0.98.4.1/windows

WARNING: DNS Resolver: Can't query current.cvd.clamav.net
WARNING: Invalid DNS reply. Falling back to HTTP mode.
Connecting via <PROXY SERVER IP>
Reading CVD header (main.cvd): OK
main.cld is up to date (version: 55, sigs: 2424225, f-level: 60, builder: neo)
Connecting via <PROXY SERVER IP>
Reading CVD header (daily.cvd): OK (IMS)
daily.cld is up to date (version: 19346, sigs: 1098863, f-level: 63, builder: dgoddard)
Connecting via <PROXY SERVER IP>
Reading CVD header (bytecode.cvd): OK (IMS)
bytecode.cld is up to date (version: 242, sigs: 46, f-level: 63, builder: dgoddard)
[LibClamAV] **************************************************
[LibClamAV] *** The virus database is older than 7 days! ***
[LibClamAV] *** Please update it as soon as possible. ***
[LibClamAV] **************************************************


I didn't get latest update for about several weeks.
Is this just me?

Looks like something is blocking the update. Is your firewall set to allow connections from ClamAV update servers? Also, do you use any proxy/VPN services or a third party DNS IP?

> Is your firewall set to allow connections from ClamAV update servers?
Yes. : https://bugzilla.clamav.net/show_bug.cgi?id=11137

Normally a simple uninstall and reinstall will fix most issues. If not, make sure nothing is blocking it (proxies, VPNs, firewall, other anti-virus, HIPS, etc). Anything with the update servers not working would be on ClamAV's side. Maybe GuitarBob can help you out better then me.

Check your calendar/clock to make sure it is showing the correct date/time. That can also prevent an update.

Just in case malware is preventing an update, see if you can download/install Malwarebytes free version of their antimalware. Update it and then do a Quick Scan. That will find/clean most current malware. Keep it around for further use. Get back to us here with your results.

Regards,

>Check your calendar/clock to make sure it is showing the correct date/time
This server is a public NTP server. Of course, this is OK.

And also, this is not a virus issue.
This problem happens suddenly though.

So, these versions are latest one or not?
Version 55; 19346; 242

I open my definition folder, and delete all of these files.
^
bytecode.cld
daily.cld
main.cld


Empty? Now let's update again.
Right-click "ClamTray" >> "Download Virus DB Update"


Connecting via <PROXY>
Downloading main.cvd [100%]
Downloading main.cvd [100%]
main.cvd updated (version: 55, sigs: 2424225, f-level: 60, builder: neo)
Connecting via <PROXY>
Downloading daily.cvd [100%]
Downloading daily.cvd [100%]
daily.cvd updated (version: 19346, sigs: 1098863, f-level: 63, builder: dgoddard)
Connecting via <PROXY>
Downloading bytecode.cvd [100%]
Downloading bytecode.cvd [100%]
bytecode.cvd updated (version: 242, sigs: 46, f-level: 63, builder: dgoddard)
[LibClamAV] **************************************************
[LibClamAV] *** The virus database is older than 7 days! ***
[LibClamAV] *** Please update it as soon as possible. ***
[LibClamAV] **************************************************
Database updated (3523134 signatures) from database.clamav.net


Okay... Now restart it again.


WARNING: DNS Resolver: Can't query current.cvd.clamav.net
WARNING: Invalid DNS reply. Falling back to HTTP mode.
Connecting via <PROXY>
Reading CVD header (main.cvd): OK
main.cvd is up to date (version: 55, sigs: 2424225, f-level: 60, builder: neo)
Connecting via <PROXY>
Reading CVD header (daily.cvd): OK (IMS)
daily.cvd is up to date (version: 19346, sigs: 1098863, f-level: 63, builder: dgoddard)
Connecting via <PROXY>
Reading CVD header (bytecode.cvd): OK (IMS)
bytecode.cvd is up to date (version: 242, sigs: 46, f-level: 63, builder: dgoddard)
[LibClamAV] **************************************************
[LibClamAV] *** The virus database is older than 7 days! ***
[LibClamAV] *** Please update it as soon as possible. ***
[LibClamAV] **************************************************


Now I have these files in "definition" folder;

bytecode.cvd
daily.cvd
main.cvd
mirrors.dat

Not CID, these are CVD.
What now?

Those 4 files are what you should have in the ClamWin database folder. If they contain data, I think you are okay.

Regards,

This might be something you want to bring up at ClamAV support, considering ClamWin runs off the ClamAV scan engine and database, that's including ClamAV update servers. I assume there is probably a bug in one of their update servers.