Community Forums
Connect with us on LinkedIn
Problem with starting ClamAV
  
+ Reply to Thread
Results 1 to 7 of 7
  1. 02-28-2009 01:41 PM #1
    anton_latvia
    anton_latvia is offline
    cPanel Partner NOC cPanel Partner NOC Badge anton_latvia's Avatar
    Join Date
    May 2004
    Posts
    277
    Send a message via Skype™ to anton_latvia

    Default Problem with starting ClamAV

    Hello,
    Suddenly ClamAV does not want to start on one of our servers. It fails during startup with error in the shell:

    Starting clamd: LibClamAV Error: cli_loadmd5: Problem parsing database at line 11703
    LibClamAV Error: Can't load daily.mdb: Malformed database
    LibClamAV Error: cli_tgzload: Can't load daily.mdb
    LibClamAV Error: Can't load /usr/share/clamav/daily.cld: Malformed database
    ERROR: Malformed database

    I tried upgrading, reinstalling ClamAV and few other softwares, but so far with no luck.

    Any ideas, dear community?

    Anton.
    * http://www.aleksandrov.eu/ - just a simple personal homepage.
    Reply With Quote Reply With Quote
  2. 02-28-2009 06:28 PM #2
    AndyReed
    AndyReed is offline
    cPanel Partner NOC cPanel Partner NOC Badge AndyReed's Avatar
    Join Date
    May 2004
    Location
    Minneapolis, MN
    Posts
    2,223

    Default

    Quote Originally Posted by anton_latvia View Post
    Starting clamd: LibClamAV Error: cli_loadmd5: Problem parsing database at line 11703
    LibClamAV Error: Can't load daily.mdb: Malformed database
    LibClamAV Error: cli_tgzload: Can't load daily.mdb
    LibClamAV Error: Can't load /usr/share/clamav/daily.cld: Malformed database
    ERROR: Malformed database
    That means the DBs are corrupted. Do this:
    cd /usr/share/clamav/
    Empty the content of these 3 files:

    Code:
    daily.cvd
main.cld
mirrors.dat
    Then run this command to download fresh copies for your DBs:
    Code:
    /etc/cron.daily/freshclam
    Although this is not necessary, but restart clamd:
    Code:
    /scripts/restartsrv_clamd
    Hope this helps!
    Andy Reed
    RHCE and CCNA
    ServerTune.com
    Reply With Quote Reply With Quote
  3. 03-01-2009 04:45 AM #3
    anton_latvia
    anton_latvia is offline
    cPanel Partner NOC cPanel Partner NOC Badge anton_latvia's Avatar
    Join Date
    May 2004
    Posts
    277
    Send a message via Skype™ to anton_latvia

    Default

    Thanks for help, although to me it seems, that there sort of error at clamav part, here is output of freshclam:

    Code:
    ClamAV update process started at Sun Mar  1 11:29:39 2009
LibClamAV Error: cl_cvdhead: Can't read CVD header in main.cld
Downloading main.cvd [100%]
ERROR: Verification: MD5 verification error
Trying again in 5 secs...
ClamAV update process started at Sun Mar  1 11:30:17 2009
LibClamAV Error: cl_cvdhead: Can't read CVD header in main.cld
Trying host database.clamav.net (212.7.0.71)...
Downloading main.cvd [100%]
main.cvd updated (version: 50, sigs: 500667, f-level: 38, builder: sven)
LibClamAV Error: cl_cvdhead: Can't read CVD header in daily.cld
Downloading daily.cvd [100%]
daily.cvd updated (version: 9059, sigs: 13941, f-level: 38, builder: mcichosz)
Database updated (514608 signatures) from database.clamav.net (IP: 212.7.0.71)
    * http://www.aleksandrov.eu/ - just a simple personal homepage.
    Reply With Quote Reply With Quote
  4. 03-01-2009 05:33 AM #4
    anton_latvia
    anton_latvia is offline
    cPanel Partner NOC cPanel Partner NOC Badge anton_latvia's Avatar
    Join Date
    May 2004
    Posts
    277
    Send a message via Skype™ to anton_latvia

    Default

    Well, it helped to completely delete those 3 files (instead of making them empty) and rerun freshclam.
    * http://www.aleksandrov.eu/ - just a simple personal homepage.
    Reply With Quote Reply With Quote
  5. 03-01-2009 12:23 PM #5
    AndyReed
    AndyReed is offline
    cPanel Partner NOC cPanel Partner NOC Badge AndyReed's Avatar
    Join Date
    May 2004
    Location
    Minneapolis, MN
    Posts
    2,223

    Default

    Quote Originally Posted by anton_latvia View Post
    Well, it helped to completely delete those 3 files (instead of making them empty) and rerun freshclam.
    Sounds good.

    This demonstartes that every server is unique and what works for one server may not work for another. :-)
    Andy Reed
    RHCE and CCNA
    ServerTune.com
    Reply With Quote Reply With Quote
  6. 05-18-2009 07:49 AM #6
    cyexx
    cyexx is offline
    Member
    Join Date
    Sep 2004
    Posts
    64

    Default Just had this Hit

    I just had this hit me and I tried the above suggestions with no change, any ideas?

    Code:
    root@kasei [/usr/share/clamav]# ls
./            honeynet.hdb  malware.db                 MSRBL-SPAM.ndb  scam.ndb          spam.ldb
../           junk.ndb      mirrors.dat                phish.ndb       scam.ndb.gz       spear.ndb
antispam.ndb  lott.ndb      MSRBL-Images-FULL-SoN.hdb  phish.ndb.gz    securiteinfo.hdb  vx.hdb
daily.cld     main.cld      MSRBL-Images.hdb           rogue.hdb       spamimg.hdb
root@kasei [/usr/share/clamav]# rm daily.cld
rm: remove regular file `daily.cld'? y
root@kasei [/usr/share/clamav]# rm main.cld
rm: remove regular file `main.cld'? y
root@kasei [/usr/share/clamav]# rm mirrors.dat
rm: remove regular file `mirrors.dat'? y
root@kasei [/usr/share/clamav]# /usr/local/bin/freshclam
ClamAV update process started at Mon May 18 07:47:40 2009
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.94 Recommended version: 0.95.1
DON'T PANIC! Read http://www.clamav.net/support/faq
Downloading main-49.cdiff [100%]
Downloading main-50.cdiff [100%]
Downloading main-51.cdiff [100%]
main.cld updated (version: 51, sigs: 545035, f-level: 42, builder: sven)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 35, recommended = 42
DON'T PANIC! Read http://www.clamav.net/support/faq
WARNING: getfile: daily-8168.cdiff not found on remote server (IP: 64.142.100.50)
WARNING: getpatch: Can't download daily-8168.cdiff from database.clamav.net
Trying host database.clamav.net (65.120.238.5)...
WARNING: getfile: daily-8168.cdiff not found on remote server (IP: 65.120.238.5)
WARNING: getpatch: Can't download daily-8168.cdiff from database.clamav.net
Trying host database.clamav.net (65.120.238.5)...
WARNING: getfile: daily-8168.cdiff not found on remote server (IP: 65.120.238.5)
WARNING: getpatch: Can't download daily-8168.cdiff from database.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Trying host database.clamav.net (65.120.238.5)...
Downloading daily.cvd [100%]
daily.cvd updated (version: 9366, sigs: 5454, f-level: 42, builder: ccordes)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 35, recommended = 42
DON'T PANIC! Read http://www.clamav.net/support/faq
Database updated (550489 signatures) from database.clamav.net (IP: 65.120.238.5)
root@kasei [/usr/share/clamav]# /scripts/restartsrv_clamd
clamd: no process killed
clamd: no process killed
LibClamAV Error: Malformed pattern line 1
LibClamAV Error: Problem parsing database at line 1
LibClamAV Error: Can't load /usr/share/clamav/malware.db: Malformed database
ERROR: Malformed database
root@kasei [/usr/share/clamav]#
    Reply With Quote Reply With Quote
  7. 05-18-2009 02:28 PM #7
    cPanelDavidG
    cPanelDavidG is offline
    Technical Product Specialist cPanelDavidG's Avatar
    Join Date
    Nov 2006
    Location
    Houston, TX
    Posts
    11,189
    cPanel/Enkompass Access Level

    Root Administrator

    Default

    Quote Originally Posted by cyexx View Post
    I just had this hit me and I tried the above suggestions with no change, any ideas?

    Code:
    root@kasei [/usr/share/clamav]# ls
./            honeynet.hdb  malware.db                 MSRBL-SPAM.ndb  scam.ndb          spam.ldb
../           junk.ndb      mirrors.dat                phish.ndb       scam.ndb.gz       spear.ndb
antispam.ndb  lott.ndb      MSRBL-Images-FULL-SoN.hdb  phish.ndb.gz    securiteinfo.hdb  vx.hdb
daily.cld     main.cld      MSRBL-Images.hdb           rogue.hdb       spamimg.hdb
root@kasei [/usr/share/clamav]# rm daily.cld
rm: remove regular file `daily.cld'? y
root@kasei [/usr/share/clamav]# rm main.cld
rm: remove regular file `main.cld'? y
root@kasei [/usr/share/clamav]# rm mirrors.dat
rm: remove regular file `mirrors.dat'? y
root@kasei [/usr/share/clamav]# /usr/local/bin/freshclam
ClamAV update process started at Mon May 18 07:47:40 2009
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.94 Recommended version: 0.95.1
DON'T PANIC! Read http://www.clamav.net/support/faq
Downloading main-49.cdiff [100%]
Downloading main-50.cdiff [100%]
Downloading main-51.cdiff [100%]
main.cld updated (version: 51, sigs: 545035, f-level: 42, builder: sven)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 35, recommended = 42
DON'T PANIC! Read http://www.clamav.net/support/faq
WARNING: getfile: daily-8168.cdiff not found on remote server (IP: 64.142.100.50)
WARNING: getpatch: Can't download daily-8168.cdiff from database.clamav.net
Trying host database.clamav.net (65.120.238.5)...
WARNING: getfile: daily-8168.cdiff not found on remote server (IP: 65.120.238.5)
WARNING: getpatch: Can't download daily-8168.cdiff from database.clamav.net
Trying host database.clamav.net (65.120.238.5)...
WARNING: getfile: daily-8168.cdiff not found on remote server (IP: 65.120.238.5)
WARNING: getpatch: Can't download daily-8168.cdiff from database.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Trying host database.clamav.net (65.120.238.5)...
Downloading daily.cvd [100%]
daily.cvd updated (version: 9366, sigs: 5454, f-level: 42, builder: ccordes)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 35, recommended = 42
DON'T PANIC! Read http://www.clamav.net/support/faq
Database updated (550489 signatures) from database.clamav.net (IP: 65.120.238.5)
root@kasei [/usr/share/clamav]# /scripts/restartsrv_clamd
clamd: no process killed
clamd: no process killed
LibClamAV Error: Malformed pattern line 1
LibClamAV Error: Problem parsing database at line 1
LibClamAV Error: Can't load /usr/share/clamav/malware.db: Malformed database
ERROR: Malformed database
root@kasei [/usr/share/clamav]#
    Try uninstalling then re-installing ClamAv via WHM's Plugin section by un-checking the "ClamAV Connector" then clicking "save" then going back to that page and checking it to re-install ClamAV.
    Reply With Quote Reply With Quote
«   SPF vs Mail Forward (maybe a suggestion to cPanel/Exim?) | Rename e-mail account »     
Similar Threads & Tags
Similar threads

  1. Problem with ClamAV
    By amedeods in forum cPanel and WHM Discussions
    Replies: 6
    Last Post: 11-02-2010, 08:25 AM
  2. clamav plugin: Starting clamd: ERROR: Please define server type (local and/or TCP).
    By boatdesign in forum cPanel and WHM Discussions
    Replies: 2
    Last Post: 03-16-2010, 08:22 AM
  3. getfile: Can't write 1448 bytes to /usr/share/clamav/clamav-917a563483a6171fe02eac005
    By constantine in forum cPanel Developers
    Replies: 10
    Last Post: 07-29-2009, 01:51 PM
  4. ClamAV problem?
    By douglatz in forum cPanel Developers
    Replies: 1
    Last Post: 07-10-2008, 03:09 AM
  5. Problem with clamav
    By strauberry in forum cPanel and WHM Discussions
    Replies: 5
    Last Post: 09-16-2003, 06:50 AM
Linkedin       Facebook       Twitter       RSS       Flickr       YouTube