You just made me look aroud the system some more. I found this script called freshclam in /etc/cron.daily.
/bin/touch -a /var/lib/clamav/*.cvd /usr/sbin/tmpwatch 72 /var/lib/clamav Is this what is causing the problem? If so, do I delete the file? Thanks, Mark On 11/22/10, Török Edwin <[email protected]> wrote: > On Mon, 22 Nov 2010 07:10:55 -0500 > neidorff <[email protected]> wrote: > >> I'm running clamav 0.96.4 (updated yesterday, Nov 21) with qmail and >> qmailscanner. Since last week, the following error has appeared in >> /var/log/messages at the same time each day: >> >> Nov 22 04:04:16 neidorff clamd[14843]: SelfCheck: Database >> modification detected. Forcing reload. >> Nov 22 04:04:17 neidorff clamd[14843]: Reading databases >> from /var/lib/clamav Nov 22 04:04:17 neidorff clamd[14843]: reload db >> failed: Broken or not a CVD file >> Nov 22 04:04:17 neidorff clamd[14843]: Terminating because of a fatal >> error. Nov 22 04:04:17 neidorff clamd[14843]: Pid file removed. >> Nov 22 04:04:17 neidorff clamd[14843]: --- Stopped at Mon Nov 22 >> 04:04:17 2010 >> >> After this event, I find a zero length file called *.cvd (the * is not >> a wildcard, it is part of the actual filename). If I rm the file >> *.cvd the I can start clamd manually. Otherwise, clamd does not >> start. Logs give no more information. >> >> What is causing this error and how can I fix it? (currently, I have a >> script as a part of root's crontab that rm's the *.cvd file and then >> starts clamd. I'd like to fix the problem instead of working around >> it.) > > Are you using only freshclam to update the database, or a script to > update the 3rdparty signatures too? > > Best regards, > --Edwin > _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
