Yesterday morning we stopped receining mails and I found SF not running (I launch it not as srvc)

After this, log does not report any infected mail, nor eben today, wich is clearly impossible. I upgraded to .522 and forced definition updating but still no virus caught.

I have a lot of mails quaratined because of blacklisted attchment (as .pif) but AV does not trigger.

Any hint?

TIA

MArco

 

Marco,

Your GUI screenshot reports "No Antivirus support files found on server". This usually indicates that the antivirus plugin was not installed correctly. However your logs clearly show that the plugin was working before and catching viruses.

Please find below the procedure to reinstall the plugin, that should solve the problem. We'd like to know "why" this happened to begin with however. If you can, could you please provide us with a directory listing for the SpamFilter directory so we can see the files it contains, along with a listing for SpamFilter\nse\bin directory? We'd need to see filenames, file sizes and file dates. Could you also please provide a registry export for the key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Norman Data Defense Systems]

This is the procedure to reinstall the A/V plugin:


Can you please try to:
 
Stop SpamFilter.
 
Delete the SpamFilter\nse and SpamFilter\nvc directories.
 
In the registry, delete the key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Norman Data Defense Systems]
 
Reinstall the antivirus plugin, ensuring that you select SpamFilter's directory as the default install directory.
 
Start SpamFilter