I've set up ClamAV as a service as described in viewtopic.php?f=21&t=26829 and it's generally speaking working quite well.
However, I'm periodically seeing what seems to be ClamAV having an issue with loading the AV definitions. This results in the service failing, memory usage is going up and down at every attempt and also significantly increased CPU usage on the server as shown below where the issue occurred a full day from 20:00 to 20:00.
The clamd.log file contains tons of errors like the one below:
Code: Select all
+++ Started at Sun Jan 29 18:57:11 2017 clamd daemon 0.99.1 (OS: win32, ARCH: i386, CPU: i386) Log file size limited to 1048576 bytes. Reading databases from C:\ProgramData\.clamwin\db Not loading PUA signatures. Bytecode: Security mode set to "TrustSigned". ERROR: Invalid argument passed to function
The reason that I suspect the AV definitions is because it always begins and ends at a time where the task to update the definitions is run.
The server is a Windows Server 2008 SP2 32bit (fully patched) with hMailServer v5.6.5 build 2367 and ClamAV/ClamWin v0.99.1
Have anyone seen this issue before?
Thanks in advance.