Kernel freshclam general protection fault

[Assia]

I installed the last version of Proxmox: 7.3-4 (running kernel: 5.15.83-1-pve). And then, after a week the server became unreachable and a hard reset was necessary (through Hetzner interface).

In order to understand the origin of the problem I looked at kernel logs belonging to the time before the incident. I noticed that there is a repetitive error in /var/log/messages:

kern.log:Jan 15 13:05:33 host3 kernel: [642318.478032] traps: freshclam[491128] general protection fault ip:7fa15d9102c5 sp:7ffe27842698 error:0 in libclamav.so.9.0.5[7fa15d85e000+121000]

which is related to the antivirus clamAV which I didn't install. also I can't find its files on the server.

freshclam -v -bash: freshclam: command not found
clamscan --version -bash: clamscan: command not found

when I do:

ps auuuux | grep clam

I get this:
ps auuuux | grep clam 100108 3868 0.0 0.9 1528600 1310004 ? Ssl Jan15 1:21 /usr/sbin/clamd --foreground=true 100108 3925 0.0 0.0 134696 15796 ? Ss Jan15 0:02 /usr/bin/freshclam -d --foreground=true
The date of those processes is the date of the incident: Jan15
On the server there is ne trace of those files /usr/sbin/clamd and /usr/bin/freshclam.

I have no idea about those processes, I want to know the origin of this antivirus and why its processes are present even if it's not installed in the server? Also I want know what happened exactly the day of the incident (freshclam[491128] general protection fault)?

 

[Neobin]

I want to know the origin of this antivirus and why its processes are present even if it's not installed in the server?

Maybe it is installed in one of your LXCs, if any?
But I do not know, if the ps output would look like this, if that would be the case. (I currently can not check/verify, how a process inside a LXC looks like on the host, sorry.)

 

[Assia]

Maybe it is installed in one of your LXCs, if any?
But I do not know, if the ps output would look like this, if that would be the case. (I currently can not check/verify, how a process inside a LXC looks like on the host, sorry.)

Yes indeed! I've just asked my team.
So is there an explanation for the "general protection fault" error caused by that ClamAV?
Jan 15 13:05:33 host3 kernel: [642318.478032] traps: freshclam[491128] general protection fault ip:7fa15d9102c5 sp:7ffe27842698 error:0 in libclamav.so.9.0.5[7fa15d85e000+121000]