[SOLVED] Updated ClamAV but showed issues

[reachmedia]

Hi Proxmox,

I did a package update for ClamAV (Administration->Updates->Upgrade) to the latest version for ClamAV package.

Please advise for the below error when doing Virus Detector->ClamAV->Update now.

Thanks

ERROR: /var/log/clamav/freshclam.log is locked by another process
ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log).
ERROR: initialize: libfreshclam init failed.
ERROR: Initialization error!
TASK ERROR: command '/usr/bin/freshclam --stdout' failed: exit code 2

 

[reachmedia]

I've disabled the SafeBrowsing feature based on this thread: https://forum.proxmox.com/threads/clamav-does-not-update.88159/

WARNING: Ignoring deprecated option SafeBrowsing at /etc/clamav/freshclam.conf:18
ClamAV update process started at Mon Apr 26 21:21:12 2021
daily.cld database is up-to-date (version: 26152, sigs: 3973675, f-level: 63, builder: raynman)
main.cvd database is up-to-date (version: 59, sigs: 4564902, f-level: 60, builder: sigmgr)
bytecode.cld database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2)
TASK OK

 

[reachmedia]

I actually thought that this Google SafeBrowsing feature is Google API instead of ClamAV?

safebrowsing: <boolean> (default = 1)
Enables support for Google Safe Browsing.

https://developers.google.com/safe-browsing/v4#:~:text=The Safe Browsing APIs (v4,host malware or unwanted software
https://blog.clamav.net/2021/04/are-you-still-attempting-to-download.html

 

[oguz]

hi,

can you post the output from tail -n 200 /var/log/clamav/freshclam.log to see the error messages?

also what do you get from ps aux | grep clam?

 

[reachmedia]

root@pmg:~# tail -n 200 /var/log/clamav/freshclam.log
Mon Apr 26 20:28:05 2021 -> --------------------------------------
Mon Apr 26 20:28:05 2021 -> freshclam daemon 0.103.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Mon Apr 26 20:28:05 2021 -> ClamAV update process started at Mon Apr 26 20:28:05 2021
Mon Apr 26 20:28:05 2021 -> daily.cld database is up-to-date (version: 26152, sigs: 3973675, f-level: 63, builder: raynman)
Mon Apr 26 20:28:05 2021 -> main.cvd database is up-to-date (version: 59, sigs: 4564902, f-level: 60, builder: sigmgr)
Mon Apr 26 20:28:05 2021 -> bytecode.cld database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2)
Mon Apr 26 20:28:05 2021 -> --------------------------------------
Mon Apr 26 20:58:05 2021 -> Received signal: wake up
Mon Apr 26 20:58:05 2021 -> ClamAV update process started at Mon Apr 26 20:58:05 2021
Mon Apr 26 20:58:05 2021 -> daily.cld database is up-to-date (version: 26152, sigs: 3973675, f-level: 63, builder: raynman)
Mon Apr 26 20:58:05 2021 -> main.cvd database is up-to-date (version: 59, sigs: 4564902, f-level: 60, builder: sigmgr)
Mon Apr 26 20:58:05 2021 -> bytecode.cld database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2)
Mon Apr 26 20:58:05 2021 -> --------------------------------------
Mon Apr 26 21:21:10 2021 -> Update process terminated

root@pmg:~# ps aux | grep clam
clamav 2035 0.4 13.4 1332896 1095668 ? Ssl 21:21 0:20 /usr/sbin/clamd --foreground=true
clamav 2054 0.0 0.1 65012 14320 ? Ss 21:21 0:00 /usr/bin/freshclam -d --foreground=true
root 2921 0.0 0.0 6072 892 pts/0 R+ 22:38 0:00 grep clam

 

[reachmedia]

I think the frontend GUI has a bytecode status and after update it was removed.

 

[reachmedia]

Based on ClamAV SafeBrowsing API : https://github.com/Cisco-Talos/clamav-safebrowsing

Google API pricing is free for use: https://developers.google.com/safe-browsing/v4/pricing