LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)
-   -   ClamAV: clamscan seems to stall on scanning mounted Windows partition (https://www.linuxquestions.org/questions/linux-software-2/clamav-clamscan-seems-to-stall-on-scanning-mounted-windows-partition-670592/)

silencestone 09-17-2008 01:28 PM

ClamAV: clamscan seems to stall on scanning mounted Windows partition
 
While using Linux live-CD's to repair infected Windows system, clamscan seems to stall. At least, the LED's I would expect to be on during this operation, the 'hard drive activity' and 'CD activity', go off, both drives stop making noise. Checking "htop", clamscan is listed, but isn't...moving resource-wise. Also in "htop": Memory usage stays constant and low, but CPU usage is all the way at 100% and not moving. I can use other consoles and run other programs without issue, but clamscan just seems to start off well, then hit a point and stall.

I've heard that ClamAV is slow on scanning, but should it really be taking 2 hours on an .exe of 2MBs? And without showing sign of its effort in the process list?

unSpawn 09-17-2008 04:37 PM

I think at this time the verdict would be "inconclusive" due to lack of information. It really could be anything ranging from the inability to unpack or scan PXE-compressed PE executables to who knows what . (Different app but for instance a certain GNU/Linux version of Bitdefender stalled on sockets.) Best way forward IMHO would be to monitor the log and make clamscan run in verbose/debug mode to pick up any errors and at the same time monitor progress using 'lsof' on clamscan's PID: one of the file descriptors should show which file it's got open and stalls on. That should get you more info.


All times are GMT -5. The time now is 08:24 AM.