[clamav-win32] Clamd terminating (Malformed database)

[Phil (Medway Hosting)]

----- Original Message ----- 
From: "Paul Whelan" <Paul+cv at blakecomp.co.uk>
To: <clamav-win32 at lists.clamav.net>
Sent: Tuesday, August 26, 2008 7:26 PM
Subject: Re: [clamav-win32] Clamd terminating (Malformed database)


> clamd does a check as set in clamd.conf (selfcheck) - default 1800
(30mins).  Has
> anything else got rights to those data files that might stop clamd reading
them?

Not that I am aware. Very little running on that machine at all. Merak Mail
Server, Clamd, Serv-U Ftp Server, Process Explorer - that's it.

> Any
> disk problems in system event log?

None whatsoever. All I get is:

Event Type: Error
Event Source: clamd
Event Category: None
Event ID: 1
Date:  24/08/2008
Time:  09:01:30
User:  N/A
Computer: FTPSERVER
Description:
reload db failed: Malformed database

> It's strange too, that it reads the db just before
> processing a mail file, and then fails. How do you run freshclam - on a
schedule?

At the moment freshclam isn't scheduled at all. Manual run only - I tend to
only set up one new thing at a time - leave it running a few weeks, then try
the next thng.

>
> > 2nd - Why does it start up quite happily again after it detected
"Malformed
> > database" ?
>
> It's misreporting the error?

I have restarted it with "Debug yes" to see if that gives any extra info.

> Don't you want the service to restart automatically?  If not run clamd
manually without
> srvany.  (There are other service wrappers like firedaemon, srvstart,
ntwrapper, but I'm
> not sure if any of them can be set to stop if the app fails.)

Yes I do want it to restart, but at the moment srvany.exe stays running when
clamd crashes, so the service does not get restarted. I will probably try
Brett's suggestion if I can't actually stop it crashing.

A question - In the description I found on how to set Clamd up as a service
for Merak
(http://linuxforum.icewarp.com/viewtopic.php?t=2183&sid=2460433938d2f2cbe503
571e80fc8ebf) it said the following:

==================================================
C:\Program Files\Windows Resource Kits\Tools\instsrv ClamAV "C:\Program
Files\Windows Resource Kits\Tools\srvany.exe"

Edit the registry entry for your custom service.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ClamAV

Make a Key called "Parameters". From the Edit menu, click Add Key. Type the
following and click OK:

Key Name: Parameters
Class : <leave blank>

Select the Parameters key.