UPDATE > Hello, I tried to start a directory scan with client used > clamav-0.97.7.tar.gz and fresh databases > and get the following errors (actually not from stderr but using strace): > > LibClamAV Warning: Cannot dlopen libclamunrar_iface: file not found - unrar > support unavailable > LibClamAV Warning: ************************************************** > LibClamAV Warning: *** The virus database is older than 7 days! *** > LibClamAV Warning: *** Please update it as soon as possible. *** > LibClamAV Warning: ************************************************** > LibClamAV Error: cli_loadinfo: Incorrect digital signature > LibClamAV Error: cli_loadinfo: Problem parsing database at line 20 > LibClamAV Error: Can\'t load daily.info: Malformed database > LibClamAV Error: cli_tgzload: Can\'t load daily.info > LibClamAV Error: Can\'t load /path/to/daily.cvd: Malformed database
> I do not know where it gets daily.info, assumed it's somehow packed in > daily.cvd and then it failed when tried to verify checksum in cli_versig2() > at libclamav/readdb.c. It turns out that daily.cvd just a .tar.gz file with a 512 byte header. How to convert: dd if=daily.cvd ibs=1b skip=1 > daily.tgz Line 20 from log above correspond to the last line from daily.info (packed in daily.cvd) which started from "DSIG:" mark. > Note that clamav was compiled for SPARCv8 compatible processor so for me it > looks like a byte-order problem. Actually it is not a SPARC, but a VLIW processor binary compatible with x86. At least standart byte-order check in C shows little-endian. > So my question: is clamav database byte-order dependent? Apparently nope :). Now I assume it is a gzip or a signature/checksum code problem. Investigation continues. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
