sigtool --list=/path/daily.cld is returning:
ERROR: listdb: Error listing database /tmp/clamav-0348baa027819612194d4bd1d7aed9d0.tmp/daily.ldb ERROR: listdb: Malformed pattern line 52912 (file /tmp/clamav-0348baa027819612194d4bd1d7aed9d0.tmp/daily.ldb) extracting daily.ldb with sigtool --unpack-current=daily and finding line 52912 with sed shows: sed -ne '52912p' daily.ldb Doc.Trojan.Agent-6923124-0;Engine:51-255,Target:2;0&1&2&3&4&5&6&7;424f617547596379616f6b795a69614d5563795375646167496245745968203d2053776974636828424f617547596379616f6b795a69614d5563795375646167496245745968203c20312c20227a4f614f706962796175434966416a6968416469776f72222c20424f617547596379616f6b795a69614d5563795375646167496245745968203e20322c2022446957415657596b59466578222c20424f617547596379616f6b795a69614d5563795375646167496245745968203c20352c2043566566595265535576596e4f44416a4879526f58202b2022716f674f5179565645485547656d45662229;4759487a6174695a4150414a79724f774f76554661534174495a6167596b654d41647962416a6a5973203d20537769746368284759487a6174695a4150414a79724f774f76554661534174495a6167596b654d41647962416a6a5973203c20342c20224c4978756741616543497844494e45222c204759487a6174695a4150414a79724f774f76554661534174495a6167596b654d41647962416a6a5973203e20322c202248454778414e6954614a222c204759487a6174695a4150414a79724f774f76554661534174495a6167596b654d41647962416a6a5973203c20342c2074694655644f6 3794e6942757645436b596a61506168202b2022425967754e45744f776f546f4d6543692229;48594455775557555055775574796165685574203d20435661722835202b2038202b203329;486f757220226c614e5567657a4172615a6943497261636922202b202268686f6875776b494122;4c4f534f4e596261516f62203d20435661722839202b2035202b20313029;6945786d6f545577555643614c597679584f62455441706567754b59524f78203d2032;72697a6f76414a41486f68654665487570754265764944656375454379203d2038;7a6948557141444976616d5969557759786157654e6947556f4741446157614475526f56754865203d2039 cut and paste has added a line break above but this sig looks OK on first glance sigtool --find-sigs Doc.Trojan.Agent-6923124-0 | sigtool --decode-sigs shows sensible output for the above signature, so I am not sure this is the exact one causing the sigtool error. The problem started from database version 25410 upgrade , so it appears one (or more) sigs are Malformed in 25410 ClamAV 0.100.2/25410/Fri Apr 5 17:58:26 2019 David Shrimpton _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
