NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
jereaa
Oct 09, 2018Aspirant
Antivirus is not updating (ReadyNAS OS 6.9.4)
I've just installed my new ReadyNAS 214.
First thing I did was to update the OS to version 6.9.4, so I can tell I am connected to the internet.
The antivirus, being enabled or disabled, is al...
Andrew_DM
Oct 19, 2018Tutor
Hi JohnCM_S,
We have RN31400-100EUS with 4x2TB disks 12% full XRAID upgraded to 6.9.4 now since October 16 saying the same error. Looking in system.log ClamAV version 0.99.3 error recommending 0.100.2 and all daily .cdiff 100% successful but the buildcld can't add the daily.hdb to the new daily.cld and hence fails to update. looked at /dev/md0 and of the 4GB its got <300MB left but that isn't the error - looks like with some offline testing its the included ClamAV version 0.99.3 thats the problem as the new signatures are not backwards compatible to before version 0.100.2
So can this be a fix in 6.9.5 sharpish??
Andrew
Andrew_DM
Nov 21, 2018Tutor
Ah after much testing the signatures are fine with v0.99.3 of ClamAV.
The problem turned out to be the signature files had become enormous and then corrupt in /var/lib/clamav so with a quick name change to .bck on mirrors.dat, main.cvd and daily.cvd then running freshclam -v all is good again and we have 100% AV working without issue, so have deleted the three old .bck files and all is fine...
Cheers and regards, Andrew.
- dsnpevlMar 23, 2019Virtuoso
Thanks for sharing this! Ran into something very similar on RN516 with 6.9.5 today. Only my 3 files were called *.cld instead of *.cvd.
Another issues seemed to be the outdated version of ClamAV: "WARNING: Your ClamAV installation is OUTDATED!"?
After running below procedure as you desribed with "freshclam -v", the antivirus was updated again. Not sure if "bytecode.cld" should also be replaced? This is the only file that doesn't have the date updated to March 23rd.
root@nas-XX-XX-XX:~# cd /var/lib/clamav root@nas-XX-XX-XX:/var/lib/clamav# ls -al total 465448 drwxr-xr-x 1 clamav clamav 188 Mar 23 07:19 . drwxr-xr-x 1 root root 386 Jan 25 00:19 .. -rw-r--r-- 1 root root 48 Feb 25 00:58 antivir.ini -rw-r--r-- 1 root root 1013248 Jan 2 16:35 bytecode.cld drwxr-xr-x 1 root root 86 Mar 23 07:19 clamav-c1a4aff7c81d68089aa22a9faf0135c9.tmp -rw-r--r-- 1 root root 168092160 Feb 25 00:58 daily.cld -rw-r--r-- 1 root root 307499008 Jun 8 2017 main.cld -rw------- 1 root root 1248 Mar 23 07:19 mirrors.dat root@nas-XX-XX-XX:/var/lib/clamav# mv daily.cld daily.bck root@nas-XX-XX-XX:/var/lib/clamav# mv mirrors.dat mirrors.bck root@nas-XX-XX-XX:/var/lib/clamav# mv main.cld main.bck root@nas-XX-XX-XX:/var/lib/clamav# freshclam -v Current working dir is /var/lib/clamav Max retries == 5 ClamAV update process started at Sat Mar 23 08:24:42 2019 Using IPv6 aware code Querying current.cvd.clamav.net TTL: 1122 Software version from DNS: 0.101.1 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.100.2 Recommended version: 0.101.1 DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav Retrieving http://database.clamav.net/main.cvd Trying to download http://database.clamav.net/main.cvd (IP: 2606:4700::6810:da54) Downloading main.cvd [100%] Loading signatures from main.cvd Properly loaded 4566249 signatures from new main.cvd main.cvd updated (version: 58, sigs: 4566249, f-level: 60, builder: sigmgr) Querying main.58.93.1.0.2606470000000000000000006810da54.ping.clamav.net Retrieving http://database.clamav.net/daily.cvd Trying to download http://database.clamav.net/daily.cvd (IP: 2606:4700::6810:da54) Downloading daily.cvd [100%] Loading signatures from daily.cvd Properly loaded 1528057 signatures from new daily.cvd daily.cvd updated (version: 25396, sigs: 1528057, f-level: 63, builder: raynman) Querying daily.25396.93.1.0.2606470000000000000000006810da54.ping.clamav.net bytecode.cvd version from DNS: 328 bytecode.cld is up to date (version: 328, sigs: 94, f-level: 63, builder: neo) Database updated (6094400 signatures) from database.clamav.net (IP: 2606:4700::6810:da54) Clamd successfully notified about the update. root@nas-XX-XX-XX:/var/lib/clamav# root@nas-XX-XX-XX:/var/lib/clamav# rm *.bck root@nas-XX-XX-XX:/var/lib/clamav# ls -al total 154624 drwxr-xr-x 1 clamav clamav 188 Mar 23 08:27 . drwxr-xr-x 1 root root 386 Jan 25 00:19 .. -rw-r--r-- 1 root root 48 Mar 23 08:25 antivir.ini -rw-r--r-- 1 root root 1013248 Jan 2 16:35 bytecode.cld drwxr-xr-x 1 root root 86 Mar 23 07:19 clamav-c1a4aff7c81d68089aa22a9faf0135c9.tmp -rw-r--r-- 1 root root 39414942 Mar 23 08:25 daily.cvd -rw-r--r-- 1 root root 117892267 Mar 23 08:24 main.cvd -rw------- 1 root root 52 Mar 23 08:25 mirrors.dat ? ?
- dsnpevlMar 23, 2019Virtuoso
NOTE: Because bytecode.cls remained on Jan 2, while all other files were on March 23rd, I decided to apply the same procedure. This seemed to work, as bytecode.cld was replaced with a new bytecode.cvd.
root@nas-XX-XX-XX:/var/lib/clamav# mv bytecode.cld bytecode.bck
root@nas-XX-XX-XX:/var/lib/clamav# freshclam -v
Current working dir is /var/lib/clamav
Max retries == 5
ClamAV update process started at Sat Mar 23 09:15:11 2019
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 398
Software version from DNS: 0.101.1
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.100.2 Recommended version: 0.101.1
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
main.cvd version from DNS: 58
main.cvd is up to date (version: 58, sigs: 4566249, f-level: 60, builder: sigmgr)
daily.cvd version from DNS: 25396
daily.cvd is up to date (version: 25396, sigs: 1528057, f-level: 63, builder: raynman)
Retrieving http://database.clamav.net/bytecode.cvd
Trying to download http://database.clamav.net/bytecode.cvd (IP: 2606:4700::6810:db54)
Downloading bytecode.cvd [100%]
Loading signatures from bytecode.cvd
Properly loaded 94 signatures from new bytecode.cvd
bytecode.cvd updated (version: 328, sigs: 94, f-level: 63, builder: neo)
Querying bytecode.328.93.1.0.2606470000000000000000006810db54.ping.clamav.net
Database updated (6094400 signatures) from database.clamav.net (IP: 2606:4700::6810:db54)
Clamd successfully notified about the update.
root@nas-XX-XX-XX:/var/lib/clamav#
root@nas-XX-XX-XX:/var/lib/clamav# rm *.bck
root@nas-XX-XX-XX:/var/lib/clamav# ls -al
total 153828
drwxr-xr-x 1 clamav clamav 188 Mar 23 09:15 .
drwxr-xr-x 1 root root 386 Jan 25 00:19 ..
-rw-r--r-- 1 root root 48 Mar 23 09:15 antivir.ini
-rw-r--r-- 1 root root 199693 Mar 23 09:15 bytecode.cvd
drwxr-xr-x 1 root root 86 Mar 23 07:19 clamav-c1a4aff7c81d68089aa22a9faf0135c9.tmp
-rw-r--r-- 1 root root 39414942 Mar 23 08:25 daily.cvd
-rw-r--r-- 1 root root 117892267 Mar 23 08:24 main.cvd
-rw------- 1 root root 104 Mar 23 09:15 mirrors.dat- Andrew_DMMar 23, 2019Tutor
dsnpevl yes we had fun with this.. final fix was to clear out the whole of /var/lib/clamav [but leave the directory clamav there. Then do Freshclam -v. when you go back to admin screen of the NAS turn off the virus checking and then apply. Wait a small amount of time and then reapply and tick to protect the OS too.
By doing the above all files including the AV control file are all rewritten and brought up to date.
When we did the 6.9.5 upgrade all was good without issue - so this is definately a fix.
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!