clamav keeps failing

sdjl · Post by **sdjl** » 03 Jul 2008, 17:02

Hi there,

Just wondering if you've come across this before.
I enabled logging this morning as it's been happening for a couple of weeks now.
I normally have daily failures. These are the messages just before it fails.

Thu Jul 3 15:53:00 2008 -> SelfCheck: Database modification detected. Forcing reload.
Thu Jul 3 15:53:00 2008 -> Reading databases from /usr/local/share/clamav
Thu Jul 3 15:53:00 2008 -> ERROR: reload db failed: Malformed database
Thu Jul 3 15:53:00 2008 -> Terminating because of a fatal error.
Thu Jul 3 15:53:01 2008 -> Socket file removed.
Thu Jul 3 15:53:01 2008 -> --- Stopped at Thu Jul 3 15:53:01 2008
Thu Jul 3 15:55:05 2008 -> +++ Started at Thu Jul 3 15:55:05 2008

Any idea on where to go with this issue?

David

Post by **Sarah** » 04 Jul 2008, 12:02

Other than these errors, are MailScanner and clamav working correctly? No errors in the maillog? What happens when you type in 'freshclam' at the command prompt?

sdjl · Post by **sdjl** » 04 Jul 2008, 20:20

Hi Sarah,

Thanks for the response.
There are no errors in maillog at the time of those clamav errors, or anywhere else that I can see.
When I run freshclam it updates itself as it should do normally.

ClamAV update process started at Fri Jul 4 20:19:43 2008
main.cld is up to date (version: 47, sigs: 312304, f-level: 31, builder: sven)
Downloading daily-7639.cdiff [100%]
daily.cld updated (version: 7639, sigs: 29784, f-level: 31, builder: guitar)
Database updated (342088 signatures) from database.clamav.net (IP: 65.120.238.2)

Clamav generally fails around 5am, so I'll hold out until then to see if freshclam has helped.

David

sdjl · Post by **sdjl** » 06 Jul 2008, 23:11

Alas. I though freshclam had solved the problem, but it hasn't.
It failed again just after 8am today.

Post by **Sarah** » 07 Jul 2008, 07:31

It's not something we've seen. Perhaps you can find some info or post on the clamav mailing list.
http://www.gossamer-threads.com/lists/clamav/users/