Clamav running even though virus filtering is disabled

greetings all,
I am running an OS X Server 10.4.8 machine. I have virus filtering turned off, and with good reason - when it is on, there is a big performance hit. However, this afternoon clamav randomly clicked on, even though virus filtering is still disabled. I wasn't even working on the server - I only noticed because my monitoring software alerted me to the increased CPU usage. Any ideas as to what could have caused this behavior, and what I can do to reverse it?

OK. This is due to how Apple's default configuration is set up.
amavisd is the content filter and as such responsible for passing mail to spamassassin and/or clamav. On a standard installation, if you turn of virus scanning it will basically only turn of virus database updates, but amavisd will still call clamscan (without reporting anything back or taking any action).
You have several options.
1. Turn off content filtering altogether. Not a good idea as you would be buried in spam.
2. Edit /etc/amavisd.conf and comment out (put a "#" in front of the lines)
### http://www.clamav.net/ - backs up clamd or Mail::ClamAV
['ClamAV-clamscan', 'clamscan',
"--stdout --disable-summary -r --tempdir=$TEMPBASE {}",
[0], qr/:.*\sFOUND$/, qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
(May look slightly different on your system.)
Restart after doing this.
3. Re-Enable virus scanning and find out why it so heavy on your resources. A properly configured system shouldn't have any major issues (unless you have 100'000 mails a day on underpowered hardware). Make sure you have postfix reject as much rogue mail as possible, before it even hits the content filter.
(There are plenty of threads on this around).
Alex

Similar Messages

  • My iPod touch is permanently disabled and it says to connect my iPod to my iTunes yet when I do that, it tells me to type in pass code even though it's still disabled. i cant go to DFU mode cause my home button is broken PLEASE HELP ME GOD I MISS MY IPOD

    My iPod touch is permanently disabled and it says to connect my iPod to my iTunes yet when I do that, it tells me to type in pass code even though it's still disabled. i cant go to DFU mode cause my home button is broken PLEASE HELP ME GOD I MISS MY IPOD TOUCH PLEASE :'((

    i cant do that sir ,my ipod touch 4g keeps rebooting and rebooting all over again until the battery is empty HELP GUYS PLEASE

  • My iPod touch is permanently disabled and it says to connect my iPod to my iTunes yet when I do that, it tells me to type in pass code even though it's still disabled. PLEASE HELP ME

    My iPod touch is permanently disabled and it says to connect my iPod to my iTunes yet when I do that, it tells me to type in pass code even though it's still disabled. PLEASE HELP ME

    I have the same problem with mine... but im trying to find a way to fix it without restoring it...
    but one fix is to shut it down completely ... then press and hold BOTH the power button and the home button .. hold both of those 4 ten seconds .. then release the power button but still hold down the home button .. and then it'll show something that says "connect to itunes" once u get it connected to itunes , click the restore button ... BEWARE THIS WILL WIPE OUT EVERYTHING ON YOUR IPOD!!! IT WILL RESTORE IT BACK TO FACTORY SETTINGS , AS IF U JUST BOUGHT IT !!!!! then it should work fine again .. but u will lose all data on there besides the things you have synced with itunes already..
    Thats y im iffy with doing this , im trying to find a fix where i wont have 2 restore it but i dont think there is 1 :'(
    good luck tho
    ~sam

  • Can i access the numpad again even though my iphone is disabled?

    Hi everyone!
    I have an iphone 3gs that i haven't used in a while and it says "iphone is disabled. Connect to iTunes". My mom had tried to unlock it multiple times and got it to this point. I know the password, is there any way i can access the numpad again  because i do not want to restore it.
    & when i connect it to itunes, it doenst do anyhting but say that my computer cant access it due to it being locked.
    & since its been a while, i do not have my original computer i set it up with as it had a motherboard failure about 4 months ago.
    & No, this is not a stolen iphone as i know the password, and i do have all the original packaging (just throwing this out there)
    In short:
    can i access the numpad again even though its disabled?
    Thanks!
    Jordan
    Message was edited by: j0rdann - for title change

    If it doens't say try again in x minutes, no.  And since you don't have the computer is was last synced to, you're going to have to restore it.

  • Shockwave Player 12.0.7.148 prompts for an auto update. Even though Auto Update is disabled.

    We have been re-packaging Adobe Shockwave Player 12.0.7.148. Application is prompting to upgrade new version i.e. auto update even though auto update functionality is disabled. Can any one please help in this? When we right click on shockwave frame over an internet page and check the properties, we can see an Autoupdate is supress.
    Thanks for your return.

    Thank you for your reply. Like I said in my post, I have been having this issue since the summer of 2011, when I was still using regular firefox. In fact, I had made the switch to Aurora in the hopes that this would be solved, given the ongoing changes to the update process. Going back to regular Firefox, which seems to be your only suggestion, would therefore not solve my problem, and it would rob me of the opportunity to enjoy and give feedback on other new features.
    In addition, like I said in my original post, I have tried several of the most common ways of dealing with such issues, to no avail. After an extensive search, I also couldn't find anybody else with this bug. That is why I turned to this support forum. If you know of a way this problem could be solved, I would very much appreciate it.

  • Account Lockout repeatedly, even though lockout policy is disabled

    I have a remote user who's domain account keeps getting locked out, and I'm completely stumped. Due to the lockout issues, we have disabled the domain lockout policy, and use the soft lockout function available in forefront TMG. This is working for everyone
    but the 1 user.
    On the DC that is locking the account, I see the event ID 4740 in the security logs. What makes ZERO sense is the Caller Compuer shows has her workstation. Her workstation is a surface pro, which is not on a VPN. So it has no connection to the domain controller.
    When users that are connecting through TMG were getting locked out, the Caller Computer showed as the TMG machine.
    I have gone through and cleared any saved credentials from the Credential manager on the workstation, yet the account is still getting locked out.
    So why is this account getting locked out even though the lockout policy is disabled. And how is it showing the users workstation as the caller computer, when it has no direct connection to any domain controllers?

    Try looking at the local policy on the Surface Pro machine.  It sounds like the policy is being applied from the local machine itself.
    http://www.sevenforums.com/tutorials/3652-local-group-policy-editor-open.html
    Paul Bergson
    MVP - Directory Services
    MCITP: Enterprise Administrator
    MCTS, MCT, MCSE, MCSA, Security, BS CSci
    2012, 2008, Vista, 2003, 2000 (Early Achiever), NT4
    Twitter @pbbergs http://blogs.dirteam.com/blogs/paulbergson
    Please no e-mails, any questions should be posted in the NewsGroup.
    This posting is provided AS IS with no warranties, and confers no rights.
    This could be the issue, as the machine is remote and hasn't updated the GPO with a DC since before it was disabled. I thought the DC is what disabled the account, and stopped authenticating the user. So even if the GPO existed on the client machine, it
    still wouldn't be disabled.
    But how is it even getting to the DC that the account is disabled? The DCs have no access to the internet, and the client has no VPN to the DC.
    Local policy can have lockout set which could have come from the domain policy.
    Paul Bergson
    MVP - Directory Services
    MCITP: Enterprise Administrator
    MCTS, MCT, MCSE, MCSA, Security, BS CSci
    2012, 2008, Vista, 2003, 2000 (Early Achiever), NT4
    Twitter @pbbergs http://blogs.dirteam.com/blogs/paulbergson
    Please no e-mails, any questions should be posted in the NewsGroup.
    This posting is provided AS IS with no warranties, and confers no rights.

  • Im having a hard time getting AE to run even though I know it should

    Hey guys,  Ive been starting to try and get into using after effects. I have put lots of stuff together in premiere pro and want to add some effects but i can hardly get it to even playback the file in the preview window, won't even scrub through hardly.
    Premiere pro cs6 runs smooth and renders out iin good time.
    My system specs are:
    I have changed a few settings while playing around as per some pages I found on here about ram allocation and CPU stuff heres thos settings.
    Im kind of at a loss with what else to do... Any thought are appreciated, I have a ssd on the way but Im not sure It will make all that much of a difference
    Thanks
    Elliott

    "...i can hardly get it to even playback the file in the preview window, won't even scrub through hardly.  Premiere pro cs6 runs smooth and renders out iin good time."
    I hope you don't expect AE to work like Premiere.  It doesn't. 
    There's nothing wrong with your machine or with your software that's immediately apparent, either.
    Premiere does one thing, AE does something else.  They don't work the same.  You don't use them the same way.  AE is a totally different application than Premiere, and just like Premiere, you have to begin at the beginning if you want to learn it.  People who try to use AE intuitively end up failing about 90% of the time.
    So here's a good place to start.
    I STRONGLY recommend you use it and you don't blow it off.  If you do, you're only hurting yourself.  Seriously. 
    I don't care how good you think you are, you'll miss some important detail vital to using AE, and your work will come to a grinding halt.

  • I downloaded firefox,i cant get it to open, yet when i tried to delete it, windows explorer says firefox is running, even though i have no internet on

    i was at a hotel using wireless, but suddenly my computer shut down, saying something about a blue screen, when i turned it back on, it wouldnt fully load the games i play on facebook, so i tried a lot of things, then i downloaded mozzilla, nothing happens when i click on it so i tried to delete it but my computer says its running and i have to close it first, but i cant cos i cant get it to open!!!!!!!

    Many thanks for responding. Your suggestion led me to this website:
    https://support.mozilla.com/en-US/kb/Firefox%20is%20already%20running%20but%20is%20not%20responding
    which infers the problem exists and seems to confirm the only way is to restart the machine.
    Not being computer literate I cannot tell whether or not you can get around the 'lock/unlock' problem! What I need is an easy 'fix' but there does not appear to be one!!
    Thanks for trying!
    Cheers
    Mike Barker

  • Everytime I close Firefox and then try to reopen it, it says that I am unable to do so as Firefox is already running (even though it's closed) and I have to restart my laptop all the time.

    For about a week now when I have closed Firefox down then I try to reopen it the screen message states that Firefox is already running and I have to restart my laptop every time. This is becoming very frustrating and time-consuming.

    I have the same problem on my notebook but I don't restart. Just do the control, alt, delete and bring up your task manager. Then scroll down to Firefox, end process and close. Now you should be able to restart FF. Not a fix but better than having to restart your laptop.

  • GP Process is Running even though Callable Object Encountered Error

    Hi Everyone,
    I am experiencing an interesting issue working with GP right now and it bothers me.
    I have created a process that includes a sequential block with a few actions including an action that sends out an Adobe form. I noticed during testing that even if the callable objects encountered technical exception (found in the logs), the process itself is not marked as erroneous. This bothers me because I'd like to see the process marked as erroneous if the callable object has errors.
    Has any one experienced this? Is this the "expected" behaviour? I am on SP18 ... is this fixed in a later support package stack?
    Thanks for any input.
    Robert

    Hi Everyone,
    I am experiencing an interesting issue working with GP right now and it bothers me.
    I have created a process that includes a sequential block with a few actions including an action that sends out an Adobe form. I noticed during testing that even if the callable objects encountered technical exception (found in the logs), the process itself is not marked as erroneous. This bothers me because I'd like to see the process marked as erroneous if the callable object has errors.
    Has any one experienced this? Is this the "expected" behaviour? I am on SP18 ... is this fixed in a later support package stack?
    Thanks for any input.
    Robert

  • Time Machine still running even though it is switched of.

    I just did a fresh install of SL. I have sleeping problems (my MBP that is ☺ ) and in trying to solve this I switched TM of to see if this is he culprit.
    Having done this it just keeps running as if it was switched on. Any suggestions how to fix?

    ChangeAgent wrote:
    Huh? What password? What are you backing-up to? Something on a network?
    yes!
    What?
    And what, exactly, is the message?
    If it's a Time Capsule, your keychain may be corrupted. From Keychain Access, select +Keychain First Aid+ and repair it.
    That setting is not in the /Library/Preferences/com.apple.TimeMachine.plist. It's in one of the +Launch Daemons.+
    oeps! but you said above:
    That sounds like the preferences file is corrupted. Try a "full reset" of Time Machine, per #A4 in Time Machine - Troubleshooting (or use the link in User Tips at the top of this forum).
    Correct. The file there is /Library/Preferences/com.apple.TimeMachine.plist. It has the destination, exclusions, and various other things, but does not contain the interval.
    No such Launch Daemon in /Library/LaunchDaemons
    Also correct. There are four of them, in System/Library/LaunchDaemons. Do NOT fool with them unless you know exactly what you're doing.

  • How can I reset my iphone even though it's completely disabled?

    How can i restart my iphone completely?

    Disabled as in completely unusable or disabled as in a passcode was entered incorrect too many times?
    If the first one, take it to an Apple Store or call Apple Support to get a hardware repair/replacement.
    If the second one: http://support.apple.com/kb/ht1212

  • My event is saying background activities are running even though they aren't- it wont let me import clips to that event or make a multicam clip.  what should i do? ( i had deleted some clips from this event that were elsewhere)

    Some clips somehow showed up in one of my events that belonged elsewhere.  I deleted them from this event.  Now it says background activities are running and wont let me import a file to start a multicam clip.
    Thanks

    Some clips somehow showed up in one of my events that belonged elsewhere.  I deleted them from this event.  Now it says background activities are running and wont let me import a file to start a multicam clip.
    Thanks

  • Firefox is caching old passwords and I can't even get on certain sites now. Even though I have that disabled.

    Help!

    If you have turned off Firefox's password manager feature, then the next thing to try would be to delete cookies for the problem sites.
    While viewing a page on the site, try either:
    * right-click and choose View Page Info > Security > "View Cookies"
    * Tools menu > Page Info > Security > "View Cookies"
    * click the padlock or globe icon in the address bar > More Information > "View Cookies"
    In the dialog that opens, you can remove the site's cookies individually.
    Then try reloading the page and logging in from scratch. Does that help?

  • When I make a connection to any sight the little cirlce, that is the indicator in Windows 7 that it is attempting to connect continues to "run" even after conne

    As I stated the connecting indicator continues to "run", even though I am successfully using the website I am connected to. Is this just an indicator that I am connected or do I have an issue?

    Most USB port do not supply enough current to charge the iPad.

Maybe you are looking for