ClamWin Free Antivirus :: View topic - Clamd.log ERROR: reload_th: Database load failed: Malformed

Posted: Tue Jul 27, 2021 5:51 am

Hi,

I've been monitoring the clamd.log for my email server this past few weeks and I've seen errors like this everyday.

Code:

Sat Jul 24 17:34:53 2021 -> SelfCheck: Database status OK.
Sat Jul 24 17:44:53 2021 -> SelfCheck: Database status OK.
Sat Jul 24 17:54:53 2021 -> SelfCheck: Database status OK.
Sat Jul 24 18:04:53 2021 -> SelfCheck: Database status OK.
Sat Jul 24 18:22:43 2021 -> SelfCheck: Database status OK.
Sat Jul 24 18:39:25 2021 -> SelfCheck: Database status OK.
Sat Jul 24 18:49:25 2021 -> SelfCheck: Database status OK.
Sat Jul 24 19:08:27 2021 -> SelfCheck: Database status OK.
Sat Jul 24 19:18:27 2021 -> SelfCheck: Database status OK.
Sat Jul 24 19:28:27 2021 -> SelfCheck: Database modification detected. Forcing reload.
Sat Jul 24 19:28:27 2021 -> Reading databases from C:\ProgramData\.clamwin\db
Sat Jul 24 19:28:39 2021 -> ERROR: reload_th: Database load failed: Malformed database
Sat Jul 24 19:28:40 2021 -> WARNING: Database reload failed, keeping the previous instance
Sat Jul 24 19:38:40 2021 -> SelfCheck: Database status OK.
Sat Jul 24 19:48:40 2021 -> SelfCheck: Database status OK.
Sat Jul 24 20:08:29 2021 -> SelfCheck: Database status OK.
Sat Jul 24 20:18:29 2021 -> SelfCheck: Database status OK.
Sat Jul 24 20:35:23 2021 -> SelfCheck: Database status OK.
Sat Jul 24 20:45:23 2021 -> SelfCheck: Database status OK.
Sat Jul 24 20:56:29 2021 -> SelfCheck: Database status OK.
Sat Jul 24 21:06:29 2021 -> SelfCheck: Database status OK.
Sat Jul 24 21:16:29 2021 -> SelfCheck: Database status OK.
Sat Jul 24 21:26:29 2021 -> SelfCheck: Database status OK.
Sat Jul 24 21:36:29 2021 -> SelfCheck: Database status OK.

ClamUpdateLog.txt says:

Code:

ClamAV update process started at Sat Jul 24 19:19:00 2021
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.103.2 Recommended version: 0.103.3
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
daily database available for update (local version: 26241, remote version: 26242)
Testing database: 'C:\ProgramData\.clamwin\db\tmp.5c43b1ecb8\clamav-632317d6ea0ad37e91e81295e905073d.tmp-daily.cld' ...
Database test passed.
daily.cld updated (version: 26242, sigs: 1963537, f-level: 90, builder: raynman)
main.cvd database is up-to-date (version: 61, sigs: 6607162, f-level: 90, builder: sigmgr)
bytecode.cvd database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2)
--------------------------------------
ClamAV update process started at Sun Jul 25 16:36:47 2021
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.103.2 Recommended version: 0.103.3
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
daily database available for update (local version: 26242, remote version: 26243)
Testing database: 'C:\ProgramData\.clamwin\db\tmp.fb09daa860\clamav-7d3f7a7d0ecf2b67df3ef7ed1de0cc43.tmp-daily.cld' ...
Database test passed.
daily.cld updated (version: 26243, sigs: 1963769, f-level: 90, builder: raynman)
main.cvd database is up-to-date (version: 61, sigs: 6607162, f-level: 90, builder: sigmgr)
bytecode.cvd database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2)

Deleted daily.cld/main.cvd and downloaded with a new copy from clamwin website. After 24hrs of monitoring, the error occured again after the update. I'm not sure if this is normal or what.

clamd.log

Code:

Mon Jul 26 18:58:41 2021 -> SelfCheck: Database status OK.
Mon Jul 26 19:08:42 2021 -> SelfCheck: Database status OK.
Mon Jul 26 19:18:42 2021 -> SelfCheck: Database status OK.
Mon Jul 26 19:28:42 2021 -> SelfCheck: Database modification detected. Forcing reload.
Mon Jul 26 19:28:42 2021 -> Reading databases from C:\ProgramData\.clamwin\db
Mon Jul 26 19:28:55 2021 -> ERROR: reload_th: Database load failed: Malformed database
Mon Jul 26 19:28:56 2021 -> WARNING: Database reload failed, keeping the previous instance

clamUpdate log

Code:

ClamAV update process started at Mon Jul 26 19:19:00 2021
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.103.2 Recommended version: 0.103.3
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
daily database available for update (local version: 26243, remote version: 26244)
Testing database: 'C:\ProgramData\.clamwin\db\tmp.d9f25da0b7\clamav-014be9f588f4d9ebe492edad93a97db3.tmp-daily.cld' ...
Database test passed.
daily.cld updated (version: 26244, sigs: 1964055, f-level: 90, builder: raynman)
main.cvd database is up-to-date (version: 61, sigs: 6607162, f-level: 90, builder: sigmgr)
bytecode.cvd database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2)

Posted: Tue Jul 27, 2021 5:09 pm

First, make sure you are using the latest version of ClamWin, which is version 0.103.2.1.

Are you using any databases that do not come from Clam AV? I saw recently that Clam AV is no longer supporting any of the Sane Security databases so don't use them any more. I do use some of my own signatures, in the Clam AV supported format for mdb and hdb signatures, and I don't have any problem with them.

Regards,

Posted: Sat Jul 31, 2021 4:25 pm

Yes I am using the latest version of clamwin.The DB is from the latest clamAV as well, the error occured when the DB is being updated. I really don't know why this error keeps occuring every time clamwin DB is being updated.

Posted: Sat Jul 31, 2021 5:11 pm

Okay. I thought it might be because you have some signatures that are not supported by Clam AV.

Copy all the Clam AV database files and put them somewhere else just in case this doesn't work... Then delete all the files in the ClamWin database folder and do a manual update. I have to do this a couple of times a year and it works for me.

Regards,

Posted: Mon Aug 09, 2021 2:23 pm

Hello!

Did he try to uninstall the current ClamWin version and download the ClamWin no database version?

This is the download link for it!
https://sourceforge.net/projects/clamwin/files/clamwin/0.103.2.1/clamwin-0.103.2.1-setup-nodb.exe/download

Posted: Mon Aug 09, 2021 3:36 pm

Good idea! It's been about a week now without any post, so hopefully the problem is fixed.

Thanks for using ClamWin all these years! I wish they would improve it, but it appears unlikely.

Regards,

Posted: Thu Aug 12, 2021 1:19 pm

GuitarBob wrote:

Good idea! It's been about a week now without any post, so hopefully the problem is fixed.

Thanks for using ClamWin all these years! I wish they would improve it, but it appears unlikely.

Regards,

You are welcome!