[clamav-win32] Clamd terminating (Malformed database)

[Phil (Medway Hosting)]

----- Original Message ----- 
From: "Phil (Medway Hosting)" <phil at medwayhosting.com>
To: <clamav-win32 at lists.clamav.net>
Sent: Friday, August 22, 2008 5:27 PM
Subject: Re: [clamav-win32] Clamd terminating (Malformed database)


> So - that's that problem solved - now to simply wait
> to see if it bombs again !!

Hi Folks

Ok - it DID bomb again :-(

Sun Aug 24 07:33:41 2008 -> SelfCheck: Database modification detected.
Forcing reload.
Sun Aug 24 07:33:41 2008 -> Reading databases from C:\Program
Files\clamAV\data
Sun Aug 24 07:33:41 2008 -> d:\Merak Mail\temp\200808240733390102.tmp: OK
Sun Aug 24 07:34:05 2008 -> Database correctly reloaded (400852 signatures)
Sun Aug 24 09:01:04 2008 -> SelfCheck: Database modification detected.
Forcing reload.
Sun Aug 24 09:01:04 2008 -> Reading databases from C:\Program
Files\clamAV\data
Sun Aug 24 09:01:04 2008 -> d:\Merak Mail\temp\200808240901020103.tmp: OK
Sun Aug 24 09:01:30 2008 -> ERROR: reload db failed: Malformed database
Sun Aug 24 09:01:30 2008 -> Terminating because of a fatal error.
Sun Aug 24 09:01:30 2008 -> Shutting down the main socket.
Sun Aug 24 09:01:30 2008 -> Closing the main socket.
Sun Aug 24 09:01:30 2008 -> --- Stopped at Sun Aug 24 09:01:30 2008

First question - Why might it be detecting database modifications when
freshclam hasn't been run ?
2nd - Why does it start up quite happily again after it detected "Malformed
database" ?

Also when it bombs, only clamd fails but srvany.exe doesn't. Is there a way
to force srvany.exe to fail if it's child process fails ? because the system
won't recover and restart clamd all the time srvany.exe is running.

Many thanks

Phil


_____________________________________________

Website Hosting from only £5.00 per month.
www.medwayhosting.com - +44 (0)1634 856965
_____________________________________________

Digital & Traditional Printing, and much more
www.medwayprint.com - +44 (0)1634 281199
_____________________________________________