Ikarus AV problem after update to MDaemon 24.53 | MDaemon Technologies Community Forum
  1. Forum
  2. MDaemon
  3. Ikarus AV problem after update to MDaemon 24.53

Ikarus AV problem after update to MDaemon 24.53

  • R

    Hello,

    After update MDaemon from 24.52 --> 24.53 we have problems with Ikarus AV.

    After some time Ikarus reported following errors:

    Fri 2025-04-18 22:09:26.773: ----------
    * INLINE SCANNING ERROR: IKARUS AV error while scanning file d:\mdaemon\queues\temp\md5002000000815.tmp!
    N/A: * Ikarus AV server request error 12030

    then all E-Mails stucks in Local queue. 

    How to fix this issue?

    Best regards,
    Rafał M.

     

    0 likes
  • A

    What do the IKARUS logs show is happening?  They can be found at C:\MDaemon\SecurityPlus\Ikarus\scan.server\log\

    IKARUS AV has its own automatic update system that ensures you are always running the latest version of IKARUS.  Installing a new version of MDaemon does not impact the version of IKARUS.  What version of IKARUS does the update log show you are running?

    It should look something like this:

    autoupdate: 2.7.0, scanserver_w64: 6.3.30.0, ikarust3_w64: 6.4.3.0, t3vdb: 108078

    Can you upload yoru IKARUS logs so we can take a look?  https://mdaemon.sharefile.com/r-rc3922c1eed334d4dbf5e34f0bd04ccd6

    Have you rebooted the server since installing MDaemon 24.5.3? If you have not, please reboot, does the issue continue?

     

     

     

    --
    Arron Caruth

    0 likes
  • R

    @Arron 

    After updte to 24.5.3 we made several restarts, we also try to restore prvious ver. of Ikarus (  resore old exe in D:\MDaemon\SecurityPlus\Ikarus\scan.server\bin  ).

    Server is running on AWS cloud.

    Update log and scan log are uploaded.

     

     

    0 likes
  • A

    Can you also upload the splogfile.log from the \MDaemon\SecurityPlus\Ikarus\scan.server\log\global\ directory?

    What are the specs of the machine you are running on?  

     

    --
    Arron Caruth

    0 likes
  • R

    Hi, 

    I uploaded splogfile.log.
    We have cluster configuration, three servers t3.xlarge/t3.large (Windows Server 2019) - the same issue with Ikarus on all servers (no prblems before update)

    0 likes
  • A

    As I said before, IKARUS has its own automatic update system that ensures you are always running the latest version of IKARUS.  Installing a new version of MDaemon does not impact the version of IKARUS.

    What are the specs of a t3.xlarge and t3.large server?  How much memory do the machines have?  What size ithe processor?  How many cores does it have?

    Has nothing been written to the IKARUS logs since the 18th?  The scanserver.log file only shows 7 minutes of scanning, from 22:14:14 to 22:21:34, is there nothing else in the file? have you altered the scanserver.json file in the Conf directory?  The last 3 entries show files being successfully scanned.  Did it start working?  

    The splogfile.log shows a lot of restarts occurring.  Maybe it was kept updating its components to the latest version after old versions were restored to disk?  While the AV engine is restarting scans can timeout.    

    If you are still having issues please try the following:

    1. Enable Ikarus AV in MDaemon if it is currently disabled.

    2. Open an administrative command prompt.
    3. At the prompt, navigate to this path: \MDaemon\SecurityPlus\Ikarus\scan.server\bin\
    4. Once you are in that folder, run the following five commands, one at a time:
    scanserver_w64.exe -stop
    scanserver_w64.exe -remove
    scanserver_w64.exe -install
    scupdate_w64.exe -update

     

    --
    Arron Caruth

    0 likes
Please login to reply to this topic!

Participants