Avast refuses to start

JCV · Jul 6, 2022

Hi,

Once ClamAV detects almost nothing on PMG, I decided to buy an Avast subscription. Followed de pmg install instructions step by step but the avast service won't start:

**************************
Job for avast.service failed because the control process exited with error code.
See "systemctl status avast.service" and "journalctl -xe" for details.
root@proxmox:~# status avast.service
-bash: status: command not found
root@proxmox:~# systemctl status avast.service
● avast.service - Avast Antivirus engine
Loaded: loaded (/lib/systemd/system/avast.service; disabled; vendor preset: disabled)
Drop-In: /usr/lib/systemd/system/avast.service.d
└─fss-user.conf
Active: failed (Result: exit-code) since Wed 2022-07-06 10:04:53 WEST; 31s ago
TriggeredBy: ● avast.socket
Docs: man:avast(1)
Process: 10137 ExecStart=/usr/bin/avast (code=exited, status=1/FAILURE)
Main PID: 10137 (code=exited, status=1/FAILURE)
CPU: 9ms

Jul 06 10:04:53 proxmox systemd[1]: avast.service: Scheduled restart job, restart counter is at 5.
Jul 06 10:04:53 proxmox systemd[1]: Stopped Avast Antivirus engine.
Jul 06 10:04:53 proxmox systemd[1]: avast.service: Start request repeated too quickly.
Jul 06 10:04:53 proxmox systemd[1]: avast.service: Failed with result 'exit-code'.
Jul 06 10:04:53 proxmox systemd[1]: Failed to start Avast Antivirus engine.

+++++++++++++++++++++++++++++++++++++++++

06 10:18:38 proxmox systemd[1]: Stopped Avast Antivirus engine.
░░ Subject: A stop job for unit avast.service has finished
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A stop job for unit avast.service has finished.
░░
░░ The job identifier is 4392 and the job result is done.
Jul 06 10:18:38 proxmox systemd[1]: avast.service: Start request repeated too quickly.
Jul 06 10:18:38 proxmox systemd[1]: avast.service: Failed with result 'exit-code'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ The unit avast.service has entered the 'failed' state with result 'exit-code'.
Jul 06 10:18:38 proxmox systemd[1]: Failed to start Avast Antivirus engine.
░░ Subject: A start job for unit avast.service has failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support

**************************

Can you help me?
Thank you
José

oguz · Jul 6, 2022

hi,

* which pmg version?

JCV said:
. Followed de pmg install instructions step by step

* did you activate your license as well? [0]

JCV said:
but the avast service won't start:

* please post the output from journalctl | grep -i avast -C 3

[0]: https://pmg.proxmox.com/wiki/index.php/Install_Avast

JCV · Jul 6, 2022

The version is PMG 7.1-3
I can't get results from grep -i avast -C 3, keep wainting for the command results with no success.

oguz · Jul 6, 2022

JCV said:
I can't get results from grep -i avast -C 3, keep wainting for the command results with no success.

the command is journalctl | grep -i avast -C 3

JCV · Jul 6, 2022

oguz said:
the command is journalctl | grep -i avast -C 3

Sorry:

Jul 06 10:18:37 proxmox systemd[1]: Starting Avast Antivirus engine...
Jul 06 10:18:37 proxmox avast[10490]: 2022-07-06 10:18:37.763+0100 [10490: 28fa] NOTICE main: Starting 4.0.4 (1b1e8802e85f LNX)
Jul 06 10:18:37 proxmox avast[10490]: 2022-07-06 10:18:37.763+0100 [10490: 28fa] WARNING engine: avldrRemoveDefinitionsFolder(): Invalid argument
Jul 06 10:18:37 proxmox avast[10490]: main: Starting 4.0.4 (1b1e8802e85f LNX)
Jul 06 10:18:37 proxmox avast[10490]: engine: avldrRemoveDefinitionsFolder(): Invalid argument
Jul 06 10:18:37 proxmox avast[10490]: 2022-07-06 10:18:37.764+0100 [10490: 28fa] ERROR engine: avldrGetDefinitionsFolder(): Invalid argument
Jul 06 10:18:37 proxmox avast[10490]: engine: avldrGetDefinitionsFolder(): Invalid argument
Jul 06 10:18:37 proxmox avast[10490]: 2022-07-06 10:18:37.765+0100 [10490: 28fa] ERROR main: Failed to load VPS.
Jul 06 10:18:37 proxmox avast[10490]: 2022-07-06 10:18:37.765+0100 [10490: 28fa] ERROR main: Fatal error. Exiting.
Jul 06 10:18:37 proxmox avast[10490]: main: Failed to load VPS.
Jul 06 10:18:37 proxmox avast[10490]: main: Fatal error. Exiting.
Jul 06 10:18:37 proxmox systemd[1]: avast.service: Main process exited, code=exited, status=1/FAILURE
Jul 06 10:18:37 proxmox systemd[1]: avast.service: Failed with result 'exit-code'.
Jul 06 10:18:37 proxmox systemd[1]: Failed to start Avast Antivirus engine.
Jul 06 10:18:38 proxmox systemd[1]: avast.service: Scheduled restart job, restart counter is at 5.
Jul 06 10:18:38 proxmox systemd[1]: Stopped Avast Antivirus engine.
Jul 06 10:18:38 proxmox systemd[1]: avast.service: Start request repeated too quickly.
Jul 06 10:18:38 proxmox systemd[1]: avast.service: Failed with result 'exit-code'.
Jul 06 10:18:38 proxmox systemd[1]: Failed to start Avast Antivirus engine.
Jul 06 10:18:41 proxmox pmg-smtp-filter[10399]: A157D62C553612BB09: SA score=0/5 time=15.070 bayes=0.00 autolearn=no autolearn_force=no hits=BAYES_00(-1.9),DKIM_INVALID(0.1),DKIM_SIGNED(0.1),HTML_MESSAGE(0.001),KAM_DMARC_STATUS(0.01),KHOP_HELO_FCRDNS(0.001),T_SCC_BODY_TEXT_LINE(-0.01),T_SPF_HELO_TEMPERROR(0.01),T_SPF_TEMPERROR(0.01)
Jul 06 10:18:41 proxmox postfix/smtpd[9395]: connect from localhost.localdomain[127.0.0.1]
Jul 06 10:18:41 proxmox postfix/smtpd[9395]: 1CDB6A14D3: client=localhost.localdomain[127.0.0.1], orig_client=mail-mw2nam10on2040.outbound.protection.outlook.com[40.107.94.40]

oguz · Jul 6, 2022

thanks.

* can you show your package repositories list: cat /etc/apt/sources.list.d/avast.list

* have you activated your avast license (as described in the wiki page i've linked before)

JCV · Jul 6, 2022

oguz said:
thanks.

* can you show your package repositories list: cat /etc/apt/sources.list.d/avast.list

* have you activated your avast license (as described in the wiki page i've linked before)

deb https://repo.avcdn.net/linux-av/deb debian-bullseye release

JCV · Jul 6, 2022

JCV said:
deb https://repo.avcdn.net/linux-av/deb debian-bullseye release

"* have you activated your avast license (as described in the wiki page i've linked before) "

Yes, successfuly.

oguz · Jul 6, 2022

JCV said:
"* have you activated your avast license (as described in the wiki page i've linked before) "

Yes, successfuly.

and have you copied it over to /etc/avast/ directory?

Code:

 $ avastlic -f mylicense -c avast_activation_code
 $ cp mylicense /etc/avast/license.avastlic

if you haven't done that, please do that and restart your avast service: systemctl restart avast.target

JCV · Jul 6, 2022

oguz said:
and have you copied it over to /etc/avast/ directory?

Code:

$ avastlic -f mylicense -c avast_activation_code $ cp mylicense /etc/avast/license.avastlic

if you haven't done that, please do that and restart your avast service: systemctl restart avast.target

I don't completely understand this command but my filelicense.avastlic on /etc/avast looks to be OK

JCV · Jul 6, 2022

Hi, hi have an additional problem,

ClamAV detects but still delivers infected mail

*********************************************************
A23A962C58D42EEBE3: new mail message-id=<28ceb43e-e640-4423-e7a1-7acfbe9f09bc@infotechnica.gr>#012
Jul 6 14:25:23 proxmox pmg-smtp-filter[13838]: A23A962C58D42EEBE3: virus detected: Heuristics.Encrypted.Zip (clamav)
Jul 6 14:25:23 proxmox postfix/smtpd[13999]: disconnect from relay2.grserver.gr[185.4.132.177] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
Jul 6 14:25:40 proxmox pmg-smtp-filter[13838]: A23A962C58D42EEBE3: SA score=2/5 time=17.076 bayes=0.00 autolearn=no autolearn_force=no hits=ClamAVHeuristics(4),BAYES_00(-1.9),HTML_MESSAGE(0.001),KAM_DMARC_STATUS(0.01),MIME_HTML_ONLY(0.1),T_SCC_BODY_TEXT_LINE(-0.01),T_SPF_HELO_TEMPERROR(0.01),T_SPF_TEMPERROR(0.01)
Jul 6 14:25:40 proxmox postfix/smtpd[13975]: connect from localhost.localdomain[127.0.0.1]
*******************************************************************************************************

JCV · Jul 7, 2022

Hello,
I really need help, neither Avast or ClamAV are working on my pmg.

Stoiko Ivanov · Jul 11, 2022

JCV said:
Jul 6 14:25:23 proxmox pmg-smtp-filter[13838]: A23A962C58D42EEBE3: virus detected: Heuristics.Encrypted.Zip (clamav)

The heuristic matches (in this case this is a password protected zip file not a definite virus) are not treated as viruses by PMG:
Instead they get assigned the Heuristics score (GUI->Configuration->Spam Detector->Options)

regarding avast - seems something with the package installation did not work out - or some directory is missing?
please make sure you followed the installation instructions:
https://repo.avcdn.net/linux-av/doc/avast-techdoc.pdf

(also linked at https://pmg.proxmox.com/wiki/index.php/Install_Avast)
else you could also ask avast for support

I hope this helps!

cpzengel · Aug 21, 2024

stop sending statistics, as documentation from proxmox says, helped

# Avast configuration file
#
# Below are all available configuration options and their default values. Only
# the options in the OPTIONS section can be changed at runtime.

# RUN_DIR = "/run/avast"
# TEMP_DIR = "/tmp"
# DATA_DIR = "/var/lib/avast"
# SOCKET = "/run/avast/scan.sock"
# LICENSE = "/etc/avast/license.avastlic"
# WHITELIST = "/etc/avast/whitelist"
SUBMIT = "/bin/true"

[OPTIONS]
# CREDENTIALS = 0
STATISTICS = 0
HEURISTICS = 0
# STREAMING_UPDATES = 1
# REPUTATION_QUERIES = 1

[PACKER_BOMB]
# MAX_FILE_SIZE_TO_EXTRACT_MB = 1000
# MAX_COMPRESSION_RATIO = 100

in /etc/avast/avast.conf

Search

Search

Avast refuses to start

JCV

Member

oguz

Proxmox Retired Staff

JCV

Member

oguz

Proxmox Retired Staff

JCV

Member

oguz

Proxmox Retired Staff

JCV

Member

JCV

Member

oguz

Proxmox Retired Staff

JCV

Member

JCV

Member

JCV

Member

Stoiko Ivanov

Proxmox Staff Member

cpzengel

Renowned Member