NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
HansRL
Jul 10, 2020Apprentice
Antivirus scanner definition file update failed
ReadyNAS 212 OSversion 6.10.3 Since a couple of days (starting July 5th) my virus definition file update failes.. stating check internet-connection ; my internet connection is fine because the rea...
- Dec 23, 2020
I kept getting errors while executing command: 'systemctl status clamav-freshclam.service' ; see below
root@Geldrop:~# systemctl status clamav-freshclam.service
● clamav-freshclam.service - ClamAV virus database updater
Loaded: loaded (/lib/systemd/system/clamav-freshclam.service; static; vendor preset: disabled)
Active: failed (Result: exit-code) since Wed 2020-12-23 14:33:45 CET; 15s ago
Process: 6263 ExecStart=/usr/bin/freshclam --quiet (code=exited, status=1/FAILURE)
Main PID: 6263 (code=exited, status=1/FAILURE)Dec 23 14:33:45 Geldrop systemd[1]: Starting ClamAV virus database updater...
Dec 23 14:33:45 Geldrop freshclam[6263]: ClamAV update process started at Wed Dec 23 14:33:45 2020
Dec 23 14:33:45 Geldrop freshclam[6263]: main.cvd is up to date (version: 59, sigs: 4564902, f-level: 60, builder: sigmgr)
Dec 23 14:33:45 Geldrop freshclam[6263]: daily.cld is up to date (version: 26026, sigs: 4328586, f-level: 63, builder: raynman)
Dec 23 14:33:45 Geldrop freshclam[6263]: bytecode.cvd is up to date (version: 331, sigs: 94, f-level: 63, builder: anvilleg)
Dec 23 14:33:45 Geldrop systemd[1]: clamav-freshclam.service: Main process exited, code=exited, status=1/FAILURE
Dec 23 14:33:45 Geldrop systemd[1]: Failed to start ClamAV virus database updater.
Dec 23 14:33:45 Geldrop systemd[1]: clamav-freshclam.service: Unit entered failed state.
Dec 23 14:33:45 Geldrop systemd[1]: clamav-freshclam.service: Failed with result 'exit-code'.The following I did after reading the following web-page (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=972974):
stopping clamav: 'systemctl stop clamav-daemon'stopping clamav freshclam: 'systemctl stop clamav-freshclam'
adjusting member 'usr.bin.freshclam' in dir: /etc/apparmor.d ; adding 'capability dac_override,' and 'capability chown,'
capability setgid,
capability setuid,
capability dac_override,
capability chown,removing all file from dir: '/var/lib/clamav' (bytecode ; daily ; main ; mirrors ; antivir)
starting clamav : 'systemctl start clamav-daemon'
starting clamav freshclam: 'systemctl start clamav-freshclam'
starting 'clamav freshclam' takes a while (about 2 minutes, I guess) and afterwards it looks like the normal databased-updater is working again.... lets see what happens the coming days...
regards
Sandshark
Dec 20, 2020Sensei
It looks like a solution may be at hand. But Netgear can't expect all users to go in via SSH and fix this, so it is up to them to fix it in a way all users can implement.
Alaska_Stuart
Dec 20, 2020Tutor
Prior to the update to 6.10.4, I had been having no trouble automatically downloading the antivirus scanner definition file with either of my identically-configured RN214. The second day after the update, one unit failed to download. I disabled antivirus on that unit, restarted the unit, let it run for 20 minutes, re-enabled antivirus, and the download worked normally. It has been fine since.
- kcejoDec 21, 2020Tutor
Thanks for that simple idea to try. I tried it this morning, after getting another error messaging about being unable to update virus definitions. Unfortunately, I got the same error message again after disabling antivirus, rebooting, waiting 20 minutes and enabling antivirus.
Just to be sure, here's what I did:
I went to my Admin page and went to Settings
I clicked on Antivirus under Services and unchecked "Enable Real-Time Antivirus Scanning" then clicked Apply
I then hovered over the Power icon and pulled down to Restart and clicked that
After the NAS restarted, I waited 20 minutes, then went back to Antivirus and checked "Enable Real-Time Antivirus Scanning" and "Protect ReadyNAS OS" and clicked Apply
My logs show all of this activity, along with the "System: Antivirus scanner definition file update failed due to download failure. Check your internet connection." error message I received about 4 minutes after I went through that whole process and re-enabled the Antivirus. But, I'm also seeing two other log entries about an hour after that error message that say "ReadyNASOS service or process (readynasd) was restarted." and "ReadyNASOS background service started."
So, I think I'll wait until tomorrow to see if I get another error message about antivirus updates.
Ericka
- TerryJColesDec 22, 2020Luminary
OK. I followed the instructions detailed by several people earlier in this thread (see the series of replies ending on 2020-12-17).
Here is what my last log entries say:
Dec 22, 2020 06:44:12 AM System: Antivirus scanner definition file was updated to 59.26024. Dec 21, 2020 06:43:13 AM System: Antivirus scanner definition file was updated to 59.26023. Dec 20, 2020 06:42:12 AM System: Antivirus scanner definition file was updated to 59.26022. Dec 19, 2020 06:41:31 AM System: Antivirus scanner definition file was updated to 59.26021. Dec 18, 2020 06:41:02 AM System: Antivirus scanner definition file was updated to 59.26020. Dec 17, 2020 03:33:07 PM System: Antivirus scanner definition file update failed due to download failure. Check your Internet connection.
So I reckon that the best fix is the one suggested initially by NormanP and then clarified by StephenB.
Now all we need is for the next update from Netgear NOT to break this again.
- kcejoDec 22, 2020Tutor
And I just got the error message again saying the antivirus scanner definition file update failed to download. So, unfortunately, that simple sounding fix didn't work for me.
- HansRLDec 23, 2020Apprentice
I kept getting errors while executing command: 'systemctl status clamav-freshclam.service' ; see below
root@Geldrop:~# systemctl status clamav-freshclam.service
● clamav-freshclam.service - ClamAV virus database updater
Loaded: loaded (/lib/systemd/system/clamav-freshclam.service; static; vendor preset: disabled)
Active: failed (Result: exit-code) since Wed 2020-12-23 14:33:45 CET; 15s ago
Process: 6263 ExecStart=/usr/bin/freshclam --quiet (code=exited, status=1/FAILURE)
Main PID: 6263 (code=exited, status=1/FAILURE)Dec 23 14:33:45 Geldrop systemd[1]: Starting ClamAV virus database updater...
Dec 23 14:33:45 Geldrop freshclam[6263]: ClamAV update process started at Wed Dec 23 14:33:45 2020
Dec 23 14:33:45 Geldrop freshclam[6263]: main.cvd is up to date (version: 59, sigs: 4564902, f-level: 60, builder: sigmgr)
Dec 23 14:33:45 Geldrop freshclam[6263]: daily.cld is up to date (version: 26026, sigs: 4328586, f-level: 63, builder: raynman)
Dec 23 14:33:45 Geldrop freshclam[6263]: bytecode.cvd is up to date (version: 331, sigs: 94, f-level: 63, builder: anvilleg)
Dec 23 14:33:45 Geldrop systemd[1]: clamav-freshclam.service: Main process exited, code=exited, status=1/FAILURE
Dec 23 14:33:45 Geldrop systemd[1]: Failed to start ClamAV virus database updater.
Dec 23 14:33:45 Geldrop systemd[1]: clamav-freshclam.service: Unit entered failed state.
Dec 23 14:33:45 Geldrop systemd[1]: clamav-freshclam.service: Failed with result 'exit-code'.The following I did after reading the following web-page (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=972974):
stopping clamav: 'systemctl stop clamav-daemon'stopping clamav freshclam: 'systemctl stop clamav-freshclam'
adjusting member 'usr.bin.freshclam' in dir: /etc/apparmor.d ; adding 'capability dac_override,' and 'capability chown,'
capability setgid,
capability setuid,
capability dac_override,
capability chown,removing all file from dir: '/var/lib/clamav' (bytecode ; daily ; main ; mirrors ; antivir)
starting clamav : 'systemctl start clamav-daemon'
starting clamav freshclam: 'systemctl start clamav-freshclam'
starting 'clamav freshclam' takes a while (about 2 minutes, I guess) and afterwards it looks like the normal databased-updater is working again.... lets see what happens the coming days...
regards
- HansRLDec 24, 2020Apprentice
A little disappointed, but my adjustments did not do the trick, so added 'capability chown' to file: usr.sbin.clamd (as stated in the same website) be continued....
- HansRLDec 26, 2020Apprentice
Today the normal virus-update process was working; keep my fingers crossed the coming days.....
- HansRLDec 29, 2020Apprentice
Being hopefull I solved my issue with the failed antivirus scanner definition file update :-)
my normal update-process is running fine now for several days.so
1) stopping clamav: 'systemctl stop clamav-daemon'
2) stopping clamav freshclam: 'systemctl stop clamav-freshclam'
3) adjusting member 'usr.bin.freshclam' in dir: /etc/apparmor.d ; adding 'capability dac_override,' and 'capability chown,'
4) adjusting member 'usr.sbin.clamd' in dir: /etc/apparmor.d ; adding 'capability dac_override,' and 'capability chown,'
5) removing all file from dir: '/var/lib/clamav' (bytecode ; daily ; main ; mirrors ; antivir)
6) starting clamav freshclam: 'systemctl start clamav-freshclam'
7) reboot the NAS
did solve it for me (for now and starting from December 25th) - kcejoDec 29, 2020Tutor
Please forgive my ignorance. The code that you show looks somewhat like the old DOS code that I ran decades ago. Where do you input this code? Do you pull up a command line and put it in there? I have been unable to find where these code lines are supposed to be typed in. It would be a huge help if someone would start at the very beginning with how to get to where these lines of code are inputted. I can't find where these filenames are located or where they're supposed to be downloaded to or changed.
Sorry, but it's been years since I was fluent in Assembler, COBOL, Basic, etc and everyone keeps putting solutions on here that are impossible for me to follow. I'm about ready to just unplug the stupid NAS and plug it back in only whenever I need to access it.
- TerryJColesDec 29, 2020Luminary
kcejo wrote:Please forgive my ignorance. The code that you show looks somewhat like the old DOS code that I ran decades ago. Where do you input this code? Do you pull up a command line and put it in there? I have been unable to find where these code lines are supposed to be typed in. It would be a huge help if someone would start at the very beginning with how to get to where these lines of code are inputted. I can't find where these filenames are located or where they're supposed to be downloaded to or changed.
Sorry, but it's been years since I was fluent in Assembler, COBOL, Basic, etc and everyone keeps putting solutions on here that are impossible for me to follow. I'm about ready to just unplug the stupid NAS and plug it back in only whenever I need to access it.
These are Linux bash commands and they have to be typed into a bash shell. To get there you need to log in to admin with your Web Browser, then enable SSH under 'Services' on the 'Settings' Page. You will also need a way of issuing the ssh command on your PC. If it is Linux, it's easy because you just open a Terminal. On a Mac, it's probably much the same, but on Windows you will probably have to install an SSH client (I'm not a Windows user).
Make a note of your admin password and the IP Address of the ReadyNAS and then in a terminal type:
ssh root@<IP Address of the ReadyNAS>
and enter the admin password when prompted.
I can't vouch for the most recent fix, but I followed the instructions detailed by several people earlier in this thread (see the series of replies ending on 2020-12-17). It has been working ever since.
- HansRLDec 29, 2020Apprentice
I have enabled the SSH-service in my READYNAS and used WINSCP & PUTTY to perform the several steps I did
(steps 1;2 & 6 in PUTTY and steps 3;4 & 5 via WNSCP (SCP-session))succes
- NormanPDec 31, 2020Aspirant
AV updates have ran successfully for me since 13th December - hopefully ending 6 months of issues.
Very disappointing that Netgear have not contributed or commented on these issues or the fix proposed. It would be good to get their validation of the solution. I'm afraid this lack of Netgear input to what is a long standing issue with software and products they control and clearly should have the knowledge to fix only demonstrates their disregard, (even contempt), for their users and customers.
- TerryJColesDec 31, 2020Luminary
I agree. This issue has gone on far too long.
I will certainly think twice before buying another Netgear product.
I have been a loyal customer for many years because of their support. Netgear should realise that people don't judge a product on how many bells and whistles it has; they need it to continue working for a reasonable liketime too. If Netgear becomes too much like some of their competitors and neglect support, they will soon find that these Forums will cease to be useful sources of information as people become disillusioned.
- HansRLJan 01, 2021Apprentice
question/remarks from my site :smileyhappy:
Looking in the system logfile:
Jan 01 16:21:30 Geldrop clamd[13899]: clamd daemon 0.100.2 (OS: linux-gnueabi, ARCH: arm, CPU: arm)
Jan 01 18:55:01 Geldrop freshclam[17866]: Software version from DNS: 0.103.0Is my NAS running with a mixed version of CLAMAV? the daemon with an older version (100.2) then the virus-file-updater (103.0)?
Should it not be the same , so all on version 103.0?rgds
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!