[CentOS] Clamd issues on Centos 6.10

Sat Jul 14 22:13:59 UTC 2018
Jay Hart <jhart at kevla.org>

Hello all,

Been having an issue today that I can't seem to solve, so reaching out to others much more
knowledgeable for help/advice/assistance.

I ran the software update this morning and installed 134 packages, clamd was one of the packages.
Upon completion of the update, I needed to reboot the box.  During bootup I got the following
issue:

Starting Clam AntiVirus Daemon: WARNING: Ignoring deprecated option
AllowSupplementaryGroups at line  194
LibClamAV Error: cli_cvdload: Corrupted CVD header
LibClamAV Error: Can't load /var/lib/clamav/main.cvd: Malformed database
LibClamAV Error: cli_loaddbdir(): error loading database /var/lib/clamav/main.cvd
Sat Jul 14 09:04:46 2018 -> !Malformed database
                                                           [FAILED]

Clamd failed to start.

I modified the clamd.conf conf file to comment out the deprecated option above, this seemed to
allow clamd to start following a second reboot.

I followed some suggested actions from the clamd.net site, namely I ensured my DNS was still
working, that I could reach clamd.net, and also removed the mirrors.dat and main.cvd files in an
effort to get clamd to update via freshclam.

When I run 'freshclam -v' I get the following data return:

[root at centos clamav]# freshclam -v
Current working dir is /var/lib/clamav
Max retries == 3
ClamAV update process started at Sat Jul 14 15:09:47 2018
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 1611
Software version from DNS: 0.100.1
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.100.0 Recommended version: 0.100.1
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav Retrieving
http://db.local.clamav.net/main.cvd
Ignoring mirror 2400:cb00:2048:1::6810:b98a (due to previous errors) Ignoring mirror
2400:cb00:2048:1::6810:bd8a (due to previous errors) Ignoring mirror
2400:cb00:2048:1::6810:bc8a
(due to previous errors) Ignoring mirror 2400:cb00:2048:1::6810:ba8a (due to
previous errors)
Ignoring mirror 2400:cb00:2048:1::6810:bb8a (due to previous errors) Trying to download
http://db.local.clamav.net/main.cvd (IP: 104.16.186.138) Downloading main.cvd [100%]
WARNING: [LibClamAV] cli_cvdload: Corrupted CVD header
ERROR: Verification: Malformed database
Querying main.0.91.0.0.6810BA8A.ping.clamav.net
Trying again in 5 secs...
ClamAV update process started at Sat Jul 14 15:10:09 2018
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 1583
Software version from DNS: 0.100.1
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.100.0 Recommended version: 0.100.1
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav Retrieving
http://db.local.clamav.net/main.cvd
Trying to download http://db.local.clamav.net/main.cvd (IP: 104.16.188.138)
Downloading main.cvd
[100%]
WARNING: [LibClamAV] cli_cvdload: Corrupted CVD header
ERROR: Verification: Malformed database
Querying main.0.91.0.0.6810BC8A.ping.clamav.net
Trying again in 5 secs...
ClamAV update process started at Sat Jul 14 15:10:31 2018
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 1567
Software version from DNS: 0.100.1
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.100.0 Recommended version: 0.100.1
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav Retrieving
http://db.local.clamav.net/main.cvd
Trying to download http://db.local.clamav.net/main.cvd (IP: 104.16.189.138)
Downloading main.cvd
[100%]
WARNING: [LibClamAV] cli_cvdload: Corrupted CVD header
ERROR: Verification: Malformed database
Querying main.0.91.0.0.6810BD8A.ping.clamav.net
Giving up on db.local.clamav.net...
ClamAV update process started at Sat Jul 14 15:10:48 2018
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 1232
Software version from DNS: 0.100.1
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.100.0 Recommended version: 0.100.1
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav Retrieving
http://db.local.clamav.net/main.cvd
Trying to download http://db.local.clamav.net/main.cvd (IP: 104.16.189.138)
Downloading main.cvd
[100%]
WARNING: [LibClamAV] cli_cvdload: Corrupted CVD header
ERROR: Verification: Malformed database
Querying main.0.91.0.0.6810BD8A.ping.clamav.net
Giving up on db.local.clamav.net...
Update failed. Your network may be down or none of the mirrors listed in
/etc/freshclam.conf is
working. Check https://www.clamav.net/documents/official-mirror-faq for possible
reasons.
----END Freshclam -v command-----

My 0.100.0 version is currently supported, so I know that is not the issue. I tried deleting the
mirrors,dat file and re-running freshclam (did not reboot the box between file deletion and
command line execution), no effect...

Also, I have the default mirror location in freshclam.conf, which seems to be fine considering its
been like this for years. I tried to locate the 'country code' paramater but gave that up after I
got a headache looking over the documentation.  I don't think its relevant to this issue anyway.

I'm stuck on how to fix this. Nothing on the web shows what resolution is, nor how to fix it.

Seems like I can get and receive emails, but I have no idea if they are being properly scanned.

Thanks in advance,

Jay