There evidently is a problem. The ClamWin developers are aware of it--see site admin post above from Alch. As Xzone9 said, until it is addressed, revert back to version .97.6 as necessary.

Regards,

.97.7 does not update even from fresh install, reverted back to .97.6 again.

Regards

I am also having this issue (Vista 64 bit here). Sadly I am unable to revert. I uninstalled 97.7 but when I try install 97.6 I get "a newer version is installed and setup has cancelled. Now I can only install 97.7 which won't download definitions. :/ I tried to find the registry keys, but so far haven't found any that are refereed. I also don't find any remnants in the programs folder. Any ideas?

Uninstalling ClamWin is not a real big deal. I don't believe there are any registry keys associated with ClamWin. There are several ways to uninstall it. One way is via Windows Start, Control Panel, Programs & Features, right click ClamWin. Another way is via Windows Start, All Programs, left click ClamWin, uninstall. If these don't work, you can try deleting everything inside the ClamWin folder via Windows Explorer, righclick ClamWin folder, then delete the folder after all files are deleted, and if you then try to uninstall via Start, Control Panel, Programs & features, right click ClamWin, Windows should tell you it is not installed and ask if you want to delete the desktop icon.

If nothing works, try uninstalling ClamWin in Windows Safe Mode (hit F8 key repeatedly upon starting up until the Safe Mode menu appears, select Safe Mode With Networking, then uninstall via Start, Control Panel, Programs & Features, right click ClamWin.

Regards,

That's odd. Uninstall should have cleaned up the registry. Go to registry editor and delete:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ClamWin
HKEY_CURRENT_USER\Software\ClamWin (if present)

Then it should reinstall

Bob, yes I uninstalled via control panel. Reinstalled 97.7 then uninstalled again. Still nothing. There are no folders in the locations mentioned, that is the first thing I checked. I knew where it was installed and nothing there. I did a search and couldn't find it so I assumed it was a regestry key left behind for some reason. I didn't try installing when in safe mode as usually if there is a regestry key it still will give the same error.

Thanks Alch! That was the key I was looking for. I never looked in Wow6432Node. I checked all the other usual places though. Deleting that one did the trick.

One side note though, after installing and doing the database update I got:

ClamAV update process started at Tue Apr 23 10:06:02 2013
main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
WARNING: getfile: daily-15420.cdiff not found on remote server (IP: 194.8.197.22)
WARNING: getpatch: Can't download daily-15420.cdiff from database.clamav.net
WARNING: getfile: daily-15420.cdiff not found on remote server (IP: 208.69.120.84)
WARNING: getpatch: Can't download daily-15420.cdiff from database.clamav.net
WARNING: getfile: daily-15420.cdiff not found on remote server (IP: 155.98.64.87)
WARNING: getpatch: Can't download daily-15420.cdiff from database.clamav.net
Downloading daily.cvd [100%]
Downloading daily.cvd [100%]
WARNING: Mirror 69.12.162.28 is not synchronized.
Trying again in 5 secs...
ClamAV update process started at Tue Apr 23 10:09:22 2013
main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
WARNING: getfile: daily-15420.cdiff not found on remote server (IP: 64.22.33.90)
WARNING: getpatch: Can't download daily-15420.cdiff from database.clamav.net
WARNING: getfile: daily-15420.cdiff not found on remote server (IP: 128.177.8.248)
WARNING: getpatch: Can't download daily-15420.cdiff from database.clamav.net
WARNING: getfile: daily-15420.cdiff not found on remote server (IP: 194.8.197.22)
WARNING: getpatch: Can't download daily-15420.cdiff from database.clamav.net
Downloading daily.cvd [100%]
Downloading daily.cvd [100%]
daily.cvd updated (version: 17069, sigs: 1147100, f-level: 63, builder: neo)
Downloading bytecode-191.cdiff [100%]
Downloading bytecode-191.cdiff [100%]
Downloading bytecode-192.cdiff [100%]
Downloading bytecode-192.cdiff [100%]
Downloading bytecode-193.cdiff [100%]
Downloading bytecode-193.cdiff [100%]
Downloading bytecode-194.cdiff [100%]
Downloading bytecode-194.cdiff [100%]
Downloading bytecode-195.cdiff [100%]
Downloading bytecode-195.cdiff [100%]
Downloading bytecode-196.cdiff [100%]
Downloading bytecode-196.cdiff [100%]
Downloading bytecode-197.cdiff [100%]
Downloading bytecode-197.cdiff [100%]
Downloading bytecode-198.cdiff [100%]
Downloading bytecode-198.cdiff [100%]
Downloading bytecode-199.cdiff [100%]
Downloading bytecode-199.cdiff [100%]
Downloading bytecode-200.cdiff [100%]
Downloading bytecode-200.cdiff [100%]
Downloading bytecode-201.cdiff [100%]
Downloading bytecode-201.cdiff [100%]
Downloading bytecode-202.cdiff [100%]
Downloading bytecode-202.cdiff [100%]
Downloading bytecode-203.cdiff [100%]
Downloading bytecode-203.cdiff [100%]
Downloading bytecode-204.cdiff [100%]
Downloading bytecode-204.cdiff [100%]
Downloading bytecode-205.cdiff [100%]
Downloading bytecode-205.cdiff [100%]
Downloading bytecode-206.cdiff [100%]
Downloading bytecode-206.cdiff [100%]
Downloading bytecode-207.cdiff [100%]
Downloading bytecode-207.cdiff [100%]
Downloading bytecode-208.cdiff [100%]
Downloading bytecode-208.cdiff [100%]
Downloading bytecode-209.cdiff [100%]
Downloading bytecode-209.cdiff [100%]
Downloading bytecode-210.cdiff [100%]
Downloading bytecode-210.cdiff [100%]
Downloading bytecode-211.cdiff [100%]
Downloading bytecode-211.cdiff [100%]
Downloading bytecode-212.cdiff [100%]
Downloading bytecode-212.cdiff [100%]
Downloading bytecode-213.cdiff [100%]
Downloading bytecode-213.cdiff [100%]
Downloading bytecode-214.cdiff [100%]
Downloading bytecode-214.cdiff [100%]
bytecode.cld updated (version: 214, sigs: 41, f-level: 63, builder: neo)
Database updated (2191528 signatures) from database.clamav.net (IP: 64.22.33.90)

--------------------------------------
Completed
--------------------------------------

So it is not happy but still works Also when doing the "Downloading daily.cvd" it was really slow and took several minutes. Also a bit odd it downloaded it three times.

I see some funny things myself when downloading sometimes, but the download usually go okay. Sometimes the mirrors are not synched up, which prevents a download. There are always 2 entries to each daily download. When I boot up in the morning, my daily DB goes away if I have missed several signature updates overnight when the computer is turned off, but ClamWin always tells me I need to update.

Clam AV may not have quite enough mirrors now for the number of users between Clam/ClamWin--I see Clam has asked for users with space on dependable servers to volunteer as a mirror. Of course, the automated signatures mean more volume for each update, and I guess that adds up.

Regards,

Any idea when this bug will be fixed so we won't have to deal with bad uninstalls, virus update downloads not working etc?

ClamAV (not ClamWin) 0.97.8 is out, so... wait and see!
Note that you may also join the happy RC testers team.

Alch will be away for most of May, so if there is no version .97.8 RC by the first couple of days in May, we will probably have to wait until June. I do not know if the update problems will be addressed anyway. Clam only released version .97.8 to take care of some more security bugs, which will probably not affect users unless they have specially-crafted files on their computers.

Regards,

log file snippet:

ClamAV update process started at Thu May 02 09:14:02 2013
Using IPv6 aware code
TTL: 608
Software version from DNS: 0.97.8
main.cvd version from DNS: 54
main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
daily.cvd version from DNS: 17129
Retrieving https://database.clamav.net/daily-17103.cdiff
WARNING: Can't get information about database.clamav.net: Non-recoverable failure in name resolution
WARNING: getpatch: Can't download daily-17103.cdiff from database.clamav.net


I'm running ClamWin updates on 4 servers, only having issues on the Windows Server 2008 R2 box. It is running IIS. My updates are scripted, and run in the middle of the night (after midnite California), not all at the same time. All servers are located in datacenters with good connectivity. Firewall on the box and on the network have been checked. It was working flawlessly with 97.6 and on the Windows Server 2003 boxes with 97.6, 97.7 and 97.8. All of the servers have identical configs and scripting code.

What I have tried without success:
changing the DNS servers and checking DNS resolution on the box
adding freshclam.exe to Windows Firewall exceptions
changing the user running the task to one with Admin rights
running the task with highest privileges
freshclamparams = --no-dns
freshclamparams = --no-dns yes
upping the database timeout to 60 sec
using the .us. mirror

I'm out of things to try. Any suggestions would be appreciated.

Otto

I see you are using IPV6 code. That's a new one on me. Perhaps that is your problem, since DNS appears to be involved. ClamWin hasn't been specifically set up for either IPV6 or Windows 8. It also has no specific accommodation code for networks.

Regards,

"Using IPv6 aware code" has been in the logfiles since 2013-02-04, when the system was first commissioned. Engine version at that time was 97.6. Still in the logs with 97.7 and 97.8.

IPv6 is not enabled on either the Windows 2008 or Windows 2003 servers. I have done nothing to enable it in the freshclam config either.

I've spent about 4 years as a Server 2003 admin, and about 1.5 years on Server 2008. 2008 is extremely picky with permissions, to the point of being annoying.

I'm pretty sure that the problem is with permissions, but running the script with high privileges has no benefit. Opening the firewall for freshclam.exe has no effect either.

I get the following ERROR message. What do I do about it?
ERROR: Can't rename C:\ProgramData\.clamwin\db\clamav-eab6c3f57777c357fe7fd2f7744ed2c8.000007fc.clamtmp\clamav-03ab2557c3a2d137b3822a0ab409c9d6.000007fc.cla.cld to daily.cld: File exists

I think that is a "housekeeping" notice. As ClamWin downloads signatures, it uses temporary files (clamtmp). It looks to me like the messages just says that it can't rename a temporary file because there is already one there with that name. You can probably just ignore this, and it will be taken care of in the next "housekeeping" operation. I sometimes just delete those funny names in my ClamWin database folder. All you really need are the database files for bytecode signatures, daily signatures, main signatures, and mirrors.

ClamWin also uses temp files as it is scanning, but they are put in temporary folders elsewhere on your computer.

Regards,