ClamWin Free Antivirus :: View topic

Posted: Wed Mar 19, 2014 12:32 pm

Hi

During some tests with clamwin version 0.98.1.0 (using the portable version) by using clamscan directly I get the following issue:

cmd:
clamscan.exe --nocerts -o -i --no-summary -r e:\

E: is a read-write mounted ntfs image mounted by Passmark OSFMount Vers. 1.5 (1015)

LibClamAV Error: fmap: cannot map file descriptor 3
LibClamAV Error: CRITICAL: fmap() failed
LibClamAV Warning: System Error #1392 not mapped, please report
E:\System Volume Information\*: Permission denied

This is running on a test-system using a 32 bit Windows XP Prof. SP2

What do you need in addition to debug / fix the issue if this is a serious issue at all ?

This is what I get from running clamwin in windebug

LibClamAV

Code:

Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.

CommandLine: C:\temp\LogMole32.exe config.txt
Starting directory: c:\temp
Symbol search path is: *** Invalid ***

(994.19c): Invalid handle - code c0000008 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=c0000008 ebx=781c4820 ecx=0012f8d8 edx=7c90e4c8 esi=00000003 edi=00000000
eip=7c90e4ff esp=0012f884 ebp=0012f8d4 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206
ntdll!KiRaiseUserExceptionDispatcher+0x37:
7c90e4ff 8b0424 mov eax,dword ptr [esp] ss:0023:0012f884=c0000008
2:003> g
(994.19c): Invalid handle - code c0000008 (!!! second chance !!!)
eax=c0000008 ebx=781c4820 ecx=0012f8d8 edx=7c90e4c8 esi=00000003 edi=00000000
eip=7c90e4ff esp=0012f884 ebp=0012f8d4 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206
ntdll!KiRaiseUserExceptionDispatcher+0x37:
7c90e4ff 8b0424 mov eax,dword ptr [esp] ss:0023:0012f884=c0000008
2:003> g

Posted: Wed Mar 19, 2014 1:52 pm

According to Microsoft that error 1392 means the system is corrupt or unreadable. See https://msdn.microsoft.com/en-us/library/windows/desktop/ms681385(v=vs.85).aspx on the web.

ClamWin is actually designed to read files--an image may not be in its capability to read.

Regards,

Posted: Wed Mar 19, 2014 2:56 pm

Hi

Actually it continues to scan the files contained in the image as the image file is mounted using the mentioned software for the purpose to make them available to software to process the files therein

br