clamav error log

**batZen** · Jul 18th 2016

i have this log entrys many times:

Code

Jul 18 17:25:25 menkisyscloudsrv33 clamd[20126]: Reading databases from /var/lib/clamav
Jul 18 17:25:28 menkisyscloudsrv33 clamd[20126]: LibClamAV Error: yyerror(): /var/lib/clamav/antidebug_antivm.yar line 497 undefined identifier "pe"
Jul 18 17:25:28 menkisyscloudsrv33 clamd[20126]: LibClamAV Error: yyerror(): /var/lib/clamav/antidebug_antivm.yar line 512 undefined identifier "pe"
Jul 18 17:25:28 menkisyscloudsrv33 clamd[20126]: LibClamAV Error: yyerror(): /var/lib/clamav/antidebug_antivm.yar line 528 undefined identifier "pe"
Jul 18 17:25:28 menkisyscloudsrv33 clamd[20126]: LibClamAV Error: yyerror(): /var/lib/clamav/antidebug_antivm.yar line 544 undefined identifier "pe"
Jul 18 17:25:28 menkisyscloudsrv33 clamd[20126]: LibClamAV Error: yyerror(): /var/lib/clamav/antidebug_antivm.yar line 557 undefined identifier "pe"
Jul 18 17:25:28 menkisyscloudsrv33 clamd[20126]: LibClamAV Error: yyerror(): /var/lib/clamav/antidebug_antivm.yar line 603 undefined identifier "pe"
Jul 18 17:25:28 menkisyscloudsrv33 clamd[20126]: LibClamAV Error: yyerror(): /var/lib/clamav/antidebug_antivm.yar line 614 undefined identifier "pe"
Jul 18 17:25:28 menkisyscloudsrv33 clamd[20126]: LibClamAV Error: cli_loadyara: failed to parse rules file /var/lib/clamav/antidebug_antivm.yar, error count 7
Jul 18 17:25:28 menkisyscloudsrv33 clamd[20126]: LibClamAV Error: yyerror(): /var/lib/clamav/malicious_document.yar line 245 undefined identifier "uint32be"
Jul 18 17:25:28 menkisyscloudsrv33 clamd[20126]: LibClamAV Error: cli_loadyara: failed to parse rules file /var/lib/clamav/malicious_document.yar, error count 1
Jul 18 17:25:46 menkisyscloudsrv33 clamd[20126]: Database correctly reloaded (4835477 signatures)

Display More

**Nuxwin** · Jul 18th 2016

We will investigate. That is a know issue.

@mrpink Once again: Please disable them

**batZen** · Jul 23rd 2016

any update on this, what i can do to fix this?

**Nuxwin** · Jul 27th 2016

Not my plugin so I'll take care when I'll have time. Anyway, you can ignore those messages ATM. Google a bit to know why

**batZen** · Jul 27th 2016

Quote from Nuxwin

Not my plugin so I'll take care when I'll have time. Anyway, you can ignore those messages ATM. Google a bit to know why

thank you, i did some google. Seems that rules are loaded only some rules are not used... here is a good explain:

Quote

antidebug_antivm.yar contains 12 rules which uses the pe module (pe.imports), so only these 12 rules will be skipped/ignored, the rest of the rules will be loaded (113 loaded rules)

malicious_document.yar contains 5 rules which uses uint32be, so only these 5 rules will be skipped/ignored, the rest of the rules will be loaded (15 loaded rules)

Source

So a new Clamav need to fix the problem and support the skipped rules.

clamav error log

Share

Similar Threads

Couldn't compile PHP 7.1.14

Plugin ClamAV - AllowSupplementaryGroups true

Clamav

ClamAV plugin v1.3.0 RELEASED

Daily visitors