ClamAV pattern not updated | MDaemon Technologies, Ltd.
  1. Forum
  2. MDaemon
  3. ClamAV pattern not updated

ClamAV pattern not updated

  • A

    Hi,

    I'm using MD 23.5.3 and ClamAV pattern not updated. (same issue previous version of MD).

    [Mon 2024-03-18 13:36:24] ----- AVUpdater for MDaemon 23.5.3 Log file starting ---
    [Mon 2024-03-18 13:36:26] ClamAV update process started at Mon Mar 18 13:36:26 2024
    [Mon 2024-03-18 13:36:26] Mon Mar 18 13:36:26 2024 -> daily database available for update (local version: 26918, remote version: 27217)
    [Mon 2024-03-18 13:36:26] Current database is 299 versions behind.
    [Mon 2024-03-18 13:36:26] Downloading database patch # 26919...
    [Mon 2024-03-18 13:36:33] WARNING: Mon Mar 18 13:36:33 2024 ->  ******* RESULT 404, SIZE: 153 ******* 
    [Mon 2024-03-18 13:36:33] WARNING: Mon Mar 18 13:36:33 2024 -> downloadFile: file not found: https://database.clamav.net/daily-26919.cdiff
    [Mon 2024-03-18 13:36:33] WARNING: Mon Mar 18 13:36:33 2024 -> downloadPatch: Can't download daily-26919.cdiff from https://database.clamav.net/daily-26919.cdiff
    [Mon 2024-03-18 13:36:33] Downloading database patch # 26919...
    [Mon 2024-03-18 13:36:33] WARNING: Mon Mar 18 13:36:33 2024 ->  ******* RESULT 404, SIZE: 153 ******* 
    [Mon 2024-03-18 13:36:33] WARNING: Mon Mar 18 13:36:33 2024 -> downloadFile: file not found: https://database.clamav.net/daily-26919.cdiff
    [Mon 2024-03-18 13:36:33] WARNING: Mon Mar 18 13:36:33 2024 -> downloadPatch: Can't download daily-26919.cdiff from https://database.clamav.net/daily-26919.cdiff
    [Mon 2024-03-18 13:36:33] Downloading database patch # 26919...
    [Mon 2024-03-18 13:36:33] WARNING: Mon Mar 18 13:36:33 2024 ->  ******* RESULT 404, SIZE: 153 ******* 
    [Mon 2024-03-18 13:36:33] WARNING: Mon Mar 18 13:36:33 2024 -> downloadFile: file not found: https://database.clamav.net/daily-26919.cdiff
    [Mon 2024-03-18 13:36:33] WARNING: Mon Mar 18 13:36:33 2024 -> downloadPatch: Can't download daily-26919.cdiff from https://database.clamav.net/daily-26919.cdiff
    [Mon 2024-03-18 13:36:33] WARNING: Mon Mar 18 13:36:33 2024 -> Incremental update failed, trying to download daily.cvd
    [Mon 2024-03-18 13:36:36] WARNING: Mon Mar 18 13:36:36 2024 ->  ******* RESULT 200, SIZE: 63025170 ******* 
    [Mon 2024-03-18 13:36:38] Testing database: 'D:\MDAEMON\SecurityPlus\ClamAVPlugin\data\tmp.f90557c3e8\clamav-ca4c4c2c381f189dd3a88cbb8b728d37.tmp-daily.cvd' ...
    [Mon 2024-03-18 13:36:47] Database test passed.
    [Mon 2024-03-18 13:36:47] Mon Mar 18 13:36:47 2024 -> daily.cvd updated (version: 27217, sigs: 2055524, f-level: 90, builder: raynman)
    [Mon 2024-03-18 13:36:47] Mon Mar 18 13:36:47 2024 -> main.cvd database is up-to-date (version: 62, sigs: 6647427, f-level: 90, builder: sigmgr)
    [Mon 2024-03-18 13:36:47] Mon Mar 18 13:36:47 2024 -> bytecode database available for update (local version: 334, remote version: 335)
    [Mon 2024-03-18 13:36:47] Current database is 1 version behind.
    [Mon 2024-03-18 13:36:47] Downloading database patch # 335...
    [Mon 2024-03-18 13:36:47] WARNING: Mon Mar 18 13:36:47 2024 ->  ******* RESULT 200, SIZE: 836 ******* 
    [Mon 2024-03-18 13:36:48] Testing database: 'D:\MDAEMON\SecurityPlus\ClamAVPlugin\data\tmp.f90557c3e8\clamav-b84e9fde4d119f438eda0b0084651e2e.tmp-bytecode.cld' ...
    [Mon 2024-03-18 13:36:48] Database test passed.
    [Mon 2024-03-18 13:36:48] Mon Mar 18 13:36:48 2024 -> bytecode.cld updated (version: 335, sigs: 86, f-level: 90, builder: raynman)
    [Mon 2024-03-18 13:36:49] ERROR: NotifyClamd: Can't connect to clamd on 127.0.0.1:3310: Connection refused
    [Mon 2024-03-18 13:36:52] ----- AVUpdater for MDaemon 23.5.3 Log file stopping ---

    0 likes
  • A

    Is the MDaemon service running as the localsystem account?  If it is not, what user is it running as?  

    In taskmanager, is clamd.exe running?  What user is it running as?

    Is Freshclam.exe running?  Is it running more than 1 time?

    What user is it running as?

    Have you altered the clamd.conf file in the MDaemon\SecurityPlus\ClamAVPlugin\data\ directory?

    If you edit the file, is the TCPSocket value set to 3310?

    What is the TCPAddr value set to?

    In the MDaemon logs directory, is there a clamd-$DATE$.log file?  What does it show is happening?  

    If there is not a clamd log, in the clamd.conf file, what is the value for LogFile?  Is there a log file at the path specified?

    --
    Arron Caruth

    0 likes
Please login to reply this topic!