NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

HansRL's avatar
HansRL
Apprentice
Jul 10, 2020
Solved

Antivirus scanner definition file update failed

ReadyNAS 212 OSversion 6.10.3 Since a couple of days (starting July 5th) my virus definition file update failes.. stating check internet-connection ; my internet connection is fine because the rea...
  • HansRL's avatar
    HansRL
    Dec 23, 2020

    I kept getting errors while executing command: 'systemctl status clamav-freshclam.service' ; see below

         root@Geldrop:~# systemctl status clamav-freshclam.service
         ● clamav-freshclam.service - ClamAV virus database updater
         Loaded: loaded (/lib/systemd/system/clamav-freshclam.service; static; vendor preset: disabled)
         Active: failed (Result: exit-code) since Wed 2020-12-23 14:33:45 CET; 15s ago
        Process: 6263 ExecStart=/usr/bin/freshclam --quiet (code=exited, status=1/FAILURE)
        Main PID: 6263 (code=exited, status=1/FAILURE)

        Dec 23 14:33:45 Geldrop systemd[1]: Starting ClamAV virus database updater...
        Dec 23 14:33:45 Geldrop freshclam[6263]: ClamAV update process started at Wed Dec 23 14:33:45 2020
        Dec 23 14:33:45 Geldrop freshclam[6263]: main.cvd is up to date (version: 59, sigs: 4564902, f-level: 60, builder: sigmgr)
        Dec 23 14:33:45 Geldrop freshclam[6263]: daily.cld is up to date (version: 26026, sigs: 4328586, f-level: 63, builder: raynman)
        Dec 23 14:33:45 Geldrop freshclam[6263]: bytecode.cvd is up to date (version: 331, sigs: 94, f-level: 63, builder: anvilleg)
        Dec 23 14:33:45 Geldrop systemd[1]: clamav-freshclam.service: Main process exited, code=exited, status=1/FAILURE
        Dec 23 14:33:45 Geldrop systemd[1]: Failed to start ClamAV virus database updater.
        Dec 23 14:33:45 Geldrop systemd[1]: clamav-freshclam.service: Unit entered failed state.
        Dec 23 14:33:45 Geldrop systemd[1]: clamav-freshclam.service: Failed with result 'exit-code'.

     

    The following I did after reading the following web-page (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=972974):
    stopping clamav: 'systemctl stop clamav-daemon'

    stopping clamav freshclam: 'systemctl stop clamav-freshclam'

    adjusting member 'usr.bin.freshclam' in dir: /etc/apparmor.d ; adding 'capability dac_override,' and 'capability chown,'

     

              capability setgid,
              capability setuid,
              capability dac_override,
              capability chown,

     

    removing all file from dir: '/var/lib/clamav' (bytecode ; daily ; main ; mirrors ; antivir)

    starting clamav : 'systemctl start clamav-daemon'

    starting clamav freshclam: 'systemctl start clamav-freshclam'

     

    starting 'clamav freshclam' takes a while (about 2 minutes, I guess) and afterwards it looks like the normal databased-updater is working again.... lets see what happens the coming days...

     

    regards

     

     

HansRL's avatar
HansRL
Apprentice
Apr 17, 2021

JohnCM_S& B_L 

B_L  NETGEAR Moderator & JohnCM_S,
looking in the LOG-file I see CLAMAV is outdated, still version 0.100.2 in stead of 0.103.2. Any reason behind this, why is CLAMAV not updated to a newer or even the newest version?

Apr 17 14:51:19 Geldrop freshclam[3250]: Your ClamAV installation is OUTDATED!
Apr 17 14:51:19 Geldrop freshclam[3250]: Local version: 0.100.2 Recommended version: 0.103.2
Apr 17 14:51:19 Geldrop freshclam[3250]: DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav

 

rgds

  • Jetlag1's avatar
    Jetlag1
    Guide
    Apr 17, 2021

    So, who's defs are the most out-of-date? I think I might be a contender.

     

  • StephenB's avatar
    StephenB
    Guru - Experienced User
    Apr 17, 2021
    Jetlag1 wrote:

    So, who's defs are the most out-of-date? I think I might be a contender.

     

    Maybe try installing the 6.10.5 beta.

  • Jetlag1's avatar
    Jetlag1
    Guide
    Apr 17, 2021

    I'n not a big fan of beta FW, had one destroy a router last year.

    Will wait for the release.

  • jimk1963's avatar
    jimk1963
    Luminary
    Apr 18, 2021

    Read the 6.10.5 Beta release notes, didn't see anything specific about correcting this antivirus bug. Just one comment about security fixes which was vague.

     

    As of today, on 3 different ReadyNAS boxes, all with 6.10.4 Hotfix 1, the AV sits at:

    RN212:  Sept 24, 2020

    RN314:  April 17, 2021  (appears to be working fine)

    RN528X: Jan 25, 2021

     

    With all 3 running the same OS version, one box works, the other two don't. One interesting possibility - for unknown reasons, the RN314 OS became corrupt a few weeks back. A USB recovery stick was created to reinstall the OS, which brought back the entire volume without loss. I wonder... did that "clean OS install" perhaps clean up some lingering AV bug? Maybe there's an issue propagating along OS updates that doesn't get fixed unless a clean wipe of the OS is implemented. Just a thought. 

  • jimk1963's avatar
    jimk1963
    Luminary
    Apr 18, 2021

    Good catch. Still, since 2 of 3 boxes are Intel based, may be better to wait for formal release. Currently one Intel unit is fine (RN314, with fresh OS reinstall), and one has the AV issue (RN528X). Any opinion whether fresh OS install may be of interest re: this bug?

  • swehjo's avatar
    swehjo
    Guide
    May 04, 2021

    Have had this issue from time to time but since March it's persistent... Rebooting every night. Tried to upload a screen shot but it didn't work, so:

    • Model ReadyNAS 424
    • Antivirus: Mar 10, 2021 13:08:51
    • Firmware: 6.10.4 Hotfix 1

    Error message is "System: Antivirus scanner definition file update failed due to download failure. Check your Internet connection."

  • Jetlag1's avatar
    Jetlag1
    Guide
    May 05, 2021

    I just downloaded and installed FW 6.10.5 and rebooted.

    15 minutes later I get this email: "Antivirus scanner definition file update failed due to download failure. Check your Internet connection."

    JFC! Seriously? It was suposed to fix this issue.

     

  • jimk1963's avatar
    jimk1963
    Luminary
    May 09, 2021
    Jetlag1 wrote:

    I just downloaded and installed FW 6.10.5 and rebooted.

    15 minutes later I get this email: "Antivirus scanner definition file update failed due to download failure. Check your Internet connection."

    JFC! Seriously? It was suposed to fix this issue.

    Same here, updated RN212 to 6.10.5 Beta and AV is stuck on September 24, 2020... it's been about 12 hours now, no change.

     

  • Marc_V's avatar
    Marc_V
    NETGEAR Employee Retired
    May 11, 2021

    Hi All,

     

    Would like to get your logs be sent via PM pls. so we can check.

     

    This should have been resolved by the latest FW. Anyone contacted support?

  • leftcoastmark's avatar
    leftcoastmark
    Aspirant
    May 21, 2021

    No change for me either, running release version of 6.10.5.  ReadyNas 2304.

    The release notes say it fixes the Antivirus Update bug on ARM machines, but I believe the 2304 is an x86 machine, no?

     

    I've tried rebooting (including a cold boot), and disabling Antivirus then re-enabling.   It's been a few days now and I get a failure in the logs each day. - the usual "check your internet" message that everyone here seems to get.

  • StephenB's avatar
    StephenB
    Guru - Experienced User
    May 22, 2021
    leftcoastmark wrote:

    I believe the 2304 is an x86 machine...

     

    Correct.

  • HansRL's avatar
    HansRL
    Apprentice
    May 30, 2021

    For my situation did the new firmware (6.10.5 and also the beta version of 6.10.5 (t11)) resolve the issue with updating the virus-definitions, but reading the other entries it is still not resolved for everyone.
    So for me only the outdated CLAMAV installation is an open item (running version 0.100.2 in stead of the current version 0.103.2)

  • scrjs's avatar
    scrjs
    Apprentice
    May 30, 2021

    My RN314 was upgraded to the generally available firmware 6.10.5 two days ago and AV is updating as expected

    root@xxxxxReadyNAS:~# systemctl status clamav-freshclam.service
● clamav-freshclam.service - ClamAV virus database updater
   Loaded: loaded (/lib/systemd/system/clamav-freshclam.service; static; vendor preset: disabled)
   Active: inactive (dead) since Sun 2021-05-30 17:26:36 AEST; 1h 18min ago
  Process: 29781 ExecStart=/usr/bin/freshclam --quiet (code=exited, status=0/SUCCESS)
 Main PID: 29781 (code=exited, status=0/SUCCESS)

May 30 17:26:18 xxxxxReadyNAS freshclam[29781]: Your ClamAV installation is OUTDATED!
May 30 17:26:18 xxxxxReadyNAS freshclam[29781]: Local version: 0.100.2 Recommended version: 0.103.2
May 30 17:26:18 xxxxxReadyNAS freshclam[29781]: DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
May 30 17:26:18 xxxxxReadyNAS freshclam[29781]: main.cld is up to date (version: 59, sigs: 4564902, f-level: 60, builder: sigmgr)
May 30 17:26:22 xxxxxReadyNAS freshclam[29781]: Downloading daily-26185.cdiff [100%]
May 30 17:26:26 xxxxxReadyNAS freshclam[29781]: daily.cld updated (version: 26185, sigs: 3984024, f-level: 63, builder: raynman)
May 30 17:26:26 xxxxxReadyNAS freshclam[29781]: bytecode.cld is up to date (version: 333, sigs: 92, f-level: 63, builder: awillia2)
May 30 17:26:35 xxxxxReadyNAS freshclam[29781]: Database updated (8549018 signatures) from database.clamav.net (IP: 104.16.218.84)
May 30 17:26:35 xxxxxReadyNAS freshclam[29781]: Clamd successfully notified about the update.
May 30 17:26:36 xxxxxReadyNAS systemd[1]: Started ClamAV virus database updater.

    Prior to this it was running 6.10.4 Hotfix 1 which FIXED the AV not updating for me.

     

    I aslo asked the question regarding "Your ClamAV installation is OUTDATED!" in community post Your-ClamAV-installation-is-OUTDATED to which B_L responded

    The ClamAV version in the latest 6.10.4 firmware and the upcoming 6.10.5 firmware is 0.100.2.  It works well in ReadyNAS device so far.

It is not recommended to upgrade the ClamAV engine manually. 

ReadyNAS engineering team will be looking into the plan of upgrading it to the latest version in the future firmware release.

    I have not seen a post that lets the community know if there is any plans to upgrade 

     

    B_L any thoughts?

  • swehjo's avatar
    swehjo
    Guide
    May 31, 2021

    Hi everyone,

    Updated to the new release, 6.10.5, yesterday. I have rebootet and restarted my 424 a few times after that but still get "Antivirus scanner definition file update failed due to download failure. Check your Internet connection." AV version is still "Mar 10, 2021 13:08:51"

  • Jetlag1's avatar
    Jetlag1
    Guide
    Jun 01, 2021

    I would publically thank Justin dingjs1421 for remotely fixing this issue on my 526X.

    Got a PM from him as soon as I logged on this morning, virus definitions are now current.

    Thanks Justin, nice work!

     

  • swehjo's avatar
    swehjo
    Guide
    Jun 01, 2021

    Marc_V You earlier wrote if anyone had contacted support. Since my AV update still don't work I have to purchase Premium support to get this solved?!  

  • JohnCM_S's avatar
    JohnCM_S
    NETGEAR Employee Retired
    Jun 01, 2021

    Hi swehjo,

     

    You may download the system logs of your NAS then provide to me so we can check. You may upload it to a cloud storage site (Google Drive, Dropbox, etc.) then send me the download link via private message.

     

    Regards,

     

  • Blaine_'s avatar
    Blaine_
    Aspirant
    Jun 23, 2021

    I had this same problem and looked at the ClamAV site's troubleshooting tips. SSH'ing to the NetGear box, stopping FreshClam, deleting the daily.cld and mirrors.dat files, and then starting up FreshClam again finally got it working for me (after updating to firmware 6.10.5, but not sure that was necessary):

     

     

    systemctl stop clamav-freshclam.service
rm /var/lib/clamav/mirrors.dat
rm /var/lib/clamav/daily.cld
systemctl start clamav-freshclam.service
freshclam -v

     

     

    I think the virus checker updates had stopped working when our old RN3130 died and we swapped the drives into a newly-purchased 2304. Nothing else I'd seen here and tried worked. The ClamAV docs say to delete the daily.cvd file to force a reload of it, and we just had a daily.cld, so the first time I tried this, it didn't work because I didn't delete daily.cld. When I included that step (third step above), FreshClam started up properly and updated to the latest virus definitions.

     

  • xingbat's avatar
    xingbat
    Guide
    Aug 27, 2021

    Greetings,

    I recently upgraded from a RN10400 to a used RN42400. Overall went smoothly except now, like many others, the Antivirus does not update. I updated the firmware to 6.10.5 Hotfix 1. 

     

    The Antivirus is yellow with a date of Mar 21, 2019 12:52:58AM. Updates fail every 24 hours saying "Antivirus scanner definition file update failed due to download failure. Check your Internet connection." All other indications are the Internet connect is working, including downloading the list of available Apps.  I've tried multiple restarts and re-enablements. I've also followed the SSH steps below without luck.

     

    I've seen your most generous offers to assist and wondering if you might help me. I can upload logs and DM you a link if that is where to start.

     

    Thanks

  • Angel_Infotron's avatar
    Angel_Infotron
    Aspirant
    Aug 31, 2021

    Muchas gracias:

     

    Esto me solucionó el problema !!

  • diegobaccino's avatar
    diegobaccino
    Aspirant
    Nov 01, 2021

    Hi Marc_V, StephenB 

     

    I'm also encoutering this problem. Running version 6.10.5 Hotfix 1. The AV has not been able to update since October. Can you please help me in solving this issue? This is happening across all devices running 6.10.5. 

    Tried removing files in /var/lib/clamav folder but freshclam is unable to update. Also tried changing the DBMirror to a specific working mirror but still receiving the same message. As you can see from below, access to DNS and Gateway is not a problem for this box. Any ideas? Thanks for your help. 

     

    freshclam
    ClamAV update process started at Mon Nov 1 14:23:10 2021
    WARNING: Your ClamAV installation is OUTDATED!
    WARNING: Local version: 0.100.2 Recommended version: 0.103.3
    DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
    WARNING: Can't download main.cvd from db.us.clamav.net
    Trying again in 5 secs...
    ClamAV update process started at Mon Nov 1 14:23:15 2021
    WARNING: Your ClamAV installation is OUTDATED!
    WARNING: Local version: 0.100.2 Recommended version: 0.103.3
    DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
    WARNING: Can't download main.cvd from db.us.clamav.net
    Trying again in 5 secs...
    ^CUpdate process terminated
    root@NAS02:~# ^C

     


    root@NAS02:~# ping db.us.clamav.net
    PING db.us.clamav.net (104.16.219.84): 56 data bytes
    64 bytes from 104.16.219.84: seq=0 ttl=54 time=11.376 ms
    64 bytes from 104.16.219.84: seq=1 ttl=54 time=11.552 ms
    ^C
    --- db.us.clamav.net ping statistics ---
    2 packets transmitted, 2 packets received, 0% packet loss
    round-trip min/avg/max = 11.376/11.464/11.552 ms

     


    root@NAS02:~# nslookup db.us.clamav.net
    Server: XXX
    Address 1: XXX (removed for privacy)

    Name: db.us.clamav.net
    Address 1: 104.16.218.84
    Address 2: 104.16.219.84
    Address 3: 2606:4700::6810:db54
    Address 4: 2606:4700::6810:da54

     

  • scrjs's avatar
    scrjs
    Apprentice
    Nov 01, 2021

    Hi markv & StephenB 

     

    I too and suffering this problem.

    In this post I will reach out to two Netgear support people ( B_L & dingjs1421 ) that have been VERY helpful in the past in escalating issues such as these.

     

    My Technical Details

    Following a technical details on what I am seen

     

    Firmware

    My RN314 is running 6.10.5 Hotfix 1.

     

    Problem Timeline

    The log shows via the UI the following;

    Oct 30, 2021 10:47:45 PM	System: Antivirus scanner definition file update failed due to download failure. Check your Internet connection.
Oct 29, 2021 10:46:42 PM	System: Antivirus scanner definition file was updated to 62.26337.

    So on Oct 29, 2021 AV updated as expected and started failing on each update attempt as noted in the first log entry on Oct 30, 2021.  Each failure to update shows a log entry like Oct 30, 2021.

    Prior to Oct 30, 2021 AV was updating successfully for many many months.
    All times above are UTC+11 (Australia)

     

    Problem Diagnosis Info

    To look into this problem I ran via SSH freshclam -v to gather some details and not the following (long output from the command below) which markv also sees in his update.

    root@XXXXXReadyNAS:~# freshclam -v
Current working dir is /var/lib/clamav
Max retries == 5
ClamAV update process started at Tue Nov  2 09:42:41 2021
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 1101
Software version from DNS: 0.103.3
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.100.2 Recommended version: 0.103.3
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
main.cvd version from DNS: 62
main.cvd is up to date (version: 62, sigs: 6647427, f-level: 90, builder: sigmgr)
daily.cvd version from DNS: 26340
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Whitelisting short-term blacklisted mirrors
Retrieving http://database.clamav.net/daily.cvd
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
WARNING: Can't download daily.cvd from database.clamav.net
Trying again in 5 secs...
ClamAV update process started at Tue Nov  2 09:43:07 2021
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 421
Software version from DNS: 0.103.3
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.100.2 Recommended version: 0.103.3
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
main.cvd version from DNS: 62
main.cvd is up to date (version: 62, sigs: 6647427, f-level: 90, builder: sigmgr)
daily.cvd version from DNS: 26340
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Whitelisting short-term blacklisted mirrors
Retrieving http://database.clamav.net/daily.cvd
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
WARNING: Can't download daily.cvd from database.clamav.net
Trying again in 5 secs...
ClamAV update process started at Tue Nov  2 09:43:16 2021
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 898
Software version from DNS: 0.103.3
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.100.2 Recommended version: 0.103.3
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
main.cvd version from DNS: 62
main.cvd is up to date (version: 62, sigs: 6647427, f-level: 90, builder: sigmgr)
daily.cvd version from DNS: 26340
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Whitelisting short-term blacklisted mirrors
Retrieving http://database.clamav.net/daily.cvd
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
WARNING: Can't download daily.cvd from database.clamav.net
Trying again in 5 secs...
ClamAV update process started at Tue Nov  2 09:43:22 2021
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 892
Software version from DNS: 0.103.3
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.100.2 Recommended version: 0.103.3
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
main.cvd version from DNS: 62
main.cvd is up to date (version: 62, sigs: 6647427, f-level: 90, builder: sigmgr)
daily.cvd version from DNS: 26340
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Whitelisting short-term blacklisted mirrors
Retrieving http://database.clamav.net/daily.cvd
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
WARNING: Can't download daily.cvd from database.clamav.net
Trying again in 5 secs...
ClamAV update process started at Tue Nov  2 09:43:28 2021
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 886
Software version from DNS: 0.103.3
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.100.2 Recommended version: 0.103.3
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
main.cvd version from DNS: 62
main.cvd is up to date (version: 62, sigs: 6647427, f-level: 90, builder: sigmgr)
daily.cvd version from DNS: 26340
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from database.clamav.net
Retrieving http://database.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
ERROR: getpatch: Can't download daily-26338.cdiff from database.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Whitelisting short-term blacklisted mirrors
Retrieving http://database.clamav.net/daily.cvd
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
ERROR: Can't download daily.cvd from database.clamav.net
Giving up on database.clamav.net...
ClamAV update process started at Tue Nov  2 09:43:29 2021
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 885
Software version from DNS: 0.103.3
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.100.2 Recommended version: 0.103.3
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
main.cvd version from DNS: 62
main.cvd is up to date (version: 62, sigs: 6647427, f-level: 90, builder: sigmgr)
daily.cvd version from DNS: 26340
Retrieving http://db.cn.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from db.cn.clamav.net
Retrieving http://db.cn.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from db.cn.clamav.net
Retrieving http://db.cn.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from db.cn.clamav.net
Retrieving http://db.cn.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from db.cn.clamav.net
Retrieving http://db.cn.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
ERROR: getpatch: Can't download daily-26338.cdiff from db.cn.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Whitelisting short-term blacklisted mirrors
Retrieving http://db.cn.clamav.net/daily.cvd
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
ERROR: Can't download daily.cvd from db.cn.clamav.net
Giving up on db.cn.clamav.net...
ClamAV update process started at Tue Nov  2 09:43:31 2021
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 397
Software version from DNS: 0.103.3
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.100.2 Recommended version: 0.103.3
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
main.cvd version from DNS: 62
main.cvd is up to date (version: 62, sigs: 6647427, f-level: 90, builder: sigmgr)
daily.cvd version from DNS: 26340
Retrieving http://db.tw.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from db.tw.clamav.net
Retrieving http://db.tw.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from db.tw.clamav.net
Retrieving http://db.tw.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from db.tw.clamav.net
Retrieving http://db.tw.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.219.84 (due to previous errors)
Ignoring mirror 104.16.218.84 (due to previous errors)
WARNING: getpatch: Can't download daily-26338.cdiff from db.tw.clamav.net
Retrieving http://db.tw.clamav.net/daily-26338.cdiff
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
ERROR: getpatch: Can't download daily-26338.cdiff from db.tw.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Whitelisting short-term blacklisted mirrors
Retrieving http://db.tw.clamav.net/daily.cvd
Ignoring mirror 104.16.218.84 (due to previous errors)
Ignoring mirror 104.16.219.84 (due to previous errors)
ERROR: Can't download daily.cvd from db.tw.clamav.net
Giving up on db.tw.clamav.net...
Update failed. Your network may be down or none of the mirrors listed in /etc/clamav/freshclam.conf is working. Check https://www.clamav.net/documents/official-mirror-faq for possible reasons.

    This is consistent with the contents of my freshclam.conf file as noted below

    DatabaseOwner              root
LogSyslog                  true
LogFacility                LOG_LOCAL6
Debug                      false
MaxAttempts                5
DatabaseDirectory          /var/lib/clamav
DNSDatabaseInfo            current.cvd.clamav.net
ConnectTimeout             120
ReceiveTimeout             120
TestDatabases              false
ScriptedUpdates            true
CompressLocalDatabase      false
Bytecode                   true
NotifyClamd                /etc/clamav/clamd.conf
OnErrorExecute             /usr/bin/clamav_event -s 1
OnUpdateExecute            /usr/bin/clamav_event -s 0
Checks                     2
DatabaseMirror             database.clamav.net
DatabaseMirror             db.cn.clamav.net
DatabaseMirror             db.tw.clamav.net

    There are no network issues as demonstrated in the ping and nslookup commands for Database Mirror database.clamav.net.

    root@XXXXXReadyNAS:~# ping database.clamav.net
PING database.clamav.net (104.16.219.84): 56 data bytes
64 bytes from 104.16.219.84: seq=0 ttl=58 time=9.476 ms
64 bytes from 104.16.219.84: seq=1 ttl=58 time=9.265 ms
64 bytes from 104.16.219.84: seq=2 ttl=58 time=10.150 ms
64 bytes from 104.16.219.84: seq=3 ttl=58 time=9.952 ms
64 bytes from 104.16.219.84: seq=4 ttl=58 time=10.014 ms
64 bytes from 104.16.219.84: seq=5 ttl=58 time=9.740 ms
64 bytes from 104.16.219.84: seq=6 ttl=58 time=9.480 ms
64 bytes from 104.16.219.84: seq=7 ttl=58 time=9.542 ms
64 bytes from 104.16.219.84: seq=8 ttl=58 time=9.194 ms
64 bytes from 104.16.219.84: seq=9 ttl=58 time=10.948 ms
64 bytes from 104.16.219.84: seq=10 ttl=58 time=9.458 ms
^C
--- database.clamav.net ping statistics ---
11 packets transmitted, 11 packets received, 0% packet loss
round-trip min/avg/max = 9.194/9.747/10.948 ms


root@XXXXXReadyNAS:~# nslookup database.clamav.net
Server:    8.8.8.8
Address 1: 8.8.8.8 dns.google

Name:      database.clamav.net
Address 1: 104.16.219.84
Address 2: 104.16.218.84
Address 3: 2606:4700::6810:da54
Address 4: 2606:4700::6810:db54

    This look to me an issue that NETGEAR should be aware and is able to to give advice!

    I hope that B_L or dingjs1421 or someone from Netgear is monitoring this topic.

     

  • scrjs's avatar
    scrjs
    Apprentice
    Nov 02, 2021

    Hi StephenB 

    Just noted your post re https://community.netgear.com/t5/ReadyNAS-Beta/ReadyNASOS-6-10-6-Beta/m-p/2151119#M10972

     

    I agree this looks like it might resolve this issue though I am reluctant install BETA firmware.

    -------------------------

     

    dingjs1421 

    Re https://community.netgear.com/t5/ReadyNAS-Beta/ReadyNASOS-6-10-6-Beta/m-p/2151119#M10972 -

    1. When will 6.10.6 be generally available?
    2. What is your recomendation given that this issue is impacting all 6.10.5 firmeware systems with no options to resolve other then to use 6.10.6 firmware?

    Cheers

    Rob

  • HansRL's avatar
    HansRL
    Apprentice
    Nov 02, 2021

    Hi all,

     

    It looks like CLAMAV no longer supports updates via HTTP via port 80 or at least it is blocked now resulting in the failing virus-definition-update.
    Via the beta-version 6.10.6-RC1 it is working (update is done via HTTPS and probably port 443)

    I am running this version already for some days, my NAS is working fine, but after a while I see (or saw) a lot of error-messages in the Systemd-Journal.LOG file (although still my NAS is functioning fine):


    Nov 01 10:16:40 Geldrop clamonacc[5223]: ERROR: ClamFanotif: internal error (readlink() failed), 7, Bad file descriptor
    Nov 01 10:16:40 Geldrop clamonacc[5223]: ClamWorker: fd already closed ... recovering ...
    Nov 01 10:16:40 Geldrop clamonacc[5223]: ERROR: ClamFanotif: internal error (readlink() failed), 7, Bad file descriptor
    Nov 01 10:16:40 Geldrop clamonacc[5223]: ClamWorker: fd already closed ... recovering ...
    Of course looking at the error-messages I am not fully convienced CLAMAV is working as it should... :-(

     

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More