[clamav-users] error files in /

[Micah Snyder (micasnyd)]

Hi Jeff,

I think you may have run into this issue with ClamOnAcc's --log=FILE​ option https://github.com/Cisco-Talos/clamav/issues/168
[https://opengraph.githubassets.com/01d4084328497840588425d18c0f5249e974f585a8ac9032deb27d05b62835dd/Cisco-Talos/clamav/issues/168]<https://github.com/Cisco-Talos/clamav/issues/168>
Files with cryptic names get written in / (unix root) · Issue #168 · Cisco-Talos/clamav<https://github.com/Cisco-Talos/clamav/issues/168>
Describe the bug On Debian/Ubuntu 20.04+ files with cryptic names get written in / (unix root): -rw-r----- 1 root root 0 Jun 8 13:54 ''$'\\006''1'$'\\375\\226\\035''...
github.com
I don't know what the exact source of the bug is, but it should go away if you don't use the --log​ option.

Regards,
Micah


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.
________________________________
From: clamav-users <clamav-users-bounces at lists.clamav.net> on behalf of Hoevenaar, Jeffrey (GE Aviation, US) via clamav-users <clamav-users at lists.clamav.net>
Sent: Wednesday, May 4, 2022 4:51 AM
To: clamav-users at lists.clamav.net <clamav-users at lists.clamav.net>
Cc: Hoevenaar, Jeffrey (GE Aviation, US) <Jeffrey.Hoevenaar at ge.com>
Subject: [clamav-users] error files in /


I am getting these strange files in the root file system “/” on my linux servers.



-rw-r-----.   1 root root    98 Apr 13 08:00 @??E?U

-rw-r-----.   1 root root    75 Apr 26 08:00 @g6??U

-rw-r-----.   1 root root    75 Apr  1 08:00 @g)$?U





The files contain the error message.



ERROR: ClamClient: Connection to clamd failed, Couldn't resolve host name.

ClamScanQueue: stopped





I believe it is occurring when the clam services are restarted each day.



Any idea how to route these errors messages elsewhere?



Thanks,

Jeff Hoevenaar


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20220504/0c4f8c10/attachment.htm>