Client items database corruption

Owned by Anonymous
Last updated: Oct 12, 2015 by Max Pinion (Deactivated)

Issue

Antivirus software can corrupt Arellia's client item database which can then cause problems with the Arellia Agent and the Arellia Application Control Agent. The client item database is a SQLite database used to cache policies, actions, and filters. SQLite database corruption does not typically happen.

Log warnings

You will see one of the following log warnings resulting from antivirus software scanning the Arellia client items database:

Unable to obtain ClientItem e0182f55-f980-4090-9fdf-d30a2f10ffaf. 
SQLite Error Corrupt (The database disk image is malformed 
database disk image is malformed)
Failed to RefreshClientItemType: {0} (GetDigests) ( Exception 
Details: System.Data.SQLite.SQLiteException (0x80004005): The 
database disk image is malformed database disk image is 
malformed at ... )

Note: In 7.1 and earlier versions, a corrupt client items database can also cause high CPU usage. 

Solution

Add an exclusion to your anti-virus software to prevent it from scanning the Arellia client items database.  Add an exclusion to your anti-virus software for the following location:

C:\ProgramData\Arellia\ClientItems\

Additional information

The Arellia Agent will automatically recreate the client items database when a corruption is detected. 

http://www.sqlite.org/howtocorrupt.html

Â