if delta != datetime.timedelta.min:
  while (schedTime < datetime.datetime.now()):
    schedTime += delta

  while (self._frequency == 'Workdays' and schedTime.isoweekday() in (6, 7)):
    schedTime += delta
else:
  schedTime = datetime.datetime.min

#...
return schedTime


Thanks, I had no idea about timedelta when I wrote that code.
View user's profileSend private message
Re: I am also experiencing this problem
atarione


Joined: 04 Jan 2010
Posts: 0
Location: San Diego
Reply with quote
alch wrote:
Quote:

hello I am sorry to report that ClamWin will not run with the replacement clamwin.zip file provided, it fails to launch at system start and trying to manually launch also fails. Restoring the clamwin.zip file to the orig version restored program operation (albeit with bug still in effect).

clamwin1.log file (i believe this to be from the orig clamwin.zip run as I can't see a change after the abortive attempts to run clamwin with the replacement



The upload interrupted half way for some reason, please try the new file (it might be necessary to change your system clock a day or two back as the problem is going to disappear very soon by itself)


ah gotcha..i have downloaded clamwin.zip again and enabled clamwin + scheduled scans here is the clamwin1.log



Quote:

System Locale: ('en_US', 'cp1252')
Default Encoding: cp1252
command line path:
Scheduler <built>((590888, 273, 1024, 3)), frequency :Daily terminated
Scheduler <function>((<__main__>, 'C:\\', 'c', 1)), frequency :Daily terminated
Scheduler <built>((590888, 1047, 0, 4)), frequency :Daily terminated
Scheduling task (590888, 273, 1024, 5) for: Mon Jan 04 16:26:00 2010
schedTime: (2010, 1, 7, 4, 30, 0, 3, 7, -1)
Scheduling task (<__main__>, 'C:\\', 'c', 1) for: Thu Jan 07 04:30:00 2010
schedTime: (2010, 1, 7, 5, 30, 0, 3, 7, -1)
Scheduling task (<__main__>, 'D:\\', 'd', 1) for: Thu Jan 07 05:30:00 2010
schedTime: (2010, 1, 8, 4, 30, 0, 4, 8, -1)
Scheduling task (<__main__>, 'E:\\', 'e', 1) for: Fri Jan 08 04:30:00 2010
schedTime: (2010, 1, 8, 5, 30, 0, 4, 8, -1)
Scheduling task (<__main__>, 'F:\\', 'f', 1) for: Fri Jan 08 05:30:00 2010
Scheduling task (590888, 1047, 0, 6) for: Mon Jan 04 16:30:39 2010
Scheduler <built>((590888, 273, 1024, 5)), frequency :Daily terminated
Scheduler <function>((<__main__>, 'C:\\', 'c', 1)), frequency :Weekly terminated
Scheduler <function>((<__main__>, 'D:\\', 'd', 1)), frequency :Weekly terminated
Scheduler <function>((<__main__>, 'E:\\', 'e', 1)), frequency :Weekly terminated
Scheduler <function>((<__main__>, 'F:\\', 'f', 1)), frequency :Weekly terminated
Scheduler <built>((590888, 1047, 0, 6)), frequency :Daily terminated
View user's profileSend private message
running about 6~hrs w/ replacement clamwin.zip file
atarione


Joined: 04 Jan 2010
Posts: 0
Location: San Diego
Reply with quote
so far so good system hasn't been rendered inoperable by multiple instances ..
View user's profileSend private message
Problem fixed itself--again
voidxor


Joined: 01 Jan 2009
Posts: 0
Location: Lawrence, Kansas
Reply with quote
Alch, I didn't get a chance to try your replacement clamwin.zip file because the year-day is now greater than the week-day. So the problem has gone away on its own again. I did manage to get you a snippet of ClamWin1.log after the problem started:

Code:
Scheduler <built>((65644, 273, 1024, 3)), frequency :Workdays terminated
Email alert to <<email>> has been sent successfully.
Scheduler <function>((<__main__>, 'C:\\', 'Monday virus scan', 1)), frequency :Weekly terminated
Scheduler <function>((<__main__>, 'C:\\', 'Thursday virus scan', 1)), frequency :Weekly terminated
View user's profileSend private message
simonmason


Joined: 11 Oct 2009
Posts: 0
Reply with quote
Just happened to me today - froze my mail server. Tried installing the .zip file and it didn't work. Is no one else posting about this because they don't have the issue any more? I am running the latest clamwin. After having to restart the server more than 5 times from the power switch I renamed clamscan.exe until I get an answer on this!
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Reply with quote
simonmason wrote:
Just happened to me today - froze my mail server. Tried installing the .zip file and it didn't work. Is no one else posting about this because they don't have the issue any more? I am running the latest clamwin. After having to restart the server more than 5 times from the power switch I renamed clamscan.exe until I get an answer on this!


the scheduler issue was only confined to the New Year period.You can try deleting %tmp%\ClamWin_Scheduler_Info and see if it helps
View user's profileSend private message
simonmason


Joined: 11 Oct 2009
Posts: 0
Reply with quote
Well, apparently it is not confined to the New Year period or I am having another issue. I tried deleting the file but I still get multiple copies of clamscan.exe showing up in my task manager and it bought my mail server to it's knees again. Is there anything else I can look for? The date is correct on the server.
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Reply with quote
this must be a different issue because the one discussed in this thread earlier only happened within the first week of 2010.

A couple of questions:
1) How are you using clamwin on the server? Do you just use the builtin clamwin scheduler to scan at the set interval?
2) What are your scheduled scan settings?
3) Please paste %temp%clamwin1.log as straight after you get multiple instances (do not open clamwin before you do so or it will overwrite the log file)
View user's profileSend private message
simonmason


Joined: 11 Oct 2009
Posts: 0
Reply with quote
Of course, now that I am waiting for it to do it again it hasn't done it! I am using the clamwin scheduler, I have three drives - one I scan daily and the other two weekly. So there are three schedules set up. I will post the log file if it does it again. Thanks.
View user's profileSend private message
simonmason


Joined: 11 Oct 2009
Posts: 0
Reply with quote
It did it again. I managed to kill the processes and rename clamscan.exe so it won't do it again. Here is the clamwin1.log right after I killed the processes:

Scheduling task (66068, 273, 1024, 1) for: Fri Feb 19 08:36:00 2010
Scheduling task (<__main__>, 'C:\\', 'Daily C Scan', 1) for: Fri Feb 19 00:30:00 2010
schedTime: (2010, 2, 18, 1, 30, 0, 3, 49, -1)
Scheduling task (<__main__>, 'E:\\', 'Weekly E Scan', 1) for: Thu Feb 25 01:30:00 2010
schedTime: (2010, 2, 19, 1, 30, 0, 4, 50, -1)
Scheduling task (<__main__>, 'F:\\', 'Weekly F Scan', 1) for: Fri Feb 19 01:30:00 2010
Scheduling task (66068, 1047, 0, 2) for: Thu Feb 18 13:31:21 2010
Scheduler <built>((66068, 273, 1024, 1)), frequency :Daily terminated
Scheduler <function>((<__main__>, 'C:\\', 'Daily C Scan', 1)), frequency :Daily terminated
Scheduler <function>((<__main__>, 'E:\\', 'Weekly E Scan', 1)), frequency :Weekly terminated
Scheduler <function>((<__main__>, 'F:\\', 'Weekly F Scan', 1)), frequency :Weekly terminated
Scheduler <built>((66068, 1047, 0, 2)), frequency :Daily terminated
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Reply with quote
I don't see anything wrong in this logfile other than 'Daily C Scan' is not likely to finish before 'Weekly F Scan' and two clamscan.exe processes will run in paralell.

How many did you kill?
View user's profileSend private message
simonmason


Joined: 11 Oct 2009
Posts: 0
Reply with quote
I had to kill about 8 copies. This was after shutting the machine down via the power switch because it was pinned - I am not sure how many copies were running then.
View user's profileSend private message
Multiple clamscan.exe killing CPU on a scheduled scan
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 6 of 7  

  
  
 Reply to topic