I also saw this on two different servers yesterday...about 13 hours ago actually...didn't catch it until this morning....would really like to know whats going on.....Had this happen two days ago on a different server as well...
Luigi Iotti wrote: > Hi all > > I'm new on the list, is this is a FAQ please tell me so. I'm unsure if > my problem is related to the other one that today is discussed on the > list. > > I have several clamav installations. I use it with Postfix on CentOS > (very similar to Red Hat). I use the clamav RPM packages available on > http://crash.fce.vutbr.cz , but recompiled on CentOS. > > Last night suddenly, on several of my custoers' mail servers, clamd > stopped running. > In the lo I find: > Wed Apr 11 04:02:13 2007 -> SelfCheck: Database status OK. > Wed Apr 11 04:38:23 2007 -> SelfCheck: Database modification detected. > Forcing reload. > Wed Apr 11 04:38:24 2007 -> Reading databases from /var/lib/clamav > Wed Apr 11 04:38:24 2007 -> ERROR: reload db failed: Broken or not a CVD file > Wed Apr 11 04:38:24 2007 -> Terminating because of a fatal error. > Wed Apr 11 04:38:24 2007 -> Socket file removed. > Wed Apr 11 04:38:24 2007 -> Pid file removed. > Wed Apr 11 04:38:24 2007 -> --- Stopped at Wed Apr 11 04:38:24 2007 > > This happened on at least 10 different installations, more or less at > the same time. > > I noticed that: > 1) the problem seems to occur only on 0.90 installations. Servers > still with 0.8x seem not to be affected. > 2) In /var/lib/clamav , after clamd stopped running, I find the > directories daily.inc, main.inc anche the mirrors.dat file. No .cvd > files. > > I'm looking for the reason of this massive problem, and I'd like to > know if this can be an isolated episode (maybe due to a broken update > file). > > I found a minor problem in the RPM package, too. In the rc file, > /etc/init.d/clamd, it checks for the existence of > /var/lib/clamav/main.cvd and , if not found, it exits echoing "ERROR: > Clamav DB missing! Run 'freshclam --verbose' as root." > Having main.inc and not main.cvd, my clamd refused to start with this > error. Maybe the package author is listening reading this ML, so he > can correct his packages. It seems to me that it is sufficient to > check for the existence of the file /var/lib/clamav/main.cvd OR the > directory /var/lib/clamav/main.inc . Is this be correct (I mean, > main.inc took the place of main.cvd)? > > Thanks for the attention. > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://lurker.clamav.net/list/clamav-users.html > > _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
