I normally have to do the following (on RHEL4) after running an update to clamav:
1. Ensure any new .conf files are included (back up old versions first):
Code:
mv /etc/freshclam.conf /etc/freshclam.conf.bak
mv /etc/clamd.conf /etc/clamd.conf.bak
mv /etc/logrotate.d/clamav /etc/logrotate.d/clamav.bak (check for existence of clamav.rpmnew first)
mv /etc/freshclam.conf.rpmnew /etc/freshclam.conf
mv /etc/clamd.conf.rpmnew /etc/clamd.conf
mv /etc/logrotate.d/clamav.rpmnew /etc/logrotate.d/clamav (see above note)
2. Check for correct user in conf:
Code:
vi /etc/clamd.conf
User qscand
vi /etc/freshclam.conf
DatabaseOwner qscand
3. Ensure system user matches:
Code:
chown -R qscand:qscand /var/clamav
chown -R qscand:qscand /var/log/clamav
chown -R qscand:qscand /var/run/clamav
4. Update system to use new settings:
Code:
/etc/init.d/clamd restart
5. Run freshclam to pull in db updates and ensure all settings are correct (it'll throw warnings if not):
Code:
freshclam
6. Ensure qmail-scanner pulls in changes:
Code:
qmail-scanner-reconfigure
7. If all OK, remove old files (keep system tidy

):
Code:
rm /etc/freshclam.conf.bak
rm /etc/clamd.conf.bak
rm /etc/logrotate.d/clamav.bak (see above note)
This is a useful command to run and watch for a while after an update (just to ensure all is well):
Code:
tail -f /usr/local/psa/var/log/maillog /var/spool/qscan/qmail-queue.log /var/spool/qscan/quarantine.log /var/log/clamav/clamd.log /var/log/clamav/freshclam.log
Hopefully this'll help others with problems after a clamav update...