[clamav-users] LibClamAV Error: cli_ac_addsig: Signature for Win.Worm.Fadok-6328944-0 is too short

[Al Varnell]

Smartest thing to do would be to update to the current 0.99.2 scan engine.

But you must have missed the discussion from yesterday which ended with:

> From: David Raynor <draynor at sourcefire.com>
> Subject: Re: [clamav-users] daily-23474 & daily-23475 updates are failing to load
> Date: June 15, 2017 at 8:42:32 AM PDT
> To: ClamAV users ML <clamav-users at lists.clamav.net>
> 
> Thanks for reporting it. That signature is marked with the wrong "Engine"
> limits, so that error message only affects some point releases of 0.98. We
> are dropping that signature in the next daily CVD and will add a
> replacement later.
> 
> To work around the trouble, you can add the "Win.Worm.Fadok-6328944-0" to a
> local ign2 file in the same directory as the daily.cvd or daily.cld and any
> affected ClamAV versions will load properly.
> 
> Dave R.

-Al-

On Fri, Jun 16, 2017 at 02:07 AM, Cervinka, Andreas wrote:
> 
> I got the following Problem since yesterday:
> 
> ----
> LibClamAV Error: cli_ac_addsig: Signature for Win.Worm.Fadok-6328944-0 is too short
> LibClamAV Error: cli_parse_add(): Problem adding signature (3).
> LibClamAV Error: Problem parsing database at line 2793
> LibClamAV Error: Can't load daily.ldb: Malformed database
> LibClamAV Error: cli_tgzload: Can't load daily.ldb
> LibClamAV Error: Can't load /var/lib/clamav/daily.cvd: Malformed database
> ----
> 
> I restored older files in the /var/lib/clamav directory and the scans completed successfully.
> Has anyone got an idea how to solve this issue?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3569 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20170616/7f8f1abd/attachment.bin>