Re: [clamav-users] about ”Can't allocate memory ERROR”

[Micah Snyder (micasnyd) via clamav-users]

Hi Tsutomu, all,

I would like to clarify one thing from this message in regard to our support 
policy.  ClamAV 0.103 is still supported by LTS, which means we continue to 
provide patch versions.  ClamAV 0.103.4 is still able to download signatures 
but is not​ supported for bug fixes.  You should stay up to date with the 
latest patch version for the 0.103 release, which as of yesterday is 0.103.8.

If the bug still exists in 0.103.8 (and in this case, it probably does still 
exist), then we could try to fix it for 1.1 and perhaps 0.103.9.  But even for 
LTS version we can't promise to backport every bug fix.  We only put a priority 
on severe bugs.  All other fixes only go into the next feature version, which 
will be ClamAV 1.1.  I realize that because Rust support for AIX is incomplete, 
you're effectively stuck on 0.103, so perhaps we should place a priority on 
backporting these specific issues if we can find and fix them.  But I maybe 
should also point out that 0.103 LTS end of life is Sep-14 2023, which is just 
under 7 months out.  That's a little awkward.  I'm not sure what else to say 
there.


In regard to the specific errors you're seeing, they appear to be when scanning 
EXE/DLL and JAR files, and appear to be specific to AIX, which I believe is a 
big-endian system.  I suspect this represents 1 or 2 big endian compatibility 
bugs.

I suspect that the EXE/DLL errors may be fixed by this PR: 
https://github.com/Cisco-Talos/clamav/pull/814  But I can't be sure without 
setting up a big endian test environment and scanning these files.
I think I found a couple versions of one of these files, through VirusTotal: 
https://www.virustotal.com/gui/search/name%253Alwiservice.exe
Scanning these on my little endian Linux machine didn't result in an error 
though, which was expected.

I suspect that the JAR errors may be an endianness issue as well, but someone 
would need to debug them and find out where the error happens exactly.

You are welcome to create a Github Issue and attach the affected files for 
investigation, or provide links to them.

Regards,
Micah


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.

From: clamav-users  on behalf of Tsutomu 
Oyamada 
Sent: Thursday, February 9, 2023 5:51 AM
To: ClamAV users ML 
Subject: Re: [clamav-users] about ”Can't allocate memory ERROR”

Hi, Andy.

Thanks for your reply.

I am aware that version 0.103.4 is still supported by LTS.
Some of the scan logs for this time are shown below.

[2023-01-12 19:03:11.015] Thu Jan 12 10:23:19 2023 - /esa/bin/lwiservice.exe: 
Can't allocate memory ERROR
[2023-01-12 19:03:11.015] Thu Jan 12 10:23:19 2023 - 
/esa/bin/lwiserviceicon.exe: Can't allocate memory ERROR
[2023-01-12 19:03:11.015] Thu Jan 12 10:23:19 2023 - 
/esa/bin/lwiserviceiconremove.exe: Can't allocate memory ERROR
[2023-01-12 19:03:11.015] Thu Jan 12 10:23:50 2023 - 
/esa/runtime/core/eclipse/features/com.ibm.lwi.application.feature_8.1.0.3-LWI/installHandler.jar:
 Can't allocate memory ERROR
[2023-01-12 19:03:11.015] Thu Jan 12 10:25:26 2023 - 
/esa/runtime/core/eclipse/plugins/com.ibm.rcp.base_6.2.1.20091117-1800/win32/x86/eclipse_1114.dll:
 Can't allocate memory ERROR
[2023-01-12 19:03:11.015] Thu Jan 12 10:26:22 2023 - 
/esa/runtime/core/eclipse/plugins/org.eclipse.core.filesystem.win32.x86_1.1.0.v20080604-1400.jar:
 Can't allocate memory ERROR
[2023-01-12 19:03:11.015] Thu Jan 12 10:26:23 2023 - 
/esa/runtime/core/eclipse/plugins/org.eclipse.core.resources.win32.x86_3.4.0.v20071204.jar:
 Can't allocate memory ERROR
[2023-01-12 19:03:11.015] Thu Jan 12 10:26:34 2023 - 
/esa/runtime/core/eclipse/plugins/org.eclipse.equinox.security.win32.x86_1.0.0.v20080529-1600/jnicrypt.dll:
 Can't allocate memory ERROR
[2023-01-12 19:03:11.031] Thu Jan 12 10:26:46 2023 - 
/esa/runtime/core/eclipse/plugins/org.eclipse.update.core.win32_3.2.100.v20080107.jar:
 Can't allocate memory ERROR
[2023-01-12 19:03:11.031] Thu Jan 12 10:33:08 2023 - 
/opt/IBM/ibm-java-ppc64-60/docs/launchpad/ScriptLauncher.exe: Can't allocate 
memory ERROR
[2023-01-12 19:03:11.031] Thu Jan 12 10:33:13 2023 - 
/opt/IBM/ibm-java-ppc64-60/docs/launchpad.exe: Can't allocate memory ERROR

Nearly 150 other files are in the same state.

Also, my system is AIX. Does that have an effect?
I would like to try it with the latest version.

Thanks,
T.O

On Wed, 1 Feb 2023 21:11:01 +
"Andy Ragusa \(aragusa\) via clamav-users"  
wrote:

> Hi,
>
> That version is pretty old, have you tried using version 1.0?
>
> When I opened that zip file, I am only seeing the following (no log files)
>
> com.ibm.websphere.LIBERTY.shared_013_all.all_x_8.5.5003.201407301652.zip
> lwiservice.exe
> NativeFile.dll
> org.eclipse.core.filesystem.win32.x86_1.1.0.v20070510.jar
>
> Thanks,
> Andy
>
> 
> From: clamav-users  on behalf of 
> Tsutomu Oyamada 
> Sent: Wednesday, February 1, 2023 8:36 AM
> To: ClamAV users ML 
> Subject: [clamav-users] about ”Can't 

Re: [clamav-users] Strange Problem when trying update after reboot (Ubuntu 22.04.1 ClamAV 0.103.6)

[newcomer01 via clamav-users]

Hi,

What if your use of the 'host' command returns NXDOMAIN in you script

this can't usualy be, this command returns the descriptive txt for the current 
remote version of libaries.
For example, the current value (inside the curly braces): { current.cvd.clamav.net 
descriptive text "0.103.8:62:26814:1676572140:1:90:49192:333" }



Von / From: Paul Netpresto 
An / To: Newcomer01 
Gesendet / Sent: Donnerstag, Februar 16, 2023 um 18:45 (at 06:45 PM) +0100
Betreff / Subject: Re: [clamav-users] Strange Problem when trying update after 
reboot (Ubuntu 22.04.1 ClamAV 0.103.6)

Hi

it would appear your calling your script before the network and dns are
up and working.

What if your use of the 'host' command returns NXDOMAIN in you script .

Paul


On 16/02/2023 17:23, newcomer01 via clamav-users wrote:

yes, unfortunately i use the ClamAV (0.103.6) which are available for
Ubuntu 22.04. 1 LTS
Please try so simple as possible to explain what this code should do
and for what i need to run?

% ls -ld
/etc/systemd/system/multi-user.target.wants/clamav-freshclam.service
/lib/systemd/system/clamav-freshclam.service
lrwxrwxrwx 1 root root  44 Jun 23  2018
/etc/systemd/system/multi-user.target.wants/clamav-freshclam.service
-> /lib/systemd/system/clamav-freshclam.service
-rw-r--r-- 1 root root 412 Aug 21 21:28
/lib/systemd/system/clamav-freshclam.service

kind regards
Marc


Von / From: Matus Uhlar - Fantomas 
An / To: Newcomer01 
Gesendet / Sent: Donnerstag, Februar 16, 2023 um 16:47 (at 04:47 PM)
+0100
Betreff / Subject: Re: [clamav-users] Strange Problem when trying
update after reboot (Ubuntu 22.04.1 ClamAV 0.103.6)

On 16.02.23 15:13, newcomer01 via clamav-users wrote:

i know, i have asked the same thing before some weeks.
But i will post this again.
When i fresh reboot my Ubuntu 22.04.1 at morning my script test at
first if dns is available and only if it is, it starts the download
from clamav sig-files.
But when i do this, i got this error messages:


Thu Feb 16 08:06:11 2023 -> ClamAV update process started at Thu
Feb 16 08:06:11 2023
Thu Feb 16 08:06:11 2023 -> WARNING: Can't query
current.cvd.clamav.net
Thu Feb 16 08:06:11 2023 -> WARNING: Invalid DNS reply. Falling
back to HTTP mode.
Thu Feb 16 08:06:11 2023 -> Trying to retrieve CVD header from
https://database.clamav.net/daily.cvd
Thu Feb 16 08:06:11 2023 -> WARNING: remote_cvdhead: Download
failed (6) Thu Feb 16 08:06:11 2023 -> WARNING: Message: Couldn't
resolve host name
Thu Feb 16 08:06:11 2023 -> WARNING: Failed to get daily database
version information from server: https://database.clamav.net
Thu Feb 16 08:06:11 2023 -> ERROR: check_for_new_database_version:
Failed to find daily database using server
https://database.clamav.net.
Thu Feb 16 08:06:11 2023 -> Trying again in 5 secs...
Thu Feb 16 08:06:16 2023 -> Trying to retrieve CVD header from
https://database.clamav.net/daily.cvd
Thu Feb 16 08:06:16 2023 -> WARNING: remote_cvdhead: Download
failed (6) Thu Feb 16 08:06:16 2023 -> WARNING: Message: Couldn't
resolve host name
Thu Feb 16 08:06:16 2023 -> WARNING: Failed to get daily database
version information from server: https://database.clamav.net
Thu Feb 16 08:06:16 2023 -> ERROR: check_for_new_database_version:
Failed to find daily database using server
https://database.clamav.net.

this looks like the DNS lookups are not vailable, no matter what your
check
says.


Thu Feb 16 08:06:16 2023 -> Trying again in 5 secs...
Thu Feb 16 08:06:21 2023 -> Trying to retrieve CVD header from
https://database.clamav.net/daily.cvd
Thu Feb 16 08:06:21 2023 -> OK
Thu Feb 16 08:06:21 2023 -> daily database available for download
(remote version: 26813)
Thu Feb 16 08:06:30 2023 -> Testing database:
'/var/lib/clamav/tmp.a828aef201/clamav-83875921b32bc900edab2d0ee431fcad.tmp-daily.cvd'
...
Thu Feb 16 08:06:37 2023 -> Database test passed.
Thu Feb 16 08:06:37 2023 -> daily.cvd updated (version: 26813,
sigs: 2020949, f-level: 90, builder: raynman)
Thu Feb 16 08:06:37 2023 -> Trying to retrieve CVD header from
https://database.clamav.net/main.cvd
Thu Feb 16 08:06:37 2023 -> OK
Thu Feb 16 08:06:37 2023 -> main database available for download
(remote version: 62)
Thu Feb 16 08:07:04 2023 -> Testing database:
'/var/lib/clamav/tmp.a828aef201/clamav-35347411896e0523e7b74f2c91338b97.tmp-main.cvd'
...
Thu Feb 16 08:07:10 2023 -> Database test passed.
Thu Feb 16 08:07:10 2023 -> main.cvd updated (version: 62, sigs:
6647427, f-level: 90, builder: sigmgr)
Thu Feb 16 08:07:10 2023 -> Trying to retrieve CVD header from
https://database.clamav.net/bytecode.cvd
Thu Feb 16 08:07:10 2023 -> OK
Thu Feb 16 08:07:10 2023 -> bytecode database available for
download (remote version: 333)
Thu Feb 16 08:07:11 2023 -> Testing database:
'/var/lib/clamav/tmp.a828aef201/clamav-2f58bc478b2afd84ba98c4d288a63ac1.tmp-bytecode.cvd'
...
Thu Feb 16 08:07:11 2023 -> Database test passed.
Thu F

Re: [clamav-users] Strange Problem when trying update after reboot (Ubuntu 22.04.1 ClamAV 0.103.6)

[Paul Netpresto]

Hi

it would appear your calling your script before the network and dns are 
up and working.


What if your use of the 'host' command returns NXDOMAIN in you script .

Paul


On 16/02/2023 17:23, newcomer01 via clamav-users wrote:
yes, unfortunately i use the ClamAV (0.103.6) which are available for 
Ubuntu 22.04. 1 LTS
Please try so simple as possible to explain what this code should do 
and for what i need to run?
% ls -ld 
/etc/systemd/system/multi-user.target.wants/clamav-freshclam.service 
/lib/systemd/system/clamav-freshclam.service
lrwxrwxrwx 1 root root  44 Jun 23  2018 
/etc/systemd/system/multi-user.target.wants/clamav-freshclam.service 
-> /lib/systemd/system/clamav-freshclam.service
-rw-r--r-- 1 root root 412 Aug 21 21:28 
/lib/systemd/system/clamav-freshclam.service

kind regards
Marc


Von / From: Matus Uhlar - Fantomas 
An / To: Newcomer01 
Gesendet / Sent: Donnerstag, Februar 16, 2023 um 16:47 (at 04:47 PM) 
+0100
Betreff / Subject: Re: [clamav-users] Strange Problem when trying 
update after reboot (Ubuntu 22.04.1 ClamAV 0.103.6)

On 16.02.23 15:13, newcomer01 via clamav-users wrote:

i know, i have asked the same thing before some weeks.
But i will post this again.
When i fresh reboot my Ubuntu 22.04.1 at morning my script test at 
first if dns is available and only if it is, it starts the download 
from clamav sig-files.

But when i do this, i got this error messages:

Thu Feb 16 08:06:11 2023 -> ClamAV update process started at Thu 
Feb 16 08:06:11 2023
Thu Feb 16 08:06:11 2023 -> WARNING: Can't query 
current.cvd.clamav.net
Thu Feb 16 08:06:11 2023 -> WARNING: Invalid DNS reply. Falling 
back to HTTP mode.
Thu Feb 16 08:06:11 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/daily.cvd
Thu Feb 16 08:06:11 2023 -> WARNING: remote_cvdhead: Download 
failed (6) Thu Feb 16 08:06:11 2023 -> WARNING: Message: Couldn't 
resolve host name
Thu Feb 16 08:06:11 2023 -> WARNING: Failed to get daily database 
version information from server: https://database.clamav.net
Thu Feb 16 08:06:11 2023 -> ERROR: check_for_new_database_version: 
Failed to find daily database using server 
https://database.clamav.net.

Thu Feb 16 08:06:11 2023 -> Trying again in 5 secs...
Thu Feb 16 08:06:16 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/daily.cvd
Thu Feb 16 08:06:16 2023 -> WARNING: remote_cvdhead: Download 
failed (6) Thu Feb 16 08:06:16 2023 -> WARNING: Message: Couldn't 
resolve host name
Thu Feb 16 08:06:16 2023 -> WARNING: Failed to get daily database 
version information from server: https://database.clamav.net
Thu Feb 16 08:06:16 2023 -> ERROR: check_for_new_database_version: 
Failed to find daily database using server 
https://database.clamav.net.
this looks like the DNS lookups are not vailable, no matter what your 
check

says.


Thu Feb 16 08:06:16 2023 -> Trying again in 5 secs...
Thu Feb 16 08:06:21 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/daily.cvd

Thu Feb 16 08:06:21 2023 -> OK
Thu Feb 16 08:06:21 2023 -> daily database available for download 
(remote version: 26813)
Thu Feb 16 08:06:30 2023 -> Testing database: 
'/var/lib/clamav/tmp.a828aef201/clamav-83875921b32bc900edab2d0ee431fcad.tmp-daily.cvd' 
...

Thu Feb 16 08:06:37 2023 -> Database test passed.
Thu Feb 16 08:06:37 2023 -> daily.cvd updated (version: 26813, 
sigs: 2020949, f-level: 90, builder: raynman)
Thu Feb 16 08:06:37 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/main.cvd

Thu Feb 16 08:06:37 2023 -> OK
Thu Feb 16 08:06:37 2023 -> main database available for download 
(remote version: 62)
Thu Feb 16 08:07:04 2023 -> Testing database: 
'/var/lib/clamav/tmp.a828aef201/clamav-35347411896e0523e7b74f2c91338b97.tmp-main.cvd' 
...

Thu Feb 16 08:07:10 2023 -> Database test passed.
Thu Feb 16 08:07:10 2023 -> main.cvd updated (version: 62, sigs: 
6647427, f-level: 90, builder: sigmgr)
Thu Feb 16 08:07:10 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/bytecode.cvd

Thu Feb 16 08:07:10 2023 -> OK
Thu Feb 16 08:07:10 2023 -> bytecode database available for 
download (remote version: 333)
Thu Feb 16 08:07:11 2023 -> Testing database: 
'/var/lib/clamav/tmp.a828aef201/clamav-2f58bc478b2afd84ba98c4d288a63ac1.tmp-bytecode.cvd' 
...

Thu Feb 16 08:07:11 2023 -> Database test passed.
Thu Feb 16 08:07:11 2023 -> bytecode.cvd updated (version: 333, 
sigs: 92, f-level: 63, builder: awillia2)

Thu Feb 16 09:46:56 2023 -> --

there seems to be no issue further.


Is there another way to solve the issue?
Current i have set an sleep 60 to work arround.

do you use clamav that comes with ubuntu?

try running:

% ls -ld 
/etc/systemd/system/multi-user.target.wants/clamav-freshclam.service 
/lib/systemd/system/clamav-freshclam.service
lrwxrwxrwx 1 root root  44 Jun 23  2018 
/etc/systemd/system/multi-user.target.wants/clamav-freshclam.servic

Re: [clamav-users] Strange Problem when trying update after reboot (Ubuntu 22.04.1 ClamAV 0.103.6)

[newcomer01 via clamav-users]

yes, unfortunately i use the ClamAV (0.103.6) which are available for Ubuntu 
22.04. 1 LTS
Please try so simple as possible to explain what this code should do and for 
what i need to run?

% ls -ld /etc/systemd/system/multi-user.target.wants/clamav-freshclam.service 
/lib/systemd/system/clamav-freshclam.service
lrwxrwxrwx 1 root root  44 Jun 23  2018 
/etc/systemd/system/multi-user.target.wants/clamav-freshclam.service -> 
/lib/systemd/system/clamav-freshclam.service
-rw-r--r-- 1 root root 412 Aug 21 21:28 
/lib/systemd/system/clamav-freshclam.service

kind regards
Marc


Von / From: Matus Uhlar - Fantomas 
An / To: Newcomer01 
Gesendet / Sent: Donnerstag, Februar 16, 2023 um 16:47 (at 04:47 PM) +0100
Betreff / Subject: Re: [clamav-users] Strange Problem when trying update after 
reboot (Ubuntu 22.04.1 ClamAV 0.103.6)

On 16.02.23 15:13, newcomer01 via clamav-users wrote:

i know, i have asked the same thing before some weeks.
But i will post this again.
When i fresh reboot my Ubuntu 22.04.1 at morning my script test at first if dns 
is available and only if it is, it starts the download from clamav sig-files.
But when i do this, i got this error messages:


Thu Feb 16 08:06:11 2023 -> ClamAV update process started at Thu Feb 16 
08:06:11 2023
Thu Feb 16 08:06:11 2023 -> WARNING: Can't query current.cvd.clamav.net
Thu Feb 16 08:06:11 2023 -> WARNING: Invalid DNS reply. Falling back to HTTP 
mode.
Thu Feb 16 08:06:11 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/daily.cvd
Thu Feb 16 08:06:11 2023 -> WARNING: remote_cvdhead: Download failed (6) Thu Feb 
16 08:06:11 2023 -> WARNING:  Message: Couldn't resolve host name
Thu Feb 16 08:06:11 2023 -> WARNING: Failed to get daily database version 
information from server: https://database.clamav.net
Thu Feb 16 08:06:11 2023 -> ERROR: check_for_new_database_version: Failed to 
find daily database using server https://database.clamav.net.
Thu Feb 16 08:06:11 2023 -> Trying again in 5 secs...
Thu Feb 16 08:06:16 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/daily.cvd
Thu Feb 16 08:06:16 2023 -> WARNING: remote_cvdhead: Download failed (6) Thu Feb 
16 08:06:16 2023 -> WARNING:  Message: Couldn't resolve host name
Thu Feb 16 08:06:16 2023 -> WARNING: Failed to get daily database version 
information from server: https://database.clamav.net
Thu Feb 16 08:06:16 2023 -> ERROR: check_for_new_database_version: Failed to 
find daily database using server https://database.clamav.net.

this looks like the DNS lookups are not vailable, no matter what your check
says.


Thu Feb 16 08:06:16 2023 -> Trying again in 5 secs...
Thu Feb 16 08:06:21 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/daily.cvd
Thu Feb 16 08:06:21 2023 -> OK
Thu Feb 16 08:06:21 2023 -> daily database available for download (remote 
version: 26813)
Thu Feb 16 08:06:30 2023 -> Testing database: 
'/var/lib/clamav/tmp.a828aef201/clamav-83875921b32bc900edab2d0ee431fcad.tmp-daily.cvd'
 ...
Thu Feb 16 08:06:37 2023 -> Database test passed.
Thu Feb 16 08:06:37 2023 -> daily.cvd updated (version: 26813, sigs: 2020949, 
f-level: 90, builder: raynman)
Thu Feb 16 08:06:37 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/main.cvd
Thu Feb 16 08:06:37 2023 -> OK
Thu Feb 16 08:06:37 2023 -> main database available for download (remote 
version: 62)
Thu Feb 16 08:07:04 2023 -> Testing database: 
'/var/lib/clamav/tmp.a828aef201/clamav-35347411896e0523e7b74f2c91338b97.tmp-main.cvd'
 ...
Thu Feb 16 08:07:10 2023 -> Database test passed.
Thu Feb 16 08:07:10 2023 -> main.cvd updated (version: 62, sigs: 6647427, 
f-level: 90, builder: sigmgr)
Thu Feb 16 08:07:10 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/bytecode.cvd
Thu Feb 16 08:07:10 2023 -> OK
Thu Feb 16 08:07:10 2023 -> bytecode database available for download (remote 
version: 333)
Thu Feb 16 08:07:11 2023 -> Testing database: 
'/var/lib/clamav/tmp.a828aef201/clamav-2f58bc478b2afd84ba98c4d288a63ac1.tmp-bytecode.cvd'
 ...
Thu Feb 16 08:07:11 2023 -> Database test passed.
Thu Feb 16 08:07:11 2023 -> bytecode.cvd updated (version: 333, sigs: 92, 
f-level: 63, builder: awillia2)
Thu Feb 16 09:46:56 2023 -> --

there seems to be no issue further.


Is there another way to solve the issue?
Current i have set an sleep 60 to work arround.

do you use clamav that comes with ubuntu?

try running:

% ls -ld /etc/systemd/system/multi-user.target.wants/clamav-freshclam.service 
/lib/systemd/system/clamav-freshclam.service
lrwxrwxrwx 1 root root  44 Jun 23  2018 
/etc/systemd/system/multi-user.target.wants/clamav-freshclam.service -> 
/lib/systemd/system/clamav-freshclam.service
-rw-r--r-- 1 root root 412 Aug 21 21:28 
/lib/systemd/system/clamav-freshclam.service

the clamav-freshclam.service should contain the line
"After=network-online.target"




This is the first act

Re: [clamav-users] Strange Problem when trying update after reboot (Ubuntu 22.04.1 ClamAV 0.103.6)

[Matus UHLAR - fantomas]

On 16.02.23 15:13, newcomer01 via clamav-users wrote:

i know, i have asked the same thing before some weeks.
But i will post this again.
When i fresh reboot my Ubuntu 22.04.1 at morning my script test at first if dns 
is available and only if it is, it starts the download from clamav sig-files.
But when i do this, i got this error messages:


Thu Feb 16 08:06:11 2023 -> ClamAV update process started at Thu Feb 16 
08:06:11 2023
Thu Feb 16 08:06:11 2023 -> WARNING: Can't query current.cvd.clamav.net
Thu Feb 16 08:06:11 2023 -> WARNING: Invalid DNS reply. Falling back to HTTP 
mode.
Thu Feb 16 08:06:11 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/daily.cvd
Thu Feb 16 08:06:11 2023 -> WARNING: remote_cvdhead: Download failed (6) Thu Feb 
16 08:06:11 2023 -> WARNING:  Message: Couldn't resolve host name
Thu Feb 16 08:06:11 2023 -> WARNING: Failed to get daily database version 
information from server: https://database.clamav.net
Thu Feb 16 08:06:11 2023 -> ERROR: check_for_new_database_version: Failed to 
find daily database using server https://database.clamav.net.
Thu Feb 16 08:06:11 2023 -> Trying again in 5 secs...
Thu Feb 16 08:06:16 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/daily.cvd
Thu Feb 16 08:06:16 2023 -> WARNING: remote_cvdhead: Download failed (6) Thu Feb 
16 08:06:16 2023 -> WARNING:  Message: Couldn't resolve host name
Thu Feb 16 08:06:16 2023 -> WARNING: Failed to get daily database version 
information from server: https://database.clamav.net
Thu Feb 16 08:06:16 2023 -> ERROR: check_for_new_database_version: Failed to 
find daily database using server https://database.clamav.net.


this looks like the DNS lookups are not vailable, no matter what your check 
says.



Thu Feb 16 08:06:16 2023 -> Trying again in 5 secs...
Thu Feb 16 08:06:21 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/daily.cvd
Thu Feb 16 08:06:21 2023 -> OK
Thu Feb 16 08:06:21 2023 -> daily database available for download (remote 
version: 26813)
Thu Feb 16 08:06:30 2023 -> Testing database: 
'/var/lib/clamav/tmp.a828aef201/clamav-83875921b32bc900edab2d0ee431fcad.tmp-daily.cvd'
 ...
Thu Feb 16 08:06:37 2023 -> Database test passed.
Thu Feb 16 08:06:37 2023 -> daily.cvd updated (version: 26813, sigs: 2020949, 
f-level: 90, builder: raynman)
Thu Feb 16 08:06:37 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/main.cvd
Thu Feb 16 08:06:37 2023 -> OK
Thu Feb 16 08:06:37 2023 -> main database available for download (remote 
version: 62)
Thu Feb 16 08:07:04 2023 -> Testing database: 
'/var/lib/clamav/tmp.a828aef201/clamav-35347411896e0523e7b74f2c91338b97.tmp-main.cvd'
 ...
Thu Feb 16 08:07:10 2023 -> Database test passed.
Thu Feb 16 08:07:10 2023 -> main.cvd updated (version: 62, sigs: 6647427, 
f-level: 90, builder: sigmgr)
Thu Feb 16 08:07:10 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/bytecode.cvd
Thu Feb 16 08:07:10 2023 -> OK
Thu Feb 16 08:07:10 2023 -> bytecode database available for download (remote 
version: 333)
Thu Feb 16 08:07:11 2023 -> Testing database: 
'/var/lib/clamav/tmp.a828aef201/clamav-2f58bc478b2afd84ba98c4d288a63ac1.tmp-bytecode.cvd'
 ...
Thu Feb 16 08:07:11 2023 -> Database test passed.
Thu Feb 16 08:07:11 2023 -> bytecode.cvd updated (version: 333, sigs: 92, 
f-level: 63, builder: awillia2)
Thu Feb 16 09:46:56 2023 -> --


there seems to be no issue further.


Is there another way to solve the issue?
Current i have set an sleep 60 to work arround.


do you use clamav that comes with ubuntu?

try running:

% ls -ld /etc/systemd/system/multi-user.target.wants/clamav-freshclam.service 
/lib/systemd/system/clamav-freshclam.service
lrwxrwxrwx 1 root root  44 Jun 23  2018 
/etc/systemd/system/multi-user.target.wants/clamav-freshclam.service -> 
/lib/systemd/system/clamav-freshclam.service
-rw-r--r-- 1 root root 412 Aug 21 21:28 
/lib/systemd/system/clamav-freshclam.service

the clamav-freshclam.service should contain the line
"After=network-online.target"




This is the first act of my script before I try to download signatures:


        if [ "$(host -W 60 -t TXT "current.cvd.clamav.net")" != "" ]; then

            # standardwert fuer libs update std - 2
            LIBS_UPD_STD="2"

            # standardwert fuer libs uli std - 5
            LIBS_ULI_STD="5"

            # update anstossen - 1 oder 0
            START_FRESHCLAM="1"

            # setze wert fuer netzwerkverbindung - 0 nicht vorhanden, 1 
vorhanden
            NETZWERK_VORHANDEN="1"

        # falls nicht innerhalb von xx sekunden der descriptive txt geholt 
werden kann
        elif [ "$(host -W 60 -t TXT "current.cvd.clamav.net")" = "" ]; then

            # standardwert fuer libs update std - 2
            LIBS_UPD_STD="2"

            # standardwert fuer libs uli std - 5
            LIBS_ULI_STD="5"

            # update anstossen - 1 oder 0
            START_FRESHCLAM="0

[clamav-users] Strange Problem when trying update after reboot (Ubuntu 22.04.1 ClamAV 0.103.6)

[newcomer01 via clamav-users]

Hi @ all,

i know, i have asked the same thing before some weeks.
But i will post this again.
When i fresh reboot my Ubuntu 22.04.1 at morning my script test at first if dns 
is available and only if it is, it starts the download from clamav sig-files.
But when i do this, i got this error messages:


Thu Feb 16 08:06:11 2023 -> ClamAV update process started at Thu Feb 16 
08:06:11 2023
Thu Feb 16 08:06:11 2023 -> WARNING: Can't query current.cvd.clamav.net
Thu Feb 16 08:06:11 2023 -> WARNING: Invalid DNS reply. Falling back to HTTP 
mode.
Thu Feb 16 08:06:11 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/daily.cvd
Thu Feb 16 08:06:11 2023 -> WARNING: remote_cvdhead: Download failed (6) Thu Feb 
16 08:06:11 2023 -> WARNING:  Message: Couldn't resolve host name
Thu Feb 16 08:06:11 2023 -> WARNING: Failed to get daily database version 
information from server: https://database.clamav.net
Thu Feb 16 08:06:11 2023 -> ERROR: check_for_new_database_version: Failed to 
find daily database using server https://database.clamav.net.
Thu Feb 16 08:06:11 2023 -> Trying again in 5 secs...
Thu Feb 16 08:06:16 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/daily.cvd
Thu Feb 16 08:06:16 2023 -> WARNING: remote_cvdhead: Download failed (6) Thu Feb 
16 08:06:16 2023 -> WARNING:  Message: Couldn't resolve host name
Thu Feb 16 08:06:16 2023 -> WARNING: Failed to get daily database version 
information from server: https://database.clamav.net
Thu Feb 16 08:06:16 2023 -> ERROR: check_for_new_database_version: Failed to 
find daily database using server https://database.clamav.net.
Thu Feb 16 08:06:16 2023 -> Trying again in 5 secs...
Thu Feb 16 08:06:21 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/daily.cvd
Thu Feb 16 08:06:21 2023 -> OK
Thu Feb 16 08:06:21 2023 -> daily database available for download (remote 
version: 26813)
Thu Feb 16 08:06:30 2023 -> Testing database: 
'/var/lib/clamav/tmp.a828aef201/clamav-83875921b32bc900edab2d0ee431fcad.tmp-daily.cvd'
 ...
Thu Feb 16 08:06:37 2023 -> Database test passed.
Thu Feb 16 08:06:37 2023 -> daily.cvd updated (version: 26813, sigs: 2020949, 
f-level: 90, builder: raynman)
Thu Feb 16 08:06:37 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/main.cvd
Thu Feb 16 08:06:37 2023 -> OK
Thu Feb 16 08:06:37 2023 -> main database available for download (remote 
version: 62)
Thu Feb 16 08:07:04 2023 -> Testing database: 
'/var/lib/clamav/tmp.a828aef201/clamav-35347411896e0523e7b74f2c91338b97.tmp-main.cvd'
 ...
Thu Feb 16 08:07:10 2023 -> Database test passed.
Thu Feb 16 08:07:10 2023 -> main.cvd updated (version: 62, sigs: 6647427, 
f-level: 90, builder: sigmgr)
Thu Feb 16 08:07:10 2023 -> Trying to retrieve CVD header from 
https://database.clamav.net/bytecode.cvd
Thu Feb 16 08:07:10 2023 -> OK
Thu Feb 16 08:07:10 2023 -> bytecode database available for download (remote 
version: 333)
Thu Feb 16 08:07:11 2023 -> Testing database: 
'/var/lib/clamav/tmp.a828aef201/clamav-2f58bc478b2afd84ba98c4d288a63ac1.tmp-bytecode.cvd'
 ...
Thu Feb 16 08:07:11 2023 -> Database test passed.
Thu Feb 16 08:07:11 2023 -> bytecode.cvd updated (version: 333, sigs: 92, 
f-level: 63, builder: awillia2)
Thu Feb 16 09:46:56 2023 -> --


Is there another way to solve the issue?
Current i have set an sleep 60 to work arround.

This is the first act of my script before I try to download signatures:


        if [ "$(host -W 60 -t TXT "current.cvd.clamav.net")" != "" ]; then

            # standardwert fuer libs update std - 2
            LIBS_UPD_STD="2"

            # standardwert fuer libs uli std - 5
            LIBS_ULI_STD="5"

            # update anstossen - 1 oder 0
            START_FRESHCLAM="1"

            # setze wert fuer netzwerkverbindung - 0 nicht vorhanden, 1 
vorhanden
            NETZWERK_VORHANDEN="1"

        # falls nicht innerhalb von xx sekunden der descriptive txt geholt 
werden kann
        elif [ "$(host -W 60 -t TXT "current.cvd.clamav.net")" = "" ]; then

            # standardwert fuer libs update std - 2
            LIBS_UPD_STD="2"

            # standardwert fuer libs uli std - 5
            LIBS_ULI_STD="5"

            # update anstossen - 1 oder 0
            START_FRESHCLAM="0"

            # setze wert fuer netzwerkverbindung - 0 nicht vorhanden, 1 
vorhanden
            NETZWERK_VORHANDEN="0"

        fi


and only when "$NETZWERK_VORHANDEN" -eq "1" (NETZWERK_VORHANDEN is german = 
NETWORK_AVAILABLE) I start update (what is this time), but it seems that clamav CDN have a problem 
in case.
But why?
My code checks if dns from current.cvd.clamav.net  is available and starts, but 
freshclam says can't resolve host name.

kind regards
Marc
___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:

Re: [clamav-users] about ”Can't allocate memory ERROR”

[Matus UHLAR - fantomas]

On 16.02.23 21:41, Tsutomu Oyamada wrote:

I also tried it with ClamAV 0.104.2.
I got an error as well.

# clamscan /home/cecuser/lwiservice.exe
Loading:20s, ETA:   0s [>]8.65M/8.65M sigs
Compiling:   5s, ETA:   0s [>]   41/41 tasks

calloc_problem: Not enough space
LibClamAV Error: cli_calloc(): Can't allocate memory (66256128 bytes).
calloc_problem: Not enough space
LibClamAV Error: cli_calloc(): Can't allocate memory (66256128 bytes).
LibClamAV Error: cli_ac_init: Can't allocate memory for 
data->lsigsuboff_(last|first)[0]
/home/cecuser/lwiservice.exe: Can't allocate memory ERROR



ClamAV 0.104.2/26814/Thu Feb 16 03:40:04 2023

After all, isn't something wrong?



you seem not to have enough ov memory on your system.
How much RAM do you have and how much is used?

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"Two words: Windows survives." - Craig Mundie, Microsoft senior strategist
"So does syphillis. Good thing we have penicillin." - Matthew Alton
___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Re: [clamav-users] about ”Can't allocate memory ERROR”

[Tsutomu Oyamada]

Hi,

I also tried it with ClamAV 0.104.2.
I got an error as well.

# clamscan /home/cecuser/lwiservice.exe
Loading:20s, ETA:   0s [>]8.65M/8.65M sigs
Compiling:   5s, ETA:   0s [>]   41/41 tasks

calloc_problem: Not enough space
LibClamAV Error: cli_calloc(): Can't allocate memory (66256128 bytes).
calloc_problem: Not enough space
LibClamAV Error: cli_calloc(): Can't allocate memory (66256128 bytes).
LibClamAV Error: cli_ac_init: Can't allocate memory for 
data->lsigsuboff_(last|first)[0]
/home/cecuser/lwiservice.exe: Can't allocate memory ERROR

--- SCAN SUMMARY ---
Known viruses: 8652920
Engine version: 0.104.2
Scanned directories: 0
Scanned files: 0
Infected files: 0
Total errors: 1
Data scanned: 0.00 MB
Data read: 0.15 MB (ratio 0.00:1)
Time: 27.111 sec (0 m 27 s)
Start Date: 2023:02:16 07:35:28
End Date:   2023:02:16 07:35:55
# freshclam -V
ClamAV 0.104.2/26814/Thu Feb 16 03:40:04 2023

After all, isn't something wrong?

On Thu, 9 Feb 2023 15:06:16 + (GMT)
Andrew C Aitchison via clamav-users  wrote:

> 
> On Thu, 9 Feb 2023, Tsutomu Oyamada wrote:
> 
> > Hi, Andy.
> >
> > Thanks for your reply.
> >
> > I am aware that version 0.103.4 is still supported by LTS.
> 
> 0.103.4 came out in Nov 2021.
> The current supported versions include 0.103.7 from July 2022.
> 
> > Also, my system is AIX. Does that have an effect?
> > I would like to try it with the latest version.
> 
> > From 0.104 onwards ClamAV uses Rust.
> Rust on AIX appears to be a work in progress:
> https://github.com/rust-lang/compiler-team/issues/553
> 
> -- Andrew C. Aitchison  Kendal, UK
> and...@aitchison.me.uk
> ___
> 
> Manage your clamav-users mailing list subscription / unsubscribe:
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
> 
> https://docs.clamav.net/#mailing-lists-and-chat


___

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat