[clamav-users] Memory Allocation error, clamd stop running

[Jorge Elissalde]

Hi,

These are the last lines of the log, -the interesting part I think-

WARNING: File path check failure for:
C:\Users\jorge\AppData\Roaming\Mozilla\Firefox\Profiles\aoic9o0z.default-1503790200264\AlternateServices-223.txt
Quarantine of the file may fail if file path contains symlinks.
WARNING: File path check failure on: C:\Windows\System32\services.exe
WARNING: File path check failure on:
C:\Users\jorge\AppData\Roaming\Mozilla\Firefox\Profiles\aoic9o0z.default-1503790200264\AlternateServices-223.txt
calloc_problem: Not enough space
LibClamAV Error: cli_calloc(): Can't allocate memory (65013504 bytes).
calloc_problem: Not enough space
LibClamAV Error: cli_ac_init: Can't allocate memory for
data->lsigsuboff_(last|first)[0]
LibClamAV Error: cli_calloc(): Can't allocate memory (65013504 bytes).
LibClamAV Error: cli_ac_init: Can't allocate memory for data->lsigcnt[0]
C:\Clamav\clamd.exe: Can't allocate memory ERROR
C:\src\Anticrap\AnticrapManager\x64\Debug\AnticrapManager.exe: Can't
allocate memory ERROR
C:\Program Files (x86)\Microsoft Visual
Studio\2017\Professional\Common7\IDE\devenv.exe: OK
C:\Program Files (x86)\Microsoft Visual
Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe:
OK
calloc_problem: Not enough space
LibClamAV Error: cli_calloc(): Can't allocate memory (65013504 bytes).
LibClamAV Error: cli_ac_init: Can't allocate memory for
data->lsigsuboff_(last|first)[0]
C:\Windows\SysWOW64\cmd.exe: Can't allocate memory ERROR
C:\Users\jorge\AppData\Roaming\Mozilla\Firefox\Profiles\aoic9o0z.default-1503790200264\AlternateServices.txt:
OK
C:\Users\jorge\AppData\Roaming\Mozilla\Firefox\Profiles\aoic9o0z.default-1503790200264\AlternateServices.txt:
OK
C:\Program Files (x86)\Microsoft Visual
Studio\2017\Professional\Common7\IDE\Remote Debugger\x64\msvsmon.exe: OK
calloc_problem: Not enough space
LibClamAV Error: cli_calloc(): Can't allocate memory (65013504 bytes).
LibClamAV Error: cli_ac_init: Can't allocate memory for
data->lsigsuboff_(last|first)[0]
C:\Windows\SysWOW64\mmc.exe: Can't allocate memory ERROR
C:\Windows\SysWOW64\fc.exe: OK
C:\Windows\SysWOW64\mmc.exe: OK

Thank you

Jorge


El mié, 7 dic 2022 a las 18:43, Andy Ragusa (aragusa) via clamav-users (<
clamav-users at lists.clamav.net>) escribió:

> Hi Jorge,
>
> Is it a particular file that is being scanned when this happens?
>
> Could you please send clamd's logs to help determine what is going on?
>
> Thanks,
> Andy
> ------------------------------
> *From:* clamav-users <clamav-users-bounces at lists.clamav.net> on behalf of
> Jorge Elissalde via clamav-users <clamav-users at lists.clamav.net>
> *Sent:* Wednesday, December 7, 2022 3:41 PM
> *To:* ClamAV users ML <clamav-users at lists.clamav.net>
> *Cc:* Jorge Elissalde <elissalde.j.e at gmail.com>
> *Subject:* [clamav-users] Memory Allocation error, clamd stop running
>
> Hi,
>
> I'm using the latest Windows Clamav version (1.0.0).
> I'm connected to clamd and I request a folder scan having 94,249 files,
> 10GB total.
> The command I send is MULTISCAN [folder].
> When scanner is over 9,075 files it stops working and the message is:
>
> memory allocation of 1048576 bytes failed
>
> Clamd stop running.
> I'm running with next relevant settings in clamd.conf:
>
> MaxThreads 6
> ScanArchive yes
> MaxScanSize 20M
> MaxFileSize 10M
> MaxFiles 150
> MaxRecursion 10
>
> The same test with the older 0.105 Clamav version works without trouble
> using the same parameters.
> What could be happening there?
> Thank you
>
> Jorge
>
>
> _______________________________________________
>
> Manage your clamav-users mailing list subscription / unsubscribe:
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20221208/686b6abd/attachment.htm>