Clamtk and Clamav do not update automatically

[Lehmeiers]

I have a problem with clamav 0.103.1-1 and ClamTK 6.06-1.

I use it under Manjaro and I can't get an automatic update.
Also, the update and the update times are not saved.

If I start the update manually, it works.
When will this bug be fixed?

My system is :

inxi -Fxxxzo
System: Kernel: 5.4.100-1-MANJARO x86_64 bits: 64 compiler: gcc v: 10.2.1 Desktop: Xfce 4.16.0 tk: Gtk 3.24.24
info: xfce4-panel wm: xfwm4 dm: LightDM 1.30.0 Distro: Manjaro Linux
Machine: Type: Desktop System: Dell product: OptiPlex 360 v: N/A serial: Chassis: type: 6 serial:
Mobo: Dell model: 0T656F v: A01 serial: BIOS: Dell v: A07 date: 06/18/2012
CPU: Info: Dual Core model: Pentium E5200 bits: 64 type: MCP arch: Penryn rev: 6 L2 cache: 2 MiB
flags: lm nx pae sse sse2 sse3 ssse3 bogomips: 9979
Speed: 2178 MHz min/max: N/A Core speeds (MHz): 1: 2178 2: 1794
Graphics: Device-1: NVIDIA GT218 [GeForce 210] driver: nouveau v: kernel bus ID: 01:00.0 chip ID: 10de:0a65 class ID: 0300
Display: x11 server: X.Org 1.20.10 driver: loaded: nouveau unloaded: modesetting alternate: fbdev,nv,vesa
resolution: 1680x1050~60Hz s-dpi: 96
OpenGL: renderer: NVA8 v: 3.3 Mesa 20.3.4 direct render: Yes
Audio: Device-1: Intel NM10/ICH7 Family High Definition Audio vendor: Dell driver: snd_hda_intel v: kernel bus ID: 00:1b.0
chip ID: 8086:27d8 class ID: 0403
Device-2: NVIDIA High Definition Audio driver: snd_hda_intel v: kernel bus ID: 01:00.1 chip ID: 10de:0be3
class ID: 0403
Device-3: Microsoft LifeCam HD-5000 type: USB driver: snd-usb-audio,uvcvideo bus ID: 2-1:2 chip ID: 045e:076d
class ID: 0102
Sound Server: ALSA v: k5.4.100-1-MANJARO
Network: Device-1: Broadcom NetLink BCM5784M Gigabit Ethernet PCIe vendor: Dell driver: tg3 v: 3.137 port: dc80
bus ID: 02:00.0 chip ID: 14e4:1698 class ID: 0200
IF: enp2s0 state: down mac:
Device-2: Realtek RTL-8100/8101L/8139 PCI Fast Ethernet Adapter driver: 8139too v: 0.9.28 port: cc00
bus ID: 03:00.0 chip ID: 10ec:8139 class ID: 0200
IF: enp3s0 state: up speed: 100 Mbps duplex: full mac:
Drives: Local Storage: total: 931.51 GiB used: 494.02 GiB (53.0%)
ID-1: /dev/sda vendor: Samsung model: SSD 860 QVO 1TB size: 931.51 GiB speed: rotation: SSD
serial: rev: 2B6Q scheme: MBR
Partition: ID-1: / size: 287.37 GiB used: 39.78 GiB (13.8%) fs: ext4 dev: /dev/sda2
ID-2: /boot size: 975.9 MiB used: 184 MiB (18.9%) fs: ext4 dev: /dev/sda1
ID-3: /home size: 556.52 GiB used: 453.94 GiB (81.6%) fs: ext4 dev: /dev/sda3
Swap: ID-1: swap-1 type: partition size: 71.13 GiB used: 122.2 MiB (0.2%) priority: -2 dev: /dev/sda4
Unmounted: Message: No Unmounted partitions found.
Sensors: System Temperatures: cpu: 41.0 C mobo: N/A gpu: nouveau temp: 42.0 C
Fan Speeds (RPM): N/A
Info: Processes: 157 Uptime: 4h 02m wakeups: 0 Memory: 3.78 GiB used: 1.98 GiB (52.3%) Init: systemd v: 247 Compilers:
gcc: 10.2.0 clang: 11.1.0 Packages: pacman: 2031 Shell: Bash v: 5.1.0 running in: yakuake inxi: 3.3.01

[dave-theunsub]

Hi @Lehmeiers ,

Do you mean signature updates? If so, please update to version 6.09.

https://github.com/dave-theunsub/clamtk/releases/tag/v6.09

respectfully,
Dave M

[Lehmeiers]

Thanks for the tip.
I have written to the packer for Manjaro to see if he can provide this package in a timely manner, as it will certainly affect more users than just me.

Sincerely, R.Lehmeier

[dave-theunsub]

Hi @Lehmeiers ,

Thank you for reporting the issue and following up. Please keep us up to date and let us know if we can help.

respectfully,
Dave M

[Lehmeiers]

I have to thank you and will report back whether it worked or not.

Sincerely, R.Lehmeier

[Lehmeiers]

So I am now using ClamTK 6.09-1 and Clamav 0.103.1-1 in Manjaro.

Unfortunately, the problem is still there. It does not update automatically.
Also, the times of the update and the automatic scanning of the files are not saved (at least they are not displayed again when I have closed it once and opened it again).

If I do it manually, it works - but that is not the purpose of a scanner. It is supposed to do its work silently in the background and provide security.

Translated with www.DeepL.com/Translator (free version)

[dave-theunsub]

Hi @Lehmeiers ,

How are you updating manually?

Also, what is the output of grep Update ~/.clamtk/prefs?

respectfully,
Dave M

[Lehmeiers]

I go via "Updates => Update" and then update by confirmation so that the process is initiated.

An automatic update via "Updates => Update wizard => My computer automatically receives updates" does not work. Although I set 00:30 under "Scheduler => Set the check time with a 24-hour clock" and set "Select a time at which your signatures should be updated ( 1 hour )".

Updates should be imported at 00:30 and the signatures updated every hour. And confirm these changes by closing.

When I go back to Planner after closing, everything is back to 0 and my entries are not visible.

Is the programme also updated under Manjaro, where the system updates normally go via the package management (Pamac / Octopi)?

I also assume that updates are made up if the computer was switched off at the time entered.

The terminal entry resulted in :

grep Update ~/.clamtk/prefs
Update=single

Translated with www.DeepL.com/Translator (free version)

[dave-theunsub]

Hi @Lehmeiers ,

Sorry for the delay. Please try this: open the Scheduler, remove the scheduled update, and re-add it.

respectfully,
Dave M

[Lehmeiers]

Hello!
I have now times ClamTK completely uninstalled and the directory .clamtk also deleted and then reinstalled the whole thing.
Unfortunately, is still not updated.

Here is a screenshot.

[dave-theunsub]

Hi @Lehmeiers ,

Did uninstalling clamtk change your crontab?

If you type crontab -l at the command line, it will list what you have scheduled. So, please remove the scan (not the program), re-add it, and see if that works. Sorry if I am not understanding.

respectfully,
Dave M

[Lehmeiers]

I deleted the cron file in the ~/.clamtk/ folder and restarted clamtk, but everything remained as it is.
I changed the cron file from 30 0 * * * /usr/bin/clamscan ...
to 30 45 * * * /usr/bin/clamscan ... but it is not taken into account.

When I type crontab -l I get :
30 0 * * * /usr/bin/clamscan --exclude-dir=/home/ralf/.clamtk/viruses --exclude-dir=smb4k --exclude-dir=/run/user/ralf/gvfs --exclude-dir=/home/ralf/.gvfs --exclude-dir=.thunderbird --exclude-dir=. mozilla-thunderbird --exclude-dir=.evolution --exclude-dir=Mail --exclude-dir=kmail -i -r /home/ralf --log="$HOME/.clamtk/history/$(date +%b-%d-%Y).log" 2>/dev/null # clamtk-scan

So updating the signatures doesn't work. Even if I let it run overnight ( 0:35 ? ).

I wonder what happens if it is switched off during the set time - is this done at the next start?

Translated with www.DeepL.com/Translator (free version)

[dave-theunsub]

Hi @Lehmeiers ,

No, I don't think it will run when switched back on. I have not tested that, though.

respectfully,
Dave M

[Lehmeiers]

Hi @Lehmeiers ,

No, I don't think it will run when switched back on. I have not tested that, though.

respectfully,
Dave M

What else do I have to do to make it work?

[dave-theunsub]

Hi @Lehmeiers ,

See image: remove from the Scheduler, and re-add.

respectfully,
Dave M

[Lehmeiers]

Ok, but I don't have a plus sign when updating the signatures (see red circle).
Is it possible that this is why it does not work?
How do I get the plus sign back?

[Lehmeiers]

After uninstalling Clamtk and deleting the Clamtk directory in my home folder, I get the following output :

crontab -l

35 0 * * * /usr/bin/clamscan --exclude-dir=/home/ralf/.clamtk/viruses --exclude-dir=smb4k --exclude-dir=/run/user/ralf/gvfs --exclude-dir=/home/ralf/.gvfs --exclude-dir=.thunderbird --exclude-dir=.mozilla-thunderbird --exclude-dir=.evolution --exclude-dir=Mail --exclude-dir=kmail -i -r /home/ralf --log="$HOME/.clamtk/history/$(date +%b-%d-%Y).log" 2>/dev/null # clamtk-scan

The way I see it, it's the missing button (for whatever reason it's missing).
So it seems that the signatures are not updated, even if Clamtk tells me that updates are available.

How do I get it back - or does that not help to get the automatic update going?

[dave-theunsub]

Hi @Lehmeiers ,

Ok, from the command line, do this:

crontab -r

This will delete your scheduled entries.

Now go to the Scheduler and try to re-add.

respectfully,
Dave M

[Lehmeiers]

It's still the same problem and the plus sign to add the signature update is still missing.

[dave-theunsub]

Hi @Lehmeiers ,

This is weird! I'm going to play around and see if I can duplicate this. I haven't been able to yet, but I'll try again. This one is hard to figure out. Thank you for being patient and testing things to help diagnose.

respectfully,
Dave M

[Lehmeiers]

But always happy to.
If you still need data on the system or something, just get in touch.
I also want it to work and am glad that the error is not ignored or put on the back burner.

I have Clamtk 6.0.9 from the official Manjaro repositories.

[dave-theunsub]

Hi @Lehmeiers ,

I have good news and bad news. The good news is that I can duplicate the issue now, so I can work on debugging/fixing without posting back a million times. The bad news is... there's an issue. Not sure how or why... there are no error messages.

I'll post back when I have something.

respectfully,
Dave M

[Lehmeiers]

Thanks for the feedback.
It is nice that you can now reproduce the error, then perhaps there will soon be a solution and nothing will stand in the way of using Clamtk.

I wish you good luck with the troubleshooting and a big thank you for taking care of the error, even on Easter.

Yours sincerely, R.Lehmeier

[dave-theunsub]

Hi @Lehmeiers ,

Sorry, one more question, and no obligation to answer on Easter, either. Can you tell me if you have the file "freshclam.conf" in your .clamtk directory?

ls ~/.clamtk/db

I think I figured it out. We have to specify the freshclam.conf location. So for me, I'd type:

/usr/bin/freshclam --config-file=/home/dave/.clamtk/db/freshclam.conf --datadir=/home/dave/.clamtk/db --log=/home/dave/.clamtk/db/freshclam.log

and then it seems to work.

respectfully,
Dave M

[Lehmeiers]

Great that you found the error.
But where do I have to enter like /usr/bin/freshclam --config-file=/home/dave/.clamtk/db/freshclam.conf --datadir=/home/dave/.clamtk/db --log=/home/dave/.clamtk/db/freshclam.log ?

[dave-theunsub]

Hi @Lehmeiers ,

I'll do that part for you. Can you tell me the output of this:

ls -l ~/.clamtk/db

respectfully,
Dave M

[Lehmeiers]

Ok I did it ( you should also enter your own name if your name is not Dave. ;-) ) .

When I type ls -l ~/.clamtk/db I get :

total 218540
-rw-r--r-- 1 ralf ralf 293670 4 Apr 21:16 bytecode.cvd
-rw-r--r-- 1 ralf ralf 105614180 4 Apr 21:13 daily.cvd
-rw-r--r-- 1 ralf ralf 63 3 Apr 12:35 freshclam.conf
-rw-r----- 1 ralf ralf 928 4 Apr 21:16 freshclam.log
-rw-r--r-- 1 ralf ralf 117859675 4 Apr 21:16 main.cvd

Hopefully the signatures will be updated now. Even though I couldn't enter a time yet, because the corresponding plus sign is missing.

Translated with www.DeepL.com/Translator (free version)

[dave-theunsub]

Hi @Lehmeiers ,

Excellent. So this should work:

/usr/bin/freshclam --config-file=/home/ralf/.clamtk/db/freshclam.conf --datadir=/home/ralf/.clamtk/db --log=/home/ralf/.clamtk/db/freshclam.log

This is the command clamtk will run. It seems to work for me. So if it works for you, I can release a new version with this fix.

respectfully,
Dave M

[Lehmeiers]

Yes, it worked, but it still lacks the plus sign so I can set times when the signatures are updated. Or is this always done when there is no time set ?

[dave-theunsub]

Hi @Lehmeiers ,

Now that part I can't explain. It is there for the scanning, so it should be there for the signature updates.

Here's something we can try:

1. Download the attached zip
2. From the command line, type unzip clamtk-6.11.zip
3. type cd clamtk-6.11
4. type ./clamtk
5. now go to the Scheduler, and see if the + is there.

I want to see if it's a packaging problem, or if it's something else. Although it says 6.11, it's actually just 6.10.

respectfully,
Dave M
clamtk-6.11.zip

[Lehmeiers]

I have now downloaded the clamtk-6.11.tar.xz from https://github.com/dave-theunsub/clamtk/releases.

Then I followed your instructions:

tar xf clamtk-6.11.tar.xz
cd clamtk-6.11
mv lib ClamTk
./clamtk

The result is that 6.09 is still displayed, at least when I look at "About".

The same errors are still made.

Either I am doing something fundamentally wrong or the version number has not been changed from 6.09 to 6.11.

I think it's better to wait for the new version for Manjaro.

Thanks for the help

Translated with www.DeepL.com/Translator (free version)

[Ricky-Tigg]

OS: Fedora 34 | Issue – virus signatures not automatically updated – confirmed in GUI.

$ rpm -qa --queryformat "%{NAME}-%{VERSION}\n" clamav{,-*} clamtk | sort | column
clamav-0.103.2			clamav-lib-0.103.2		clamtk-6.11
clamav-filesystem-0.103.2	clamav-update-0.103.2

[dave-theunsub]

Hi @Ricky-Tigg ,

Please provide additional information. Are you configured for manual or automatic updates? Has this always happened or is it new?

respectfully,
Dave M

[Ricky-Tigg]

Of course to make sense my comment implicitly assumed that the GUI had been configured for automatic updating, which is the default setting as well. I am not in position to claim present issue to be a regression. Last time i used this application was at the release of Fedora 32, for a month. I then relied on those same components and commands that follow to make it work:

# sed -e 's/^Example/#Example/g' \
-e 's/^User.*/User root/g' \
-e 's/^#LocalSocket /LocalSocket /g' \
-e 's/^#LocalSocketGroup.*/LocalSocketGroup clamscan/g' \
-e 's/^#LocalSocketMode /LocalSocketMode /g' \
-e 's/^#FixStaleSocket /FixStaleSocket /g' \
-e 's/^#ExcludePath /ExcludePath /g' \
-i /etc/clamd.d/scan.conf
# systemctl --now enable clamav-{freshclam,clamonacc} clamonacc
# ln -s /etc/clamd.d/scan.conf /etc/clamd.conf
# setsebool -P antivirus_can_scan_system 1
# setsebool -P clamd_use_jit 1

[dave-theunsub]

Hi @Ricky-Tigg ,

It sounds like you're talking about ClamAV and not clamtk. Is this right?

respectfully,
Dave M

[Ricky-Tigg]

GUI (Finnish). Same observations as the one depicted here and their llustrations of GUI translated in German.

[dave-theunsub]

Hi @Ricky-Tigg ,

What is the output of grep Update ~/.clamtk/prefs from the commandline?

respectfully,
Dave M

[Ricky-Tigg]

$ localectl | head -1
   System Locale: LANG=fi_FI.UTF-8
$ grep -E '^Update|^Last' ~/.clamtk/prefs
Update=shared
LastInfection=Ei koskaan

Parameter translated into "Ei koskaan" may not be eligible for translation.

[dave-theunsub]

Hi @Ricky-Tigg ,

Please run the command ps -ef |grep freshclam. freshclam needs to be running to update signatures automatically.

respectfully,
Dave M

[Ricky-Tigg]

$ ps -ef |grep freshclam
yk          3332    3136  0 12:37 pts/0    00:00:00 grep --color=auto freshclam

[dave-theunsub]

Hi @Ricky-Tigg ,

Ok, the good news is that we found the problem.

Ensure the /etc/freshclam.conf file makes the following change:

# Comment or remove the line below.
# Example # <- Must have a "#" at the beginning of the line

sudo systemctl enable freshclam

sudo systemctl start freshclam

respectfully,
Dave M

[Ricky-Tigg]

# systemctl enable freshclam && systemctl start freshclam
Failed to enable unit: Unit file freshclam.service does not exist.

[dave-theunsub]

Hi @Ricky-Tigg ,

Looks like you don't have it installed. That's an easy fix:

sudo dnf install clamav-update

How did you install clamtk? If you used the rpms, this should have been pulled in for you.

respectfully,
Dave M

[dave-theunsub]

Hi @Ricky-Tigg ,

I can't explain the issue then. That file is part of clamav-update.

# rpm -ql clamav-update
/etc/cron.d/clamav-update
/etc/freshclam.conf
/etc/logrotate.d/clamav-update
/etc/sysconfig/freshclam
/usr/bin/freshclam
/usr/lib/systemd/system/clamav-freshclam.service   <---
/usr/lib64/libfreshclam.so.2
/usr/lib64/libfreshclam.so.2.0.1
/usr/share/clamav/freshclam-sleep
/usr/share/man/man1/freshclam.1.gz
/usr/share/man/man5/freshclam.conf.5.gz
/var/lib/clamav/bytecode.cld
/var/lib/clamav/daily.cld
/var/lib/clamav/main.cld
/var/lib/clamav/mirrors.dat
/var/log/freshclam.log

Can you try reinstalling it?

sudo dnf reinstall clamav-update

And then use the systemctl commands to try starting it, this time as:
systemctl enable clamav-freshclam.service
systemctl start clamav-freshclam.service

respectfully,
Dave M

[dave-theunsub]

Also, I'm currently on a CentOS system, so if clamav-freshclam doesn't work, try freshclam again.

[Ricky-Tigg]

Clamav related components are listed in my very first comment; that one is present there. Components installed with 'dnf -y install clamav{,-update} clamtk'.
'rpm -ql clamav-update'; same output on my system. 'dnf reinstall clamav-update' did not help. 'systemctl --now enable clamav-freshclam' is a valid command. At last launching the GUI automatically updated the virus signatures. In one of my very comment I had activated that service!

[dave-theunsub]

Hi @Ricky-Tigg ,

Great! If all is well, please close this issue at your convenience.

respectfully,
Dave M

[Ricky-Tigg]

I would if i could. I'm just not the original reporter.

[Lehmeiers]

Is there now a bug-fixed 6.12 ?

[dave-theunsub]

@Lehmeiers ,

6.11 fixes the bug.

respectfully,
Dave M

[Lehmeiers]

With the update of 6.11 at Mannjaro, the update also works again.
Unfortunately I can't change it because I can't enter a new rhythm because the plus sign is missing. I don't know if it is due to Clamtk or another reason.
But it would be nice if it would work again.

Sincerely

With the update of 6.11 at Mannjaro, the update also works again.
Unfortunately I can't change it because I can't enter a new rhythm because the plus sign is missing. I don't know if it is due to Clamtk or another reason.
But it would be nice if it would work again.

Sincerely

[dave-theunsub]

Hi @Lehmeiers ,

Now that part I cannot explain. I'll keep looking.

respectfully,
Dave M

[Lehmeiers]

Thank you, you can't expect more.

[EnerGeh]

I just stumbled about that issue after a new installation of manjaro and I fear this could be a kind of misunderstanding between @Lehmeiers and @dave-theunsub ?
I also use the german localization of ClamTK and there is the Aktualisierungsassistent where you can choose Ich möchte die Signaturen selbst aktualisieren which could be translated with Download signatures on your own. That seems to be a bit misleading in German as you have to choose this setting to activate a signatures scheduler in the Planner dialog that was screenshotted by @Lehmeiers above.
To be more clear: If you choose Mein Rechner empfängt automatisch Aktualisierungen= My computer will download updates automatically, you will not see the + sign as @Lehmeiers stated - I assume this means that the computer will get it's signature updates from elsewhere (kind of 3rd party) and not via a cronjob that is created ClamTK as you may expect.

@Lehmeiers: Try to use the download on you own setting first, the set the frequency of your choice within the Antivirus signatures (e.g. every 30 Min.) and then click the +sign and verify with crontab -l.

Edit: Please note, that cron is not enabled by default on Manjaro (see https://wiki.archlinux.org/title/cron). You can use e.g. cronie which should be installed by default or use the systemd-cron package (https://github.com/systemd-cron/systemd-cron) to use your crontab in systemd - works like a charm when you follow the guide.
/Edit

If I'm wrong, please take my apologies and feel free to correct me as I love to learn :-)

[dave-theunsub]

Hi @EnerGeh ,

Thank you for discussing this.

First, can you go to Launchpad and update the German language strings? I do not directly touch the language files because I don't want to break soemthing. :) It's easier to just download what you have translated and include that file in the packaging.

Second, I have not directly used Manjaro. I will take a look at it and see if there is something I can do regarding cron/cronie.

respectfully,
Dave M

[EnerGeh]

Hi @dave-theunsub ,

you're very welcome - I thank you so much for your continued effort to this important project! Keeping alive such a project over 18 years is seriously a service to mankind.

It would be a pleasure to correct the translations, I'll have a look into that soon.

Edit: I just found the relevant translation sections. The translation looks definitely good and I must confess, even with the english originals, I'm not sure what these settings are meant to be.

I would like to update signatures myself does that mean, that I have to setup a timeframe in the planner of ClamTK to update the signatures?
A better sentence could be (I'm not a native speaker of course!): ClamTK will update signatures (head over to the planner to schedule and set the frequency)

My computer automatically receives updates could be understood that ClamTK will download the signatures automatically.
What about: My computer automatically receives updates from outside ClamTK?

Just my 2ct :-)

The hint with cron/cronie on Manjaro was meant to help @Lehmeiers with his issue - I think it is not necessarily something you can or should change in ClamTK.
IMHO even if Manjaro's target is a "simple-to-use" Arch distro, it is more likely to be used by advanced users rather than the absolute Linux beginners. And such users should know how to configure cron or systemd on their system or at least how to google that ;-)
(The Arch Wiki is definitely one of the best Knowledgebases that contains Linux know-how I've ever seen and usually very up-to-date. And so are the Manjaro Forums.)

But feel free to dig deeper into that, a real systemd-timer could be an advantage to ClamTK. 👍

[Lehmeiers]

Are not the updates made automatically?
I thought this would be set under "Scheduler ( German "Planer")" and that the updates would be caught up if it starts the computer after the set time.

If not, for what do I have to set up a cronjob - for Clamtk ?

[EnerGeh]

@Lehmeiers For your convenience, I'll translate this answer to German, you'll find the translation below the English version.

What do you mean "automatically"? Of course, you can select "automatic updates", but in Linux terms, cron is the scheduler that triggers these updates in that case. ClamTK is not a real-time scanner that is continuously running in the background and handling all the scheduler and update stuff - this is handed over to the cron daemon as @dave-theunsub declared before.
When you click the +-sign, a cronjob will be created for you but without any cron daemon running, this will never be executed.
Linux flavors are different and Manjaro decided not to enable the cron daemon by default, their recommendation is to use systemd-timers. As I stated before, you can either enable a cron daemon with cronie (or any other package that provides cron) or use systemd-timers as recommended by the Manjaro team (e.g. via the systemd-cron package).

Da ich den Eindruck habe, dass es auf Deutsch etwas einfacher zu verstehen ist, hier noch einmal in unserer Muttersprache ;-)
Was meinst du mit "werden die Updates nicht automatisch gemacht"? Na klar werden die Updates automatisch gemacht, aber im Linux-Kontext ist der sog. cron daemon dafür verantwortlich diese automatischen Updates zu triggern. ClamTK ist kein Real-Time-Antivirenscanner der ständig im Hintergrund läuft und sich selbst mit Updates versorgt - dafür gibt es den cron daemon wie zuvor von @dave-theunsub beschrieben.
Wenn du auf die +-Schaltfläche klickst, wird ein cronjob für dich angelegt aber ohne einen cron daemon wird dieser niemals ausgeführt werden.
Die Linux Geschmäcker sind unterschiedlich und das Manjaro-Team hat sich dafür entschieden den cron daemon im Auslieferungszustand nicht zu aktivieren. Sie empfehlen stattdessen auf systemd-timer zu setzen. Wie zuvor geschrieben hast du damit zwei Möglichkeiten: Entweder du aktivierst den cron daemon, z.B. mit cronie (oder irgendeinem anderen Paket das cron bereitstellt) oder nutzt systemd-timer, z.B. mit dem systemd-cronPaket.
Den Punkt mit dem etwas verwirrenden Menü hast du verstanden? Also du musst im Assistent auswählen Ich möchte die Signaturen selbst aktualisieren um das Plus im Planer zu erhalten. Falls du einen Scheduler (= cronjob) angelegt hast, wird das Plus wieder ausgegraut und du musst den ersten Job erst mit Minus löschen, bevor du einen neuen anlegen kannst.

[Lehmeiers]

Das erklärt einiges.
Ich ging immer davon aus das es sich um einen ständig aktiven Antivirenscanner handelt der immer im Hintergrund läuft und scannt.
Nun habe ich mal die Anleitung https://wiki.manjaro.org/index.php/ClamAV ausgegraben und abgearbeitet.
Ich hoffe das jetzt auch die Aktualisierungen automatisch laufen.
Das werden wir dann morgen sehen. , denn für heute wurde bereits aktualisiert.
Bin mal gespannt ob die Signaturen auch nachträglich aktualisiert werden wenn der Rechner zu der Zeit aus war.

Nochmals ein Dankeschön für die Klärung.

P.S. Im Planer habe ich die Zeiten im 24 Stundenformat angegeben, sowohl für die Virensignatur sowie für die Überprüfung des persönlichen Ordners.
Was noch fehlt wäre die Möglichkeit in vorgegebenen Abständen zu aktualisieren sowie den Ordner regelmäßig zu scannen - nicht nur einmal am Tag!

[nobaraos12]

i can report this doesn't work on fedora 36
It seems to not save an info added to the boxes

Nobara Linux 36
20UH000CUS ThinkPad T14s G
6.0.10-201.fc36.x86_64
GNOME 42.3.1
AMD Ryzen 7 PRO 4750U with
AMD ATI 06:00.0 Renoir