This started after an update February First;
clamav-server-systemd-0.99.3-1.el7.noarch
clamav-filesystem-0.99.3-1.el7.noarch
This is the first I’ve noticed this issue; Logwatch reporting:
Virus database reloaded 20 time(s) (last time with 6551393 viruses)
Unmatched Entries
LibClamAV Warning: Detected duplicate databases /var/lib/clamav/bytecode.cvd and /var/lib/clamav/bytecode.cld, please manually remove one of them
LibClamAV Warning: Detected duplicate databases /var/lib/clamav/main.cvd and /var/lib/clamav/main.cld, please manually remove one of them
Manually deleting things in /var/lib/ just seems like a ‘Bad Thing’.
[root@home clamav]# ls -l bytecode.c* main.c*
-rw-r–r-- 1 clamupdate clamupdate 766976 Dec 15 00:05 bytecode.cld
-rw-r–r-- 1 clamupdate clamupdate 153228 Jan 8 19:24 bytecode.cvd
-rw-r–r-- 1 clamupdate clamupdate 307499008 Dec 15 00:04 main.cld
-rw-r–r-- 1 clamupdate clamupdate 117892267 Jan 8 19:28 main.cvd
[root@home clamav]# file bytecode.c* main.c*
bytecode.cld: Clam AntiVirus database 06 Dec 2017 21-17 -0500, version 319
bytecode.cvd: Clam AntiVirus database 06 Dec 2017 21-17 -0500, version 319, gzipped
main.cld: Clam AntiVirus database 07 Jun 2017 17-38 -0400, version 58
main.cvd: Clam AntiVirus database 07 Jun 2017 17-38 -0400, version 58, gzipped
Since the versions of the files seem to be the same, it appears the older files are the .cld versions
I’m not sure how to handle this properly.