Can't Upgarde Clamav 0.95.1 to 0.96.5

[anatifaana]

Dears,

Today i found my Zimbra Server stop totally (zcs 5.0.26) with Clamav 0.95.1.
I tried to upgrade Clamav 0.95.1 to clamav 0.96.5 but it still not working with error:
zmcontrol start
Host mail.erfanhospital.com
Starting ldap...Done.
Starting logger...Done.
Starting mailbox...Done.
Starting antispam...Done.
Starting antivirus...FAILED
amavisd already running: pid 16298
clamd failed to start


Starting snmp...Done.
Starting spell...Done.
Starting mta...Done.
Starting stats...Done.


Please i need your help ASAP because it's a critical issue.

Thanks

Mohamed Lotfy
mohamedlotfy81@gmail.com

[phoenix]

Today i found my Zimbra Server stop totally (zcs 5.0.26) with Clamav 0.95.1.
I tried to upgrade Clamav 0.95.1 to clamav 0.96.5 but it still not working with error:

Why did you do the upgrade to clamav rather than trying to fix the problem?

zmcontrol start
Host mail.erfanhospital.com
Starting ldap...Done.
Starting logger...Done.
Starting mailbox...Done.
Starting antispam...Done.
Starting antivirus...FAILED
amavisd already running: pid 16298
clamd failed to start


Starting snmp...Done.
Starting spell...Done.
Starting mta...Done.
Starting stats...Done.

That information tells us nothing about what's wrong with your server, look in the log files for any errors when you try and start Zimbra. You've also given no details about whether this is a new install, an upgrade, whether you're behind a NAT router or firewall etc., etc., etc.

Please i need your help ASAP because it's a critical issue.

When you've found the and you're waiting for a reply, search the forums for the errors you've found and see what other posts cover the same problem.

[anatifaana]

Thanks for your reply, but when i searched on the Zimbra.log file i found this error:

(00975-02) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (1)

and in the freshclam.log file:

freshclam daemon 0.95.1-broken-compiler (OS: linux-gnu, ARCH: i386, CPU: i686)
ClamAV update process started at Thu Feb 3 13:07:01 2011
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.95.1 Recommended version: 0.96.5
DON'T PANIC! Read http://www.clamav.net/support/faq
main.cvd is up to date (version: 53, sigs: 846214, f-level: 53, builder: sven)
Trying host db.us.clamav.net (65.19.179.67)...
WARNING: getfile: daily-12529.cdiff not found on remote server (IP: 65.19.179.67)
WARNING: getpatch: Can't download daily-12529.cdiff from db.us.clamav.net
WARNING: getfile: daily-12529.cdiff not found on remote server (IP: 64.142.100.50)
WARNING: getpatch: Can't download daily-12529.cdiff from db.us.clamav.net
WARNING: getfile: daily-12529.cdiff not found on remote server (IP: 64.142.100.50)
WARNING: getpatch: Can't download daily-12529.cdiff from db.us.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Trying host db.us.clamav.net (65.19.179.67)...
nonblock_recv: recv timing out (30 secs)
WARNING: getfile: Error while reading database from db.us.clamav.net (IP: 65.19.179.67)
WARNING: Can't download daily.cvd from db.us.clamav.net
Trying again in 5 secs...

so i tried to do it manually, is it true?

I'm already tring and searching about this issue , but still i can't find any help posts about it

[phoenix]

Thanks for your reply, but when i searched on the Zimbra.log file i found this error:

You haven't really answered any of my questions, why did you do the upgrade to clamav? What about the other information I asked for in my previous post?

[anatifaana]

Dear,

no it's not new install or upgrade, it was working fine till yesterday. Today i discovered we can't send or receive and emails and when i checked the server i found the AntiViruses service stop.

It was working fine till this error (Not loading PUA signatures):

Feb 11 01:46:05 mail sudo: zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/libexec/zmmtastatus
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: antispam: Running
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: antivirus: Stopped
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: amavisd: running pid: 5286
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: ldap: Running
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: logger: Running
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: mailbox: Running
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: mta: Running
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: snmp: Running
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: spell: Running
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: stats: Running
Feb 11 01:46:18 mail clamd[26816]: clamd daemon 0.95.1-broken-compiler (OS: linux-gnu, ARCH: i386, CPU: i686)
Feb 11 01:46:18 mail clamd[26816]: Log file size limited to 20971520 bytes.
Feb 11 01:46:18 mail clamd[26816]: Reading databases from /opt/zimbra/data/clamav/db
Feb 11 01:46:18 mail clamd[26816]: Not loading PUA signatures.
Feb 11 01:46:18 mail clamd[26816]: Malformed database

Yes we working behind FW with NAT for the mail server.

[phoenix]

no it's not new install or upgrade, it was working fine till yesterday. Today i discovered we can't send or receive and emails and when i checked the server i found the AntiViruses service stop.

It was working fine till this error (Not loading PUA signatures):

Feb 11 01:46:05 mail sudo: zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/libexec/zmmtastatus
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: antispam: Running
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: antivirus: Stopped
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: amavisd: running pid: 5286
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: ldap: Running
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: logger: Running
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: mailbox: Running
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: mta: Running
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: snmp: Running
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: spell: Running
Feb 11 01:46:06 mail zimbramon[26177]: 26177:info: 2011-02-11 01:46:01, STATUS: mail.mansour.com: stats: Running
Feb 11 01:46:18 mail clamd[26816]: clamd daemon 0.95.1-broken-compiler (OS: linux-gnu, ARCH: i386, CPU: i686)
Feb 11 01:46:18 mail clamd[26816]: Log file size limited to 20971520 bytes.
Feb 11 01:46:18 mail clamd[26816]: Reading databases from /opt/zimbra/data/clamav/db
Feb 11 01:46:18 mail clamd[26816]: Not loading PUA signatures.
Feb 11 01:46:18 mail clamd[26816]: Malformed database

site:zimbra.com +"Malformed database" - Yahoo! Search Results