LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Linux Mint
User Name
Password
Linux Mint This forum is for the discussion of Linux Mint.

Notices


Reply
  Search this Thread
Old 10-26-2019, 02:57 AM   #1
bscho
Member
 
Registered: Nov 2012
Location: London
Distribution: Mint 20, Kali, Peppermint, Ubuntu, MakuluFlash, Fedora 32, Windows 12 Lite, MakuluLinux
Posts: 821

Rep: Reputation: 28
Problem with ClamAV


My desktop using Linux Mint 19.2 cinnamon was slowing down so I thought I am being hacked so loaded clamav. When I did sudo freshclam this was the error message.

sudo freshclam
[sudo] password for me:
ERROR: /var/log/clamav/freshclam.log is locked by another process
ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log).

Clamav will not run either.

I installed a new Mint 19.2 on a new SSD and used a different internet connection over a mobile phone network to be sure I was using a different IP address.

The first thing I downloaded was ClamAV. It is exactly the same.

How can I find the process that has locked freshclam and stopped Clamav running?

Is there anything else I can do to check for virus or being hacked?

Thanks
 
Old 10-26-2019, 05:44 AM   #2
captain_sensible
Member
 
Registered: Apr 2010
Posts: 352

Rep: Reputation: 145Reputation: 145
it doesn't necessarily mean you've been hacked; my guess is that clamav was already running either due to auto update or you otherwise invoked it . If that was the case that would explain already locked . Basically you can look into seeing what processes are
running , killing them and then running manually .

Tools to see if you have malware include rkhunter , chkrootkit
 
Old 10-26-2019, 06:09 AM   #3
bscho
Member
 
Registered: Nov 2012
Location: London
Distribution: Mint 20, Kali, Peppermint, Ubuntu, MakuluFlash, Fedora 32, Windows 12 Lite, MakuluLinux
Posts: 821

Original Poster
Rep: Reputation: 28
Quote:
Originally Posted by captain_sensible View Post
it doesn't necessarily mean you've been hacked; my guess is that clamav was already running either due to auto update or you otherwise invoked it . If that was the case that would explain already locked . Basically you can look into seeing what processes are
running , killing them and then running manually .

No I had never run clamav on either of these hard drives so I suspect it has to do with 19.2 as it did work on earlier versions 18.3

Tools to see if you have malware include rkhunter , chkrootkit Thanks will try these.
 
Old 10-26-2019, 06:22 AM   #4
jsbjsb001
Senior Member
 
Registered: Mar 2009
Location: Earth, unfortunately...
Distribution: Currently: OpenMandriva. Previously: openSUSE, PCLinuxOS, CentOS, among others over the years.
Posts: 3,881

Rep: Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063
You can try the following command to see what program has /var/log/clamav/freshclam.log opened;

Code:
lsof | grep -i freshclam.log
 
Old 10-26-2019, 06:26 AM   #5
bscho
Member
 
Registered: Nov 2012
Location: London
Distribution: Mint 20, Kali, Peppermint, Ubuntu, MakuluFlash, Fedora 32, Windows 12 Lite, MakuluLinux
Posts: 821

Original Poster
Rep: Reputation: 28
Quote:
Originally Posted by jsbjsb001 View Post
You can try the following command to see what program has /var/log/clamav/freshclam.log opened;

Code:
lsof | grep -i freshclam.log
Tried that and had this error

lsof | grep -i freshclam.log
lsof: WARNING: can't stat() tracefs file system /sys/kernel/debug/tracing
Output information may be incomplete.
 
Old 10-26-2019, 07:03 AM   #6
wpeckham
LQ Guru
 
Registered: Apr 2010
Location: Continental USA
Distribution: Debian, Ubuntu, RedHat, DSL, Puppy, CentOS, Knoppix, Mint-DE, Sparky, VSIDO, tinycore, Q4OS, Manjaro
Posts: 5,767

Rep: Reputation: 2765Reputation: 2765Reputation: 2765Reputation: 2765Reputation: 2765Reputation: 2765Reputation: 2765Reputation: 2765Reputation: 2765Reputation: 2765Reputation: 2765
Quote:
Originally Posted by bscho View Post
My desktop using Linux Mint 19.2 cinnamon was slowing down so I thought I am being hacked so loaded clamav. When I did sudo freshclam this was the error message.

sudo freshclam
[sudo] password for me:
ERROR: /var/log/clamav/freshclam.log is locked by another process
ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log).

Clamav will not run either.

I installed a new Mint 19.2 on a new SSD and used a different internet connection over a mobile phone network to be sure I was using a different IP address.

The first thing I downloaded was ClamAV. It is exactly the same.

How can I find the process that has locked freshclam and stopped Clamav running?

Is there anything else I can do to check for virus or being hacked?

Thanks
first step, make sure the log file exists and is writable.
If not, create that file.
 
Old 10-26-2019, 07:37 AM   #7
bscho
Member
 
Registered: Nov 2012
Location: London
Distribution: Mint 20, Kali, Peppermint, Ubuntu, MakuluFlash, Fedora 32, Windows 12 Lite, MakuluLinux
Posts: 821

Original Poster
Rep: Reputation: 28
Quote:
Originally Posted by wpeckham View Post
first step, make sure the log file exists and is writable.
If not, create that file.
It is not write
able see my earlier posts
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Clamav upgrade telling me clamav is newest version, but running 'sudo freshclam' tells me it is outdated! hddfsck Linux - Newbie 16 09-13-2019 09:43 PM
Mimedefang clamav vs clamav-milter digitolx Linux - Server 0 10-20-2010 03:45 PM
file-scan-clamav-1.8 or clamav-0.93.1 invader44 Linux - Newbie 1 12-29-2009 08:49 AM
Uninstall problem with clamav Wynand1 Linux - Software 1 09-15-2004 02:35 PM
MailScanner and ClamAV Configuration problem AZIMBD03 Red Hat 1 01-29-2004 01:21 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Linux Mint

All times are GMT -5. The time now is 03:14 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration