Clamd and Clamav

[ramorse]

Woke up this morning to have Clamd down on one server and Clamav down on another.

When I try to restart clamd on one using
/scripts/restartsrv_clamdI get:
The system could not find the “/usr/local/cpanel/3rdparty/bin/clamd” binary.

On the other when I try to restart clamav using /scripts/restartsrv_clamav I get:
/scripts/restartsrv_clamav: No such file or directory
I also tried /etc/rc.d/init.d/clamav but I get
/etc/rc.d/init.d/clamav: No such file or directory

 

[ramorse]

Well, that's odd. Now the one server that had clamav down has it up. In spite of what the command line result said. Clamd is still down on the other server, though.

 

[24x7ss]

Try running below command on server to start clamd

/scripts/restartsrv clamd

also you can use /etc/init.d/clamd start command. There is no service like clamav.

 

[ramorse]

As stated I already tried /scripts/restartsrv clamd

I just tried /etc/init.d/clamd start and get
bash: /ect/init.d/clamd: No such file or directory

 

[24x7ss]

It seems that clamd is not present on the server at the moment you have to install clamd on server by using rpm packages.

 

[ramorse]

It doesn't appear in the RPM list in WHM. I have a support ticket in with Cpanel.

 

[24x7ss]

Yes, it is not part of Cpanel/WHM rpm. You can install it manually on any linux machine using repository.

 

[ramorse]

It's been resolved. It was there, and running, apprarently, just not properly symlinked. Cpanel support figured it out and now WHM reports it's fine and the email alerts have stopped. I have no idea why/how the issue was created. Not by any action on our part. It must have been something that came up caused by the Cpanel/WHM update to 11.50.

 

[RobertoD]

I dont know if im getting this same problem but after my box updated to CPanel my clamd service is stoped.

When i try to start it i get this message:

==============================================
server # /etc/init.d/clamd start

Starting Clam AntiVirus Daemon: ERROR: TCP: Cannot bind to [127.0.0.1]:3310: Address already in use

ERROR: LOCAL: Socket file /var/run/clamav/clamd.sock is in use by another process.

[FAILED]
==============================================

If i try to restart it:

/scripts/restartsrv clamd

info [restartsrv_clamd] The system could not find required package 'cpanel-clamav' for service 'clamd'...

Service Error

The “clamd” service is not installed.



Startup Log

Stopping clamd: [ OK ]
==============================================


As far as i know, the service was there and nothing changed.. besides the CPanel update.

 

[ramorse]

You might want to submit a ticket. I had to do that to get this resolved. This is what Cpanel support discovered with my clamd after the update:

This issue should now be resolved. The issue was that, instead of a symlink to /usr/local/cpanel/3rdparty/bin/clamd, /usr/local/sbin/clamd was a separate binary. I moved aside this binary and symlinked /usr/local/sbin/clamd to /usr/local/cpanel/3rdparty/bin/clamd:

 

[RobertoD]

yes thats what i had to do.. they fixed it.. for some reason after the CPanel update it kind of messes with the clamd. Is working now.

 

[ramorse]

It only happened on 1 server, though. Very odd. Glad you got it resolved.

 

[cPanelMichael]

Hello

It's likely this was caused by a third-party installation of ClamAV (e.g. from source or RPM). I am happy to see the issue is now resolved.

Thank you.