Major incident

Nexcess Server: ClamAV Service Disruption

Affected: Email

Current status of Nexcess Server: Operational — live Nexcess Server status

Timeline

1. Mar 16, 2026, 17:26 UTC
   investigating
   We are currently investigating an issue affecting the ClamAV service, where clamd restarts may fail due to a problematic signature update. Our System Engineering team is actively working to identify the root cause and implement a fix. This issue may affect Maldet scans and cause mail delivery failures if the ClamAV service is not running.
2. Mar 16, 2026, 18:05 UTC
   identified
   We have identified the cause of the issue affecting the ClamAV service. A recent malware signature update introduced an invalid entry in the ClamAV signature database, which can prevent the clamd service from restarting successfully. Our team is currently applying a signature database refresh on affected servers to remove the invalid entry and restore normal operation of the ClamAV service. We are currently applying this fix across all affected servers and will provide another update once the process is completed.
3. Mar 16, 2026, 20:18 UTC
   identified
   Our engineering team has implemented a fix to address the issue affecting the ClamAV service. The invalid signature entry has been removed and services have been restored. We are continuing to monitor the environment to ensure stability and will provide further updates if needed.
4. Mar 16, 2026, 20:18 UTC
   monitoring
   Our engineering team has implemented a fix to address the issue affecting the ClamAV service. The invalid signature entry has been removed and services have been restored. We are continuing to monitor the environment to ensure stability and will provide further updates if needed.
5. Mar 18, 2026, 12:41 UTC
   resolved
   We have not observed any further issues since implementing the fix. The environment remains stable. If you have any questions or concerns. You can reach us through the following channels: Live Chat: https://my.nexcess.net/ Email: [email protected]

Updates as published by Nexcess Server (original).