Recent ClamAV update

cyrus · May 23, 2016, 6:06am

I updated the recent ClamAV update and cannot restart the server from the Virtualmin control panel.

/var/log/messages shows the following:

May 23 00:49:32 host yum[13797]: Updated: clamav-filesystem-0.99.2-2.el7.centos.vm.noarch May 23 00:49:34 host yum[13797]: Updated: clamav-data-0.99.2-2.el7.centos.vm.noarch May 23 00:49:36 host yum[13797]: Updated: clamav-lib-0.99.2-2.el7.centos.vm.x86_64 May 23 00:49:37 host yum[13797]: Updated: clamav-server-0.99.2-2.el7.centos.vm.x86_64 May 23 00:49:38 host yum[13797]: Updated: clamav-server-systemd-0.99.2-2.el7.centos.vm.noarch May 23 00:49:38 host yum[13797]: Updated: clamav-scanner-systemd-0.99.2-2.el7.centos.vm.noarch May 23 00:49:39 host yum[13797]: Updated: clamav-scanner-0.99.2-2.el7.centos.vm.noarch May 23 00:49:40 host yum[13797]: Updated: clamav-server-sysvinit-0.99.2-2.el7.centos.vm.noarch May 23 00:49:41 host yum[13797]: Updated: clamav-update-0.99.2-2.el7.centos.vm.x86_64 May 23 00:49:43 host yum[13797]: Updated: clamav-0.99.2-2.el7.centos.vm.x86_64 May 23 00:49:45 host systemd: Reloading. May 23 00:49:47 host systemd: Configuration file /usr/lib/systemd/system/auditd.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway. May 23 00:49:47 host systemd: Configuration file /usr/lib/systemd/system/ebtables.service is marked executable. Please remove executable permission bits. Proceeding anyway. May 23 00:49:47 host systemd: Configuration file /usr/lib/systemd/system/wpa_supplicant.service is marked executable. Please remove executable permission bits. Proceeding anyway. May 23 00:49:47 host systemd: Stopping Generic clamav scanner daemon… May 23 00:49:48 host clamd: — Stopped at Mon May 23 00:49:48 2016 May 23 00:49:48 host clamd[3382]: — Stopped at Mon May 23 00:49:48 2016 May 23 00:49:48 host clamd[3382]: Socket file removed. May 23 00:49:48 host clamd: Socket file removed. May 23 00:49:48 host systemd: Started Generic clamav scanner daemon. May 23 00:49:48 host systemd: Starting Generic clamav scanner daemon… May 23 00:49:49 host clamd[13836]: Received 0 file descriptor(s) from systemd. May 23 00:49:49 host clamd[13836]: clamd daemon 0.99.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) May 23 00:49:49 host clamd[13836]: Running as user clamscan (UID 993, GID 993) May 23 00:49:49 host clamd[13836]: Log file size limited to 1048576 bytes. May 23 00:49:49 host clamd[13836]: Reading databases from /var/lib/clamav May 23 00:49:49 host clamd[13836]: Not loading PUA signatures. May 23 00:49:49 host clamd[13836]: Bytecode: Security mode set to “TrustSigned”. May 23 00:49:50 host clamd: LibClamAV Error: Can’t load /var/lib/clamav/main.cvd: Can’t verify database integrity May 23 00:49:50 host clamd[13836]: Can’t verify database integrity May 23 00:49:50 host clamd: LibClamAV Error: cli_loaddbdir(): error loading database /var/lib/clamav/main.cvd May 23 00:49:50 host clamd: ERROR: Can’t verify database integrity May 23 00:49:50 host systemd: clamd@scan.service: main process exited, code=exited, status=1/FAILURE May 23 00:49:50 host systemd: Unit clamd@scan.service entered failed state. May 23 00:49:50 host systemd: clamd@scan.service failed. May 23 00:49:50 host systemd: Reloading. May 23 00:49:50 host systemd: Configuration file /usr/lib/systemd/system/auditd.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway. May 23 00:49:50 host systemd: Configuration file /usr/lib/systemd/system/ebtables.service is marked executable. Please remove executable permission bits. Proceeding anyway. May 23 00:49:50 host systemd: Configuration file /usr/lib/systemd/system/wpa_supplicant.service is marked executable. Please remove executable permission bits. Proceeding anyway. May 23 00:49:50 host systemd: clamd@scan.service holdoff time over, scheduling restart. May 23 00:49:50 host systemd: Started Generic clamav scanner daemon. May 23 00:49:50 host systemd: Starting Generic clamav scanner daemon… May 23 00:49:50 host clamd[13857]: Received 0 file descriptor(s) from systemd. May 23 00:49:50 host clamd[13857]: clamd daemon 0.99.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) May 23 00:49:50 host clamd[13857]: Running as user clamscan (UID 993, GID 993) May 23 00:49:50 host clamd[13857]: Log file size limited to 1048576 bytes. May 23 00:49:50 host clamd[13857]: Reading databases from /var/lib/clamav May 23 00:49:50 host clamd[13857]: Not loading PUA signatures. May 23 00:49:50 host clamd[13857]: Bytecode: Security mode set to “TrustSigned”. May 23 00:49:51 host clamd: LibClamAV Error: Can’t load /var/lib/clamav/main.cvd: Can’t verify database integrity May 23 00:49:51 host clamd[13857]: Can’t verify database integrity May 23 00:49:51 host clamd: LibClamAV Error: cli_loaddbdir(): error loading database /var/lib/clamav/main.cvd May 23 00:49:51 host clamd: ERROR: Can’t verify database integrity May 23 00:49:51 host systemd: clamd@scan.service: main process exited, code=exited, status=1/FAILURE May 23 00:49:51 host systemd: Unit clamd@scan.service entered failed state. May 23 00:49:51 host systemd: clamd@scan.service failed. May 23 00:49:51 host systemd: clamd@scan.service holdoff time over, scheduling restart. May 23 00:49:51 host systemd: Started Generic clamav scanner daemon. May 23 00:49:51 host systemd: Starting Generic clamav scanner daemon… May 23 00:49:51 host clamd[13862]: Received 0 file descriptor(s) from systemd. May 23 00:49:51 host clamd[13862]: clamd daemon 0.99.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) May 23 00:49:51 host clamd[13862]: Running as user clamscan (UID 993, GID 993) May 23 00:49:51 host clamd[13862]: Log file size limited to 1048576 bytes. May 23 00:49:51 host clamd[13862]: Reading databases from /var/lib/clamav May 23 00:49:51 host clamd[13862]: Not loading PUA signatures. May 23 00:49:51 host clamd[13862]: Bytecode: Security mode set to “TrustSigned”. May 23 00:49:51 host clamd: LibClamAV Error: Can’t load /var/lib/clamav/main.cvd: Can’t verify database integrity May 23 00:49:51 host clamd[13862]: Can’t verify database integrity May 23 00:49:51 host clamd: LibClamAV Error: cli_loaddbdir(): error loading database /var/lib/clamav/main.cvd May 23 00:49:51 host clamd: ERROR: Can’t verify database integrity May 23 00:49:51 host systemd: clamd@scan.service: main process exited, code=exited, status=1/FAILURE May 23 00:49:51 host systemd: Unit clamd@scan.service entered failed state. May 23 00:49:51 host systemd: clamd@scan.service failed. May 23 00:49:52 host systemd: clamd@scan.service holdoff time over, scheduling restart. May 23 00:49:52 host systemd: Started Generic clamav scanner daemon. May 23 00:49:52 host systemd: Starting Generic clamav scanner daemon… May 23 00:49:52 host clamd[13868]: Received 0 file descriptor(s) from systemd. May 23 00:49:52 host clamd[13868]: clamd daemon 0.99.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) May 23 00:49:52 host clamd[13868]: Running as user clamscan (UID 993, GID 993) May 23 00:49:52 host clamd[13868]: Log file size limited to 1048576 bytes. May 23 00:49:52 host clamd[13868]: Reading databases from /var/lib/clamav May 23 00:49:52 host clamd[13868]: Not loading PUA signatures. May 23 00:49:52 host clamd[13868]: Bytecode: Security mode set to “TrustSigned”. May 23 00:49:52 host clamd: LibClamAV Error: Can’t load /var/lib/clamav/main.cvd: Can’t verify database integrity May 23 00:49:52 host clamd: LibClamAV Error: cli_loaddbdir(): error loading database /var/lib/clamav/main.cvd May 23 00:49:52 host clamd: ERROR: Can’t verify database integrity May 23 00:49:52 host clamd[13868]: Can’t verify database integrity May 23 00:49:52 host systemd: clamd@scan.service: main process exited, code=exited, status=1/FAILURE May 23 00:49:52 host systemd: Unit clamd@scan.service entered failed state. May 23 00:49:52 host systemd: clamd@scan.service failed. May 23 00:49:52 host systemd: clamd@scan.service holdoff time over, scheduling restart. May 23 00:49:52 host systemd: Started Generic clamav scanner daemon. May 23 00:49:52 host systemd: Starting Generic clamav scanner daemon… May 23 00:49:52 host clamd[13873]: Received 0 file descriptor(s) from systemd. May 23 00:49:52 host clamd[13873]: clamd daemon 0.99.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) May 23 00:49:52 host clamd[13873]: Running as user clamscan (UID 993, GID 993) May 23 00:49:52 host clamd[13873]: Log file size limited to 1048576 bytes. May 23 00:49:52 host clamd[13873]: Reading databases from /var/lib/clamav May 23 00:49:52 host clamd[13873]: Not loading PUA signatures. May 23 00:49:52 host clamd[13873]: Bytecode: Security mode set to “TrustSigned”. May 23 00:49:53 host clamd: LibClamAV Error: Can’t load /var/lib/clamav/main.cvd: Can’t verify database integrity May 23 00:49:53 host clamd[13873]: Can’t verify database integrity May 23 00:49:53 host clamd: LibClamAV Error: cli_loaddbdir(): error loading database /var/lib/clamav/main.cvd May 23 00:49:53 host clamd: ERROR: Can’t verify database integrity May 23 00:49:53 host systemd: clamd@scan.service: main process exited, code=exited, status=1/FAILURE May 23 00:49:53 host systemd: Unit clamd@scan.service entered failed state. May 23 00:49:53 host systemd: clamd@scan.service failed. May 23 00:49:53 host systemd: clamd@scan.service holdoff time over, scheduling restart. May 23 00:49:53 host systemd: Started Generic clamav scanner daemon. May 23 00:49:53 host systemd: Starting Generic clamav scanner daemon… May 23 00:49:53 host clamd[13878]: Received 0 file descriptor(s) from systemd. May 23 00:49:53 host clamd[13878]: clamd daemon 0.99.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) May 23 00:49:53 host clamd[13878]: Running as user clamscan (UID 993, GID 993) May 23 00:49:53 host clamd[13878]: Log file size limited to 1048576 bytes. May 23 00:49:53 host clamd[13878]: Reading databases from /var/lib/clamav May 23 00:49:53 host clamd[13878]: Not loading PUA signatures. May 23 00:49:53 host clamd[13878]: Bytecode: Security mode set to “TrustSigned”. May 23 00:49:54 host clamd: LibClamAV Error: Can’t load /var/lib/clamav/main.cvd: Can’t verify database integrity May 23 00:49:54 host clamd[13878]: Can’t verify database integrity May 23 00:49:54 host clamd: LibClamAV Error: cli_loaddbdir(): error loading database /var/lib/clamav/main.cvd May 23 00:49:54 host clamd: ERROR: Can’t verify database integrity May 23 00:49:54 host systemd: clamd@scan.service: main process exited, code=exited, status=1/FAILURE May 23 00:49:54 host systemd: Unit clamd@scan.service entered failed state. May 23 00:49:54 host systemd: clamd@scan.service failed. May 23 00:49:54 host systemd: clamd@scan.service holdoff time over, scheduling restart. May 23 00:49:54 host systemd: start request repeated too quickly for clamd@scan.service May 23 00:49:54 host systemd: Failed to start Generic clamav scanner daemon. May 23 00:49:54 host systemd: Unit clamd@scan.service entered failed state. May 23 00:49:54 host systemd: clamd@scan.service failed. May 23 00:50:02 host systemd: Started Session 7816 of user root. May 23 00:50:02 host systemd: Starting Session 7816 of user root. May 23 00:50:02 host systemd: Started Session 7817 of user root. May 23 00:50:02 host systemd: Starting Session 7817 of user root. May 23 00:50:02 host systemd: Created slice user-41.slice. May 23 00:50:02 host systemd: Starting user-41.slice. May 23 00:50:02 host systemd: Started Session 7818 of user mailman. May 23 00:50:02 host systemd: Starting Session 7818 of user mailman. May 23 00:50:05 host systemd: Removed slice user-41.slice. May 23 00:50:05 host systemd: Stopping user-41.slice. May 23 00:51:48 host systemd: Stopped Clam AntiVirus userspace daemon. May 23 00:51:48 host systemd: Reloading. May 23 00:51:48 host systemd: Configuration file /usr/lib/systemd/system/auditd.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway. May 23 00:51:48 host systemd: Configuration file /usr/lib/systemd/system/ebtables.service is marked executable. Please remove executable permission bits. Proceeding anyway. May 23 00:51:49 host systemd: Configuration file /usr/lib/systemd/system/wpa_supplicant.service is marked executable. Please remove executable permission bits. Proceeding anyway. May 23 00:51:49 host systemd: Starting Socket for Clam AntiVirus userspace daemon. May 23 00:51:49 host systemd: Failed to chown socket at step USER: No such process May 23 00:51:49 host systemd: clamav-daemon.socket control process exited, code=exited status=217 May 23 00:51:49 host systemd: Failed to listen on Socket for Clam AntiVirus userspace daemon. May 23 00:51:49 host systemd: Dependency failed for Clam AntiVirus userspace daemon. May 23 00:51:49 host systemd: Job clamav-daemon.service/start failed with result ‘dependency’. May 23 00:51:49 host systemd: Unit clamav-daemon.socket entered failed state. May 23 00:51:49 host saslauthd[519]: do_auth : auth failure: [user=varya] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] May 23 00:52:05 host systemd: Starting Socket for Clam AntiVirus userspace daemon. May 23 00:52:05 host systemd: Failed to chown socket at step USER: No such process May 23 00:52:05 host systemd: clamav-daemon.socket control process exited, code=exited status=217 May 23 00:52:05 host systemd: Failed to listen on Socket for Clam AntiVirus userspace daemon. May 23 00:52:05 host systemd: Dependency failed for Clam AntiVirus userspace daemon. May 23 00:52:05 host systemd: Job clamav-daemon.service/start failed with result ‘dependency’. May 23 00:52:05 host systemd: Unit clamav-daemon.socket entered failed state.

Please advise.

cyrus · May 23, 2016, 7:20am

Just received an elail from my system Cron Daemon.
ERROR: Corrupted database file /var/lib/clamav/main.cvd: Can’t verify database integrity

Joe · May 24, 2016, 7:29am

Run freshclam, and see if the problem persists.

cyrus · May 24, 2016, 7:37am

# freshclam ClamAV update process started at Tue May 24 02:32:55 2016 main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60, builder: amishhammer) daily.cld is up to date (version: 21601, sigs: 174488, f-level: 63, builder: neo) bytecode.cld is up to date (version: 277, sigs: 47, f-level: 63, builder: neo)

Then tried to start the ClamAV server from the Virtualmin sysinfo page.
May 24 02:32:55 host freshclam[31434]: ClamAV update process started at Tue May 24 02:32:55 2016 May 24 02:32:56 host freshclam[31434]: main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60, builder: amishhammer) May 24 02:32:56 host freshclam[31434]: daily.cld is up to date (version: 21601, sigs: 174488, f-level: 63, builder: neo) May 24 02:32:56 host freshclam[31434]: bytecode.cld is up to date (version: 277, sigs: 47, f-level: 63, builder: neo) May 24 02:34:26 host systemd: Starting Socket for Clam AntiVirus userspace daemon. May 24 02:34:26 host systemd: Failed to chown socket at step USER: No such process May 24 02:34:26 host systemd: clamav-daemon.socket control process exited, code=exited status=217 May 24 02:34:26 host systemd: Failed to listen on Socket for Clam AntiVirus userspace daemon. May 24 02:34:26 host systemd: Dependency failed for Clam AntiVirus userspace daemon. May 24 02:34:26 host systemd: Job clamav-daemon.service/start failed with result ‘dependency’. May 24 02:34:26 host systemd: Unit clamav-daemon.socket entered failed state.