clamdscan / qscand problem

[vizi0n]

Hi everyone!

First, I would like to thank those who worked on that tutorial on how to setup a working mail server and all, it has been of great use for me!

My server has been up and running for about 2 weeks now and was 100% fine until today.

Here's my little (actually big) problem: . Today it started messing up and taking the whole cpu and make my server go fubar. The only thing that I can do is ping the server, web wont work, mail wont work, ftp neither, ssh wont work... even the serial console wont work unless I do a hard reboot, but then I have about 10 minutes before the load goes back to 100%

After doing a hard reboot, here is what "top" gave me:

PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME COMMAND
378 qscand 0 0 1768 1768 1360 R 4.9 1.3 0:00 perl5.6.1
385 qscand 0 0 856 856 652 R 4.5 0.6 0:00 clamdscan
358 qscand 0 0 5148 5148 656 R 4.4 4.0 0:02 clamdscan
375 qscand 0 0 1872 1872 1440 R 4.4 1.4 0:00 perl5.6.1
367 qscand 0 0 2440 2440 1540 R 4.3 1.9 0:01 perl5.6.1
384 qscand 0 0 1740 1740 1356 R 4.2 1.3 0:00 perl5.6.1
348 qscand 0 0 3668 3668 1652 R 4.1 2.8 0:02 perl5.6.1
346 qscand 0 0 3928 3928 1720 R 4.0 3.0 0:02 perl5.6.1
353 qscand 0 0 3508 3508 1648 R 4.0 2.7 0:02 perl5.6.1
365 qscand 0 0 2512 2512 1568 R 4.0 1.9 0:01 perl5.6.1
342 qscand 0 0 4356 4356 1720 R 3.9 3.4 0:03 perl5.6.1
344 qscand 0 0 3976 3976 1720 R 3.9 3.1 0:02 perl5.6.1
359 qscand 0 0 5120 5120 656 R 3.9 4.0 0:02 clamdscan
360 qscand 0 0 5184 5184 656 R 3.9 4.0 0:02 clamdscan
370 qscand 0 0 2396 2396 1540 R 3.9 1.8 0:01 perl5.6.1
372 qscand 0 0 2168 2168 1508 R 3.9 1.6 0:00 perl5.6.1
362 qscand 0 0 3364 3364 1648 R 3.8 2.6 0:02 perl5.6.1
351 qscand 0 0 3524 3524 1648 R 3.6 2.7 0:02 perl5.6.1
369 qscand 0 0 2348 2348 1532 R 3.6 1.8 0:01 perl5.6.1
388 qscand 0 0 1652 1652 1312 R 3.6 1.2 0:00 perl5.6.1
389 qscand 0 0 1648 1648 1312 R 3.6 1.2 0:00 perl5.6.1
390 qscand 0 0 1624 1624 1312 R 3.2 1.2 0:00 perl5.6.1
392 qscand 0 0 752 752 604 R 2.2 0.5 0:00 clamdscan
340 qscand 0 0 4652 4652 1844 S 1.8 3.6 0:04 perl5.6.1

That is after not even a minute of uptime!

Does anyone know how I could fix that? Because everything is down right now due to that bug!

Thanks

viz

[vizi0n]

after investigation (i finally found out a way to stop all that junk) i have discovered that some stupid @#$%!@#$%!@#$%!@#$%!s used my domain in the From addres of their spam emails and now i'm getting all the stuff thats bouncing from the recipients emails.... I have to remove the anti-virus for now until everything goes back to normal... this really sucks, and i know its not my servers that's open for relay because i just did some tests and it requires a username and password unless the recipient is local.

i have always hated spam, and now i just hate it more.