ClamAV not picking up a virus

Muzza

Verified User
Joined
Sep 23, 2004
Messages
32
I'm running redhat 9, exim 4.50 and the latest version of ClamAV.

I've worked out that it must be something in my clamd.conf

The reason for this is that the freshclam.conf is working fine and updates correctly.

clamscan when run over a mailbox on the email server picks up the virus.

So I know I have the correct database virus file and that it shoudl detect the virus.

So this leaves the clamd.conf

My clamd.conf has these settings

This is the info from my clamd.conf

LogFile /tmp/clamd.log

PidFile /var/run/clamd.pid

DatabaseDirectory /var/lib/clamav

LocalSocket /tmp/clamd

FixStaleSocket

User clamav

AllowSupplementaryGroups

ScanArchive

Note: I've left out the comments.

Note: The virus in queston is Worm.Sober.U with regards to ClamAV. And was added to the database file in update 1197

# clamd -V
ClamAV 0.87.1/1198/Tue Nov 29 20:05:20 2005
 
Found this as well which might be closer to the problem

+++ Started at Wed Nov 30 15:32:29 2005
clamd daemon 0.87.1 (OS: linux-gnu, ARCH: i386, CPU: i686)
Log file size limited to 1048576 bytes.
Running as user clamav (UID 505, GID 506)
Reading databases from /var/lib/clamav
Protecting against 41292 viruses.
WARNING: Socket file /tmp/clamd exists. Unclean shutdown? Removing...
ERROR: Socket file /tmp/clamd could not be removed: Operation not permitted

I assume if i remove the socket (/tmp/clamd) and start up ClamAv again it should work again
 
Back
Top