Hello all,
Been having an issue today that I can't seem to solve, so reaching out to others much more knowledgeable for help/advice/assistance.
I ran the software update this morning and installed 134 packages, clamd was one of the packages. Upon completion of the update, I needed to reboot the box. During bootup I got the following issue:
Starting Clam AntiVirus Daemon: WARNING: Ignoring deprecated option AllowSupplementaryGroups at line 194 LibClamAV Error: cli_cvdload: Corrupted CVD header LibClamAV Error: Can't load /var/lib/clamav/main.cvd: Malformed database LibClamAV Error: cli_loaddbdir(): error loading database /var/lib/clamav/main.cvd Sat Jul 14 09:04:46 2018 -> !Malformed database [FAILED]
Clamd failed to start.
I modified the clamd.conf conf file to comment out the deprecated option above, this seemed to allow clamd to start following a second reboot.
I followed some suggested actions from the clamd.net site, namely I ensured my DNS was still working, that I could reach clamd.net, and also removed the mirrors.dat and main.cvd files in an effort to get clamd to update via freshclam.
When I run 'freshclam -v' I get the following data return:
[root@centos clamav]# freshclam -v Current working dir is /var/lib/clamav Max retries == 3 ClamAV update process started at Sat Jul 14 15:09:47 2018 Using IPv6 aware code Querying current.cvd.clamav.net TTL: 1611 Software version from DNS: 0.100.1 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.100.0 Recommended version: 0.100.1 DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav Retrieving http://db.local.clamav.net/main.cvd Ignoring mirror 2400:cb00:2048:1::6810:b98a (due to previous errors) Ignoring mirror 2400:cb00:2048:1::6810:bd8a (due to previous errors) Ignoring mirror 2400:cb00:2048:1::6810:bc8a (due to previous errors) Ignoring mirror 2400:cb00:2048:1::6810:ba8a (due to previous errors) Ignoring mirror 2400:cb00:2048:1::6810:bb8a (due to previous errors) Trying to download http://db.local.clamav.net/main.cvd (IP: 104.16.186.138) Downloading main.cvd [100%] WARNING: [LibClamAV] cli_cvdload: Corrupted CVD header ERROR: Verification: Malformed database Querying main.0.91.0.0.6810BA8A.ping.clamav.net Trying again in 5 secs... ClamAV update process started at Sat Jul 14 15:10:09 2018 Using IPv6 aware code Querying current.cvd.clamav.net TTL: 1583 Software version from DNS: 0.100.1 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.100.0 Recommended version: 0.100.1 DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav Retrieving http://db.local.clamav.net/main.cvd Trying to download http://db.local.clamav.net/main.cvd (IP: 104.16.188.138) Downloading main.cvd [100%] WARNING: [LibClamAV] cli_cvdload: Corrupted CVD header ERROR: Verification: Malformed database Querying main.0.91.0.0.6810BC8A.ping.clamav.net Trying again in 5 secs... ClamAV update process started at Sat Jul 14 15:10:31 2018 Using IPv6 aware code Querying current.cvd.clamav.net TTL: 1567 Software version from DNS: 0.100.1 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.100.0 Recommended version: 0.100.1 DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav Retrieving http://db.local.clamav.net/main.cvd Trying to download http://db.local.clamav.net/main.cvd (IP: 104.16.189.138) Downloading main.cvd [100%] WARNING: [LibClamAV] cli_cvdload: Corrupted CVD header ERROR: Verification: Malformed database Querying main.0.91.0.0.6810BD8A.ping.clamav.net Giving up on db.local.clamav.net... ClamAV update process started at Sat Jul 14 15:10:48 2018 Using IPv6 aware code Querying current.cvd.clamav.net TTL: 1232 Software version from DNS: 0.100.1 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.100.0 Recommended version: 0.100.1 DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav Retrieving http://db.local.clamav.net/main.cvd Trying to download http://db.local.clamav.net/main.cvd (IP: 104.16.189.138) Downloading main.cvd [100%] WARNING: [LibClamAV] cli_cvdload: Corrupted CVD header ERROR: Verification: Malformed database Querying main.0.91.0.0.6810BD8A.ping.clamav.net Giving up on db.local.clamav.net... Update failed. Your network may be down or none of the mirrors listed in /etc/freshclam.conf is working. Check https://www.clamav.net/documents/official-mirror-faq for possible reasons. ----END Freshclam -v command-----
My 0.100.0 version is currently supported, so I know that is not the issue. I tried deleting the mirrors,dat file and re-running freshclam (did not reboot the box between file deletion and command line execution), no effect...
Also, I have the default mirror location in freshclam.conf, which seems to be fine considering its been like this for years. I tried to locate the 'country code' paramater but gave that up after I got a headache looking over the documentation. I don't think its relevant to this issue anyway.
I'm stuck on how to fix this. Nothing on the web shows what resolution is, nor how to fix it.
Seems like I can get and receive emails, but I have no idea if they are being properly scanned.
Thanks in advance,
Jay