ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
New Clam AV Signature Database
GuitarBob


Joined: 09 Jul 2006
Posts: 4335
Location: USA
Reply with quote
It looks like Clam AV has integrated the daily database into the main database and also did some pruning of the main database. ClamWin scans should now be a bit faster for everyone because of this.

Regards,
View user's profileSend private message
hubbabubba


Joined: 19 Aug 2010
Posts: 13
Location: Montreal, Quebec, Canada
Reply with quote
Hi!

--------------------------------------
ClamAV update process started at Tue Sep 17 16:02:45 2013
main.cld is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
[b]Downloading daily-17868.cdiff [100%]
Downloading daily-17869.cdiff [100%]
daily.cld updated (version: 17869, sigs: 1731301, f-level: 63, builder: neo)
bytecode.cld is up to date (version: 225, sigs: 42, f-level: 63, builder: dgoddard)
Database updated (2775730 signatures) from database.clamav.net (IP: 208.70.244.158)
--------------------------------------


This was my last successful update, then followed;

--------------------------------------
ClamAV update process started at Tue Sep 17 18:42:04 2013
nonblock_connect: connect timing out (30 secs)
Can't connect to port 80 of host database.clamav.net (IP: 24.215.0.24)
Trying host database.clamav.net (200.236.31.1)...
Downloading main-55.cdiff [100%]
WARNING: [LibClamAV] cli_ndecode: value out of range
ERROR: cdiff_apply: Incorrect digital signature
ERROR: getpatch: Can't apply patch
WARNING: Incremental update failed, trying to download main.cvd
Downloading main.cvd [100%]
ERROR: Verification: Can't verify database integrity
Trying again in 5 secs...
ClamAV update process started at Tue Sep 17 18:47:29 2013
nonblock_recv: recv timing out (30 secs)
WARNING: getfile: Error while reading database from database.clamav.net (IP: 24.215.0.24): Operation already in progress
WARNING: getpatch: Can't download main-55.cdiff from database.clamav.net
WARNING: getfile: Unknown response from remote server (IP: 208.70.244.158)
WARNING: getpatch: Can't download main-55.cdiff from database.clamav.net
nonblock_recv: recv timing out (30 secs)
WARNING: getfile: Error while reading database from database.clamav.net (IP: 128.177.8.248): Operation already in progress
WARNING: getpatch: Can't download main-55.cdiff from database.clamav.net
WARNING: Incremental update failed, trying to download main.cvd
Downloading main.cvd [100%]
ERROR: Verification: Can't verify database integrity
Trying again in 5 secs...
ClamAV update process started at Tue Sep 17 18:51:04 2013
Downloading main-55.cdiff [100%]
WARNING: [LibClamAV] cli_ndecode: value out of range
ERROR: cdiff_apply: Incorrect digital signature
ERROR: getpatch: Can't apply patch
WARNING: Incremental update failed, trying to download main.cvd
Downloading main.cvd [100%]
ERROR: Verification: Can't verify database integrity
Giving up on database.clamav.net...
Update failed. Your network may be down or none of the mirrors listed in c:\windows\temp\tmpzxuscj is working. Check http://www.clamav.net/support/mirror-problem for possible reasons.
--------------------------------------


You will note that it was only 2 hours 40 minutes later on the same day; September 17. Since then, all attempts have failed. Usually. after 20-30 minutes, I let go, but last night I left the PC complete the entire charade, it took a bit more than one hour, and got this;

--------------------------------------
ClamAV update process started at Thu Sep 19 00:27:56 2013
Downloading main-55.cdiff [100%]
WARNING: [LibClamAV] cli_ndecode: value out of range
ERROR: cdiff_apply: Incorrect digital signature
ERROR: getpatch: Can't apply patch
WARNING: Incremental update failed, trying to download main.cvd
Downloading main.cvd [100%]
ERROR: Verification: Can't verify database integrity
Trying again in 5 secs...
ClamAV update process started at Thu Sep 19 00:31:13 2013
Downloading main-55.cdiff [100%]
WARNING: [LibClamAV] cli_ndecode: value out of range
ERROR: cdiff_apply: Incorrect digital signature
ERROR: getpatch: Can't apply patch
WARNING: Incremental update failed, trying to download main.cvd
Downloading main.cvd [100%]
ERROR: Verification: Can't verify database integrity
Trying again in 5 secs...
ClamAV update process started at Thu Sep 19 01:00:44 2013
Downloading main-55.cdiff [100%]
WARNING: [LibClamAV] cli_ndecode: value out of range
ERROR: cdiff_apply: Incorrect digital signature
ERROR: getpatch: Can't apply patch
WARNING: Incremental update failed, trying to download main.cvd
Downloading main.cvd [100%]
ERROR: Verification: Can't verify database integrity
Giving up on database.clamav.net...
Update failed. Your network may be down or none of the mirrors listed in c:\windows\temp\tmpcb5pnz is working. Check http://www.clamav.net/support/mirror-problem for possible reasons.
--------------------------------------


The "Downloading main-55.cdiff [100%]" and "Downloading main.cvd [100%]" messages are deceptive; in fact, the progression was about 1% every 5-10 minutes and would suddenly give 100% before reaching (I think) 10% (I was never in front of the PC when it happened).

So here I am.

I did went to the site mentioned at the end of the failed update log, was redirected to another site, and got a long list of possible tweaks and fiddlings that I was in no mood or inclination to try in the wee morning hours.

I use and old W98SE machine plugged in a dial-up modem (56 K). ClamWin version 0.97.8.

Considering that my problems started at the same time as the "new and improved" daily database of ClamAv, I see more than a simple coincidence in all of that.

Any ideas?

Regards,

POST SCRIPTUM
Stop the press!!!

Minutes after writing this message, my auto-update window flashed a "successful update". Just to be on the safe side, I updated again manually;

ClamAV update process started at Thu Sep 19 12:07:51 2013
main.cld is up to date (version: 55, sigs: 2424225, f-level: 60, builder: neo)
daily.cvd is up to date (version: 17871, sigs: 353853, f-level: 63, builder: neo)
bytecode.cld is up to date (version: 226, sigs: 43, f-level: 63, builder: neo)

--------------------------------------
Completed
--------------------------------------


That said, I don't understand what got broken and how it was repaired, but who cares? Very Happy
View user's profileSend private message
Re: New Clam AV Signature Database
tizef


Joined: 24 Feb 2012
Posts: 60
Location: France
Reply with quote
GuitarBob wrote:
It looks like Clam AV has integrated the daily database into the main database and also did some pruning of the main database.

It also looks like ClamAV 0.98 has been released on Thu 19 September:
http://lurker.clamav.net/message/20130919.190453.7177bd47.en.html
View user's profileSend private message
Re: New Clam AV Signature Database
dw2108a


Joined: 09 Mar 2009
Posts: 43
Location: Austin, TX
Reply with quote
tizef

If you're running WIN 9x, I wouldn't even bother with an AV of any kind. Time to use SSM or some other hips. Ten to one, the sigs which Clam just dumped were the ones WIN 9x needed the most. AVs are NOT for 9x now.

I do NOT use an AV with 9x/ME PCs, and I live on web pages trying to infect me -- XXXXX web sites, perv and nerd-perv posting boards, and more.

I'd think seriously about SSM (and F-PROT for DOS if you want to scan yourself, otherwise try Jotti or Virus Total).

Dave
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4335
Location: USA
Reply with quote
Clam Sentine will protect Win 98!
View user's profileSend private message
New Clam AV Signature Database
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic