• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.

Resolved Since last night DrWeb execution fails on Debian 10 and 11

TimReeves

Regular Pleskian
Server operating system version
Debian 10 and 11
Plesk version and microupdate number
Plesk Obsidian 18.0.60.1
Hi,

this morning I received emails from all the servers I manage - except one really old one running Debian 9 - that execution of DrWebd has failed, and Monit can't get it restarted. Also manually I can't. The reason given:

ExecStart=/opt/drweb/drwebd --foreground=yes (code=exited, status=255/EXCEPTION)

I've looked at the DrWeb files, but they all seem to be from 2023, so that shouldn't be a problem. I've also manually run /opt/drweb/update.pl, which works fine, but doesn't cure the problem. And checked if Perl was updated in the night - nope, still version 5.34 from last december.

I'm stumped - is anyone else seeing this problem, or have an idea what might be causing it? Help would be much appreciated, as these are client servers which are currently not getting their antivirus checking.

Cheers,

Tim
 
Some other users reported having issues with their DrWeb installation as well, which are currently still being investigated. However the errors they've reported are different from yours, so I am not entirely sure if it's related.

If you run service drwebd start, do you only get ExecStart=/opt/drweb/drwebd --foreground=yes (code=exited, status=255/EXCEPTION) returned? Or is there more information shown?
 
Hallo Kaspar,

thanks for the tip! I've been starting it with systemctl, which doesn't show anything. Using "service" I see:

Code:
Failed to get properties: Unit name [email protected] is neither a valid invocation ID nor unit name.
Failed to get properties: Unit name [email protected] is neither a valid invocation ID nor unit name.

Using journalctl I also see this line:

Code:
DrWeb/Linux/Plesk Edition: file /var/drweb/lib/drweb32.dll is not Dr.Web engine!

Hope this helps...
Tim
 
Same on my 2 Servers...
I also tried remove und reinstall DrWeb on one Server but it wont reinstall anymore.

Since 25.05.2024 06:26 i also have a drweb.dll file in /var/drweb/lib in my Linuy Servers.

I hope you nearly habe a solution.
 
I can confirm this is a product issue and we're working on a solution. However I don't have an ETA for when a fix becomes available.
 
Back
Top