<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
Hi Mark,<br>
<br>
Exactly what version of ClamAV do you have installed?<br>
<br>
The other possible problem is the dist-upgrade might have broken the
AppArmor config changes for clamd.<br>
Try downloading the ZendTo Installer from zend.to website, and just
run the ClamAV stage of it. It asks you before it runs each major
stage. Say no to the first 2, then yes to ClamAV, then no to the
others. Then reboot. That should put the AppArmor config back how it
should be.<br>
<br>
Cheers,<br>
Jules.<br>
<br>
<div class="moz-cite-prefix">On 12/05/2021 16:11, Mark J. Bobak via
ZendTo wrote:<br>
</div>
<blockquote type="cite"
cite="mid:WM!3956ab4eb5847acd2b74b5d855c2d8e57a990093d170c88d08eed95fe20cda040693d7f24adf6a85a0b32027ff15eea1!@mx.jul.es">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">Hi,
<div><br>
</div>
<div>I'm running Ubuntu 18.04, w/ ZendEverything wa To installed
from <a href="http://zend.to" moz-do-not-send="true">zend.to</a>
repo.</div>
<div><br>
</div>
<div>Everything was working fine, till yesterday. I did an apt
update && apt dist-upgrade and that seems to have
broken something with the ClamAV installation/configuration.</div>
<div><br>
</div>
<div>In /var/zendto/zendto.log, I can see:</div>
<div><font face="monospace">2021-05-12 09:58:32 73.191.221.187
[NITS ZendTo]: Info: admin authorization succeeded for
mbobak<br>
2021-05-12 10:00:08 73.191.221.187 [NITS ZendTo]: Error:
Virus scan of dropped-off files
/var/zendto/incoming/fU5TDzCmCSWoMjzztiMg6s6wkyrXFyEU.1 for
mbobak failed with
/var/zendto/incoming/fU5TDzCmCSWoMjzztiMg6s6wkyrXFyEU.1: Not
a regular file ERROR ----------- SCAN SUMMARY -----------
Infected files: 0 Total errors: 1 Time: 0.000 sec (0 m 0 s)
Start Date: 2021:05:12 10:00:08 End Date: 2021:05:12
10:00:08</font><br>
</div>
<div><br>
</div>
<div>I know this should be something simple, but I need a bit of
a hint....</div>
<div><br>
</div>
<div>In /etc/clamav, I can see:</div>
<div><font face="monospace">ubuntu@appserv1:/etc/clamav$ ls -l<br>
total 32<br>
-rw-r--r-- 1 root root 1994 Jan 9 2020 clamd.conf<br>
-rw-r--r-- 1 root root 2028 Jul 16 2018
clamd.conf.ucf-dist<br>
-rw-r--r-- 1 root root 2059 Jul 17 2018
clamd.conf.ucf-old<br>
-rw-r--r-- 1 root root 2059 Jul 17 2018 clamd.conf.zendto<br>
-r--r--r-- 1 clamav adm 702 Jul 16 2018 freshclam.conf<br>
drwxr-xr-x 2 root root 4096 Mar 7 2018 onerrorexecute.d<br>
drwxr-xr-x 2 root root 4096 Mar 7 2018 onupdateexecute.d<br>
drwxr-xr-x 2 root root 4096 Mar 7 2018 virusevent.d</font><br>
</div>
<div><br>
</div>
<div>So, it looks like clamav.conf was backed up to
clamav.conf.zendto, so I tried putting clamav.conf.zendto back
as clamav.conf, but that didn't help. (Yes, I restarted
clamav.)</div>
<div><br>
</div>
<div>Any thoughts or suggestions would be appreciated.</div>
<div><br>
</div>
<div>AdvThanksance,</div>
<div><br>
</div>
<div>-Mark</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
ZendTo mailing list
<a class="moz-txt-link-abbreviated" href="mailto:ZendTo@zend.to">ZendTo@zend.to</a>
<a class="moz-txt-link-freetext" href="http://jul.es/mailman/listinfo/zendto">http://jul.es/mailman/listinfo/zendto</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">Jules
--
Julian Field MEng CEng CITP MBCS MIEEE MACM
'When a man points a finger at someone else, he should remember
that four of his fingers are pointing at himself.' - Louis Nizer
<a class="moz-txt-link-abbreviated" href="http://www.Zend.To">www.Zend.To</a>
Twitter: @JulesFM
</pre>
</body>
</html>