Page 1 of 1

LibClamAV Error after Update to 3.0.1.8

Posted: 27 Jan 2017 08:21
by neodg
Hi!

First: thanks for the update!

In my boot.log i found the following entrys after the update:
Starting Clam AntiVirus Daemon: LibClamAV Error: yyerror(): /var/lib/clamav/antidebug_antivm.yar line 497 undefined identifier "pe"
LibClamAV Error: yyerror(): /var/lib/clamav/antidebug_antivm.yar line 512 undefined identifier "pe"
LibClamAV Error: yyerror(): /var/lib/clamav/antidebug_antivm.yar line 528 undefined identifier "pe"
LibClamAV Error: yyerror(): /var/lib/clamav/antidebug_antivm.yar line 544 undefined identifier "pe"
LibClamAV Error: yyerror(): /var/lib/clamav/antidebug_antivm.yar line 557 undefined identifier "pe"
LibClamAV Error: yyerror(): /var/lib/clamav/antidebug_antivm.yar line 603 undefined identifier "pe"
LibClamAV Error: yyerror(): /var/lib/clamav/antidebug_antivm.yar line 614 undefined identifier "pe"
LibClamAV Error: cli_loadyara: failed to parse rules file /var/lib/clamav/antidebug_antivm.yar, error count 7
LibClamAV Error: yyerror(): /var/lib/clamav/winnow_malware.yara line 65 duplicate identifier "CryptoWall_Resume_phish"
LibClamAV Error: yyerror(): /var/lib/clamav/winnow_malware.yara line 83 duplicate identifier "docx_macro"
LibClamAV Error: cli_loadyara: failed to parse rules file /var/lib/clamav/winnow_malware.yara, error count 2
I found this helpful:
https://github.com/extremeshok/clamav-u ... issues/145

Re: LibClamAV Error after Update to 3.0.1.8

Posted: 07 Feb 2017 11:54
by Justin
I have the same issue. Any fixes yet?

Re: LibClamAV Error after Update to 3.0.1.8

Posted: 07 Feb 2017 18:11
by shawniverson
See https://github.com/extremeshok/clamav-u ... issues/166

The errors are benign, nonetheless.

Re: LibClamAV Error after Update to 3.0.1.8

Posted: 05 Jun 2017 13:54
by jossi
I also found this error on my box, please help with this error :(, box is fresh installed from last vmware ovf image

Re: LibClamAV Error after Update to 3.0.1.8

Posted: 06 Jun 2017 15:35
by pdwalker
See the message prior to yours; you can ignore the errors.