[SOLVED] CLAM AV Start Error !!

[uscell]

I have just now installed 5.0.5 on sles 10 sp1
when i restart server it shows me antivirus loading failed.
i tried to reload.
i have captured log from /opt/zimbra/log/clamd.log

Wed Apr 30 05:16:34 2008 -> Reading databases from /opt/zimbra/data/clamav/db
Wed Apr 30 05:16:38 2008 -> Database correctly reloaded (273059 signatures)
Wed Apr 30 07:13:00 2008 -> SelfCheck: Database status OK.
Wed Apr 30 09:55:18 2008 -> SelfCheck: Database status OK.
Wed Apr 30 10:31:57 2008 -> SelfCheck: Database status OK.
Wed Apr 30 11:31:30 2008 -> SelfCheck: Database status OK.
Wed Apr 30 12:18:32 2008 -> SelfCheck: Database status OK.
Wed Apr 30 12:49:59 2008 -> Pid file removed.
Wed Apr 30 12:49:59 2008 -> --- Stopped at Wed Apr 30 12:49:59 2008
Wed Apr 30 12:51:24 2008 -> +++ Started at Wed Apr 30 12:51:24 2008
Wed Apr 30 12:51:24 2008 -> clamd daemon 0.92.1 (OS: linux-gnu, ARCH: i386, CPU: i686)
Wed Apr 30 12:51:24 2008 -> Log file size limited to 20971520 bytes.
Wed Apr 30 12:51:24 2008 -> Reading databases from /opt/zimbra/data/clamav/db
Wed Apr 30 12:51:24 2008 -> Not loading PUA signatures.
Wed Apr 30 12:51:25 2008 -> ERROR: MD5 verification error
Wed Apr 30 12:52:24 2008 -> +++ Started at Wed Apr 30 12:52:24 2008
Wed Apr 30 12:52:24 2008 -> clamd daemon 0.92.1 (OS: linux-gnu, ARCH: i386, CPU: i686)
Wed Apr 30 12:52:24 2008 -> Log file size limited to 20971520 bytes.
Wed Apr 30 12:52:24 2008 -> Reading databases from /opt/zimbra/data/clamav/db
Wed Apr 30 12:52:24 2008 -> Not loading PUA signatures.
Wed Apr 30 12:52:24 2008 -> ERROR: MD5 verification error
Wed Apr 30 12:54:08 2008 -> +++ Started at Wed Apr 30 12:54:08 2008
Wed Apr 30 12:54:08 2008 -> clamd daemon 0.92.1 (OS: linux-gnu, ARCH: i386, CPU: i686)
Wed Apr 30 12:54:08 2008 -> Log file size limited to 20971520 bytes.
Wed Apr 30 12:54:08 2008 -> Reading databases from /opt/zimbra/data/clamav/db
Wed Apr 30 12:54:08 2008 -> Not loading PUA signatures.
Wed Apr 30 12:54:08 2008 -> ERROR: MD5 verification error
Wed Apr 30 12:54:50 2008 -> +++ Started at Wed Apr 30 12:54:50 2008
Wed Apr 30 12:54:50 2008 -> clamd daemon 0.92.1 (OS: linux-gnu, ARCH: i386, CPU: i686)
Wed Apr 30 12:54:50 2008 -> Log file size limited to 20971520 bytes.
Wed Apr 30 12:54:50 2008 -> Reading databases from /opt/zimbra/data/clamav/db
Wed Apr 30 12:54:50 2008 -> Not loading PUA signatures.
Wed Apr 30 12:54:50 2008 -> ERROR: MD5 verification error
Wed Apr 30 12:58:02 2008 -> +++ Started at Wed Apr 30 12:58:02 2008
Wed Apr 30 12:58:02 2008 -> clamd daemon 0.92.1 (OS: linux-gnu, ARCH: i386, CPU: i686)
Wed Apr 30 12:58:02 2008 -> Log file size limited to 20971520 bytes.
Wed Apr 30 12:58:02 2008 -> Reading databases from /opt/zimbra/data/clamav/db
Wed Apr 30 12:58:02 2008 -> Not loading PUA signatures.
Wed Apr 30 12:58:03 2008 -> ERROR: MD5 verification error
Wed Apr 30 12:58:58 2008 -> +++ Started at Wed Apr 30 12:58:58 2008
Wed Apr 30 12:58:58 2008 -> clamd daemon 0.92.1 (OS: linux-gnu, ARCH: i386, CPU: i686)
Wed Apr 30 12:58:58 2008 -> Log file size limited to 20971520 bytes.
Wed Apr 30 12:58:58 2008 -> Reading databases from /opt/zimbra/data/clamav/db
Wed Apr 30 12:58:58 2008 -> Not loading PUA signatures.
Wed Apr 30 12:58:58 2008 -> ERROR: MD5 verification error
Wed Apr 30 13:01:57 2008 -> +++ Started at Wed Apr 30 13:01:57 2008
Wed Apr 30 13:01:57 2008 -> clamd daemon 0.92.1 (OS: linux-gnu, ARCH: i386, CPU: i686)
Wed Apr 30 13:01:57 2008 -> Log file size limited to 20971520 bytes.
Wed Apr 30 13:01:57 2008 -> Reading databases from /opt/zimbra/data/clamav/db
Wed Apr 30 13:01:57 2008 -> Not loading PUA signatures.
Wed Apr 30 13:01:58 2008 -> ERROR: MD5 verification error
Thu May 1 11:24:53 2008 -> +++ Started at Thu May 1 11:24:53 2008
Thu May 1 11:24:53 2008 -> clamd daemon 0.92.1 (OS: linux-gnu, ARCH: i386, CPU: i686)
Thu May 1 11:24:53 2008 -> Log file size limited to 20971520 bytes.
Thu May 1 11:24:53 2008 -> Reading databases from /opt/zimbra/data/clamav/db
Thu May 1 11:24:53 2008 -> Not loading PUA signatures.
Thu May 1 11:24:53 2008 -> ERROR: MD5 verification error

if any one had solution earlier please.

thanks,
Yukari !!!

[mmorse]

su - zimbra
mkdir /tmp/clamdb
mv /opt/zimbra/clamav/db/* /tmp/clamdb
zmprov ms `zmhostname` +zimbraServiceEnabled antivirus
/opt/zimbra/clamav/bin/freshclam --config-file=/opt/zimbra/conf/freshclam.conf
zmamavisctl stop
zmamavisctl start

[tuanta]

I tried this way but not sucess. The clamd still does not start.
Please help!

[mmorse]

Uscell, Is your situation resolved?
Tuanta, could we get some logs? (logfile list) Are you saying you're hitting the exact same MD5 verification error in clamd.log? Are you currently 5.0.2? (from your profile) I'd like to know your clamav version etc.

[tuanta]

Dear sir,

Thank you for your reply.

My problem actually has been solved by reinstalling Zimbra 5.0.4 on that server (before that I had tried with 5.0.5).
Unfortunately, I removed all old folders so I can not post any for you here right now.

Thank you anyway.

Regards,
Tuan

[uscell]

Hi Mike,
was not in office for short time . anyways
Many thanks, Fantastic, Problem Resolved,

Yukari !!!

[maumar]

Originally Posted by mmorse

su - zimbra
mkdir /tmp/clamdb
mv /opt/zimbra/clamav/db/* /tmp/clamdb
zmprov ms `zmhostname` +zimbraServiceEnabled antivirus
/opt/zimbra/clamav/bin/freshclam --config-file=/opt/zimbra/conf/freshclam.conf
zmamavisctl stop
zmamavisctl start

i have the same issue
i have installed 5.0.8 tonight and i get disk full
in 5.0.8 clamav/db is under data, i have tried the same steps but with data

$ ls -la
total 36096
drwxr-xr-x 4 zimbra zimbra     4096 Jul 17 09:35 .
drwxr-xr-x 3 zimbra zimbra     4096 Apr 13 22:59 ..
-rw-r----- 1 zimbra zimbra  2677248 Jul 17 09:35 daily.cld
-rw-r----- 1 zimbra zimbra  1152808 Jul 17 09:35 daily.cvd
drwxr-x--- 2 zimbra zimbra     4096 Jun  8 08:30 daily.inc
-rw-r----- 1 zimbra zimbra 33062400 Jul 17 09:35 main.cld
drwxr-x--- 2 zimbra zimbra     4096 Jun  8 08:30 main.inc
-rw------- 1 zimbra zimbra      832 Jul 17 10:06 mirrors.dat
$ mv * /tmp/data/clamav/db

 /opt/zimbra/clamav/bin/freshclam --config-file=/opt/zimbra/conf/freshclam.conf
ClamAV update process started at Thu Jul 17 10:09:20 2008
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.93.1 Recommended version: 0.93.3
DON'T PANIC! Read http://www.clamav.net/support/faq
Downloading main.cvd [100%]
main.cvd updated (version: 47, sigs: 312304, f-level: 31, builder: sven)
Downloading daily.cvd [100%]
daily.cvd updated (version: 7733, sigs: 43548, f-level: 33, builder: guitar)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 31, recommended = 33
DON'T PANIC! Read http://www.clamav.net/support/faq
Database updated (355852 signatures) from db.us.clamav.net (IP: 64.142.100.50)
Clamd successfully notified about the update.
[10:10:26 - zimbra@srvfbs03ra ~/data/clamav/db ]$ ls -la
total 16012
drwxr-xr-x 2 zimbra zimbra     4096 Jul 17 10:10 .
drwxr-xr-x 3 zimbra zimbra     4096 Apr 13 22:59 ..
-rw-r----- 1 zimbra zimbra  1152808 Jul 17 10:10 daily.cvd
-rw-r----- 1 zimbra zimbra 15200793 Jul 17 10:10 main.cvd
-rw------- 1 zimbra zimbra       52 Jul 17 10:10 mirrors.dat

now it seems ok

now there are 3 files instead of 6, but it works!

[mmorse]

Originally Posted by maumar

now it seems ok

now there are 3 files instead of 6, but it works!

Glad you're good.

Originally Posted by maumar

in 5.0.8 clamav/db is under data

Yup, we moved it in 5.0.3 to/opt/zimbra/data/clamav/db/
Bug 24364 - new data directory
ClamAV - Reset Defs DB - Zimbra :: Wiki

[tuanta]

Thank you!
I will follow the Wiki article.