hi all,
I'm a problem with clamav, I'm work with p3scan and clamav, apparently p3scan to work, but when a mail is infected it stops and show it:




12:01:29 p3scan[7849]: Informing email client to wait...
12:01:29 p3scan[7849]: notified=1
12:01:29 p3scan[7849]: got '.\r\n', mail is complete.
12:01:29 p3scan[7849]: Invoking scanner
12:01:29 p3scan[7849]: Basic scanner says hello
12:01:29 p3scan[7849]: popen /usr/bin/clamscan --no-sumary '/var/spool/p3scan/children/7849/p3scan.WgbVwb' 2>&1
12:01:29 p3scan[7849]: vi : ''
12:01:29 p3scan[7849]: Scanner returned signal 40
12:01:29 p3scan[7849]: WARNING: Your scanner returned neither 0, a viruscode, nor a good viruscode, but 40
12:01:29 p3scan[7849]: Scanner returned -1
12:01:29 p3scan[7849]: ERR: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
12:01:29 p3scan[7849]: ERR: Scanner returned unexpected error code. You should check your configuration/system.
12:01:29 p3scan[7849]: ERR: Exiting now...

ERR: Scanner returned unexpected error code. You should check your configuration/system.
12:01:29 p3scan[7849]: echo 'Scanner returned unexpected error code. You should check your configuration/system.' | /bin/mail -s 'P3Scan Terminating!' alicia@linux.pruebas.net
do_sigterm_proxy2, signal 1
ERR: We cot SIGTERM!
Uninit context
12:01:29 p3scan[7849]: ERR: Unable to free memory not previously allocated: ��Z p!�
12:01:29 p3scan[7846]: ERR: Attention: child with pid 7849 died with abnormal termsignal (11)! This is probably a bug. Please report to the author. numprocs is now 0
12:01:29 p3scan[7846]: Erasing /var/spool/p3scan/children/7849/ contents
12:01:29 p3scan[7846]: Unlinking (/var/spool/p3scan/children/7849/p3shdr.IncGTc)
12:01:29 p3scan[7846]: Unlinking (/var/spool/p3scan/children/7849/p3scan.WgbVwb)
12:01:29 p3scan[7846]: Removing directory /var/spool/p3scan/children/7849/

Can someone help me? please!!

thank's

Well, your error suggests you check your configuration. Did you??? And you need to post some useful information, before you can get help...like version/distro of Linux, and the config file(s) in question.

sorry,
Linux CentOS 5.3 with
p3scan 2.3.2
clamav 0.95.2
the user is root,need to work as a root user

p3scan configuration:
p3scan.conf

pidfile = /var/run/p3scan/p3scan.pid
maxchilds = 10
port = 8110
emailport = 25
user = root
notifydir = /var/spool/p3scan/notify
virusdir = /var/spool/p3scan
emergcon =alicia@linux.pruebas.net
scannertype = basic
scanner = /usr/bin/clamdscan --no-sumary
virusregexp = .*: (.*) FOUND
debug
template = /etc/p3scan/p3scan.mail
subject =[¡¡¡VIRUS!!!]

clamd.conf

LogFileUnlock yes
LogFile /var/log/clamav/clamd.log
LogFileMaxSize 1M
LogTime yes
LogSyslog yes
LogFacility LOG_MAIL
LogVerbose yes
PidFile /var/run/clamav/clamd.pid
TemporaryDirectory /tmp
DatabaseDirectory /var/clamav
LocalSocket /var/run/clamav/clamd.sock
FixStaleSocket yes
TCPSocket 3310
TCPAddr 0.0.0.0
MaxConnectionQueueLength 30
StreamMaxLength 10M
MaxThreads 50
ReadTimeout 300
CommandReadTimeout 5
MaxQueue 200
MaxDirectoryRecursion 20
FollowDirectorySymlinks yes
User root
Debug yes
DetectPUA yes
IncludePUA Scanner
AlgorithmicDetection yes
ScanPE yes
ScanELF yes
DetectBrokenExecutables yes
ScanMail yes

this is my configuration, p3scan is run now, but when read a mail infected it stopped.

Now this is the error show:
13:49:00 p3scan[8450]: Invoking scanner
13:49:00 p3scan[8450]: Basic scanner says hello
13:49:00 p3scan[8450]: popen /usr/bin/clamdscan --no-sumary '/var/spool/p3scan/children/8450/p3scan.A2gVwb' 2>&1
13:49:00 p3scan[8450]: vi : ''
13:49:00 p3scan[8450]: Scanner returned signal 2
13:49:00 p3scan[8450]: WARNING: Your scanner returned neither 0, a viruscode, nor a good viruscode, but 2
13:49:00 p3scan[8450]: Scanner returned -1
13:49:00 p3scan[8450]: ERR: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
13:49:00 p3scan[8450]: ERR: Scanner returned unexpected error code. You should check your configuration/system.
13:49:00 p3scan[8450]: ERR: Exiting now...

ERR: Scanner returned unexpected error code. You should check your configuration/system.
13:49:00 p3scan[8450]: echo 'Scanner returned unexpected error code. You should check your configuration/system.' | /bin/mail -s 'P3Scan Terminating!' alicia@linux.pruebas.net
do_sigterm_proxy2, signal 1
ERR: We cot SIGTERM!
Uninit context
13:49:00 p3scan[8450]: ERR: Unable to free memory not previously allocated: �p� p!�
13:49:00 p3scan[8448]: ERR: Attention: child with pid 8450 died with abnormal termsignal (11)! This is probably a bug. Please report to the author. numprocs is now 0
13:49:00 p3scan[8448]: Erasing /var/spool/p3scan/children/8450/ contents
13:49:00 p3scan[8448]: Unlinking (/var/spool/p3scan/children/8450/p3shdr.0UnGTc)
13:49:00 p3scan[8448]: Unlinking (/var/spool/p3scan/children/8450/p3scan.A2gVwb)
13:49:00 p3scan[8448]: Removing directory /var/spool/p3scan/children/8450/

can someone know why return me the 2 number????

Those lines bear checking. Do those directories exist? Permissions correct? This thread:

http://www.mail-archive.com/debian-b...msg180388.html

May help. Running as root may also be a problem....