HELP: clamav causing cpu overload

[goodmove]

Chirpy, do I still need to update the clamscan (latest version 0.72) if using the Clamav module in Mailscanner?

 

[chirpy]

Yes.

The Mail::ClamAV is just a different interface to the clamav libraries, so you still need to keep the virus definitions up to date.

 

[I-Web]

I have the same issue...... clamav is sending the load loopy, but i dont use mail scanner............ any suggestions?

edit:: forgot to say im using exiscan from here http://forums.cpanel.net/showthread.php?s=&threadid=24541&highlight=install+cpanel

 

[khoonchee]

I have the same issue...... clamav is sending the load loopy, but i dont use mail scanner............ any suggestions?

edit:: forgot to say im using exiscan from here http://forums.cpanel.net/showthread.php?s=&threadid=24541&highlight=install+cpanel

I also notice some of the servers who have the exiscan + clamavconnector installed in the WHM is using lots of cpu usage on the server. The exim_mainlog and exim_rejectlog does not shows any large amount of viruses reaching our server. any tweak that can be done ?

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
4093 root 16 0 44820 8828 996 S 24.4 0.4 16:01.77 clamd
13477 cpanel 15 0 11280 6112 2260 S 15.0 0.3 0:00.16 php

 

[jackie46]

I tried using the clamavmodule in MailScanner but i had to set MS back to clamav even though i have upgraded all the perl modules. When its set to clamavmodule maillog is complaining that it cannot find the perl module. I have installed the modules two or three times and it still complaining. I would like to use clamavmodule for better performance.

Apr 6 11:31:09 secure MailScanner[3955]: ClamAV Perl module not found, did you install it?

Don't know how many times i installed it already!

Did the following;

Do the following:
perl -MCPAN -e shell
install Parse::RecDescent
install Inline
install Mail::ClamAV
In MailScanner.conf, set 'Virus Scanners = clamavmodule'

Not resolved.

Even did this multiple times

/scripts/perlinstaller /scripts/perlinstaller Net::CIDR Archive::Zip Compress::Zlib Convert::BinHex Inline::C

No go!

 

[chirpy]

Check /usr/local/bin/perl and make sure it is a symlink to /usr/bin/perl - just to make sure that the server isn't referencing two different versions of perl.

 

[jackie46]

Yes, it is.

lrwxrwxrwx 1 root root 13 Mar 27 18:45 perl -> /usr/bin/perl

 

[chirpy]

Odd. I have seen it happen before, but only where there have been numerous versions of perl installed and cleaning out the old ones and then running through /scripts/rpmup and then rerunning the MailScanner install (to upgrade it and thus updating the perl modules again) then reinstalled the Mail::ClamAV module usually fixes it once and for all.

If that doesn't get things working, feel free to contact me off board and I'd be happy to take a look for you.

 

[gopihere]

Hey chirpy and jackie46,

Is this issue fixed? In our servers also, the same thing is happening..
=========
1510 root 18 0 168m 101m 1180 S 0 1.2 0:14.65 /usr/sbin/clamd
4519 mailman 18 0 44012 38m 2504 S 0 0.5 0:08.39 /usr/bin/python2.4 /usr/local/cpanel/3rdparty/mailman/bin/qrun
17485 root 16 0 33632 30m 2264 S 0 0.4 0:20.92 spamd child
18180 root 16 0 30212 27m 2220 S 0 0.3 0:01.29 spamd child
================
Usage varies from low to high always..Clamd will be in the top position always when try "top" command. But server is not having any spam attack also. Please help..

 

[Tina]

I see this is an old thread with only one recent post but the server is having issues with clamd now too. It makes the server unreachable at least 8 times a day. Any suggestions?

cPanel 11.24.4-C33868 - WHM 11.24.2 - X 3.9
CENTOS 4.7 i686 on xen

csf: v4.40

MailScanner - v4.74.16 installed
ConfigServer MailScanner Script - v2.73 installed and up to date
ClamAV - v0.94.2 installed and up to date
MailScanner Front-End - v4.27 installed and up to date