Hello,

I'm noticing that clamav is giving an error that the old
LibClamAV Warning: *** The virus database is older than 7 days! ***
error when restarting the service. After checking things out and reading the forums I can't figure out why though...

Here's my config files:
-- freshclam.conf FILE

DatabaseDirectory /var/clamav
UpdateLogFile /var/log/clamav/freshclam.log
LogSyslog yes
DatabaseOwner qscand
DatabaseMirror db.local.clamav.net
DatabaseMirror db.local.clamav.net
NotifyClamd /etc/clamd.conf

-- clamd.conf FILE

LogFile /var/log/clamav/clamd.log
LogFileMaxSize 0
LogTime yes
LogSyslog yes
PidFile /var/run/clamav/clamd.pid
TemporaryDirectory /var/tmp
DatabaseDirectory /var/clamav
LocalSocket /tmp/clamd.socket
FixStaleSocket yes
TCPSocket 3310
TCPAddr 127.0.0.1
MaxConnectionQueueLength 30
MaxThreads 50
ReadTimeout 300
User qscand
AllowSupplementaryGroups yes
ScanPE yes
ScanELF yes
DetectBrokenExecutables yes
ScanOLE2 yes
ScanMail yes
ScanArchive yes
ArchiveBlockEncrypted no

I've run freshclam and it says it's all ok. I also check the files in /var/clamav/ and there are newly updated files there, which I assumes means it's being updated in the right place. (also, everything there is owner:group qscand)

The clamav log file also states :
Sun Feb 15 16:57:05 2009 -> Reading databases from /var/clamav

locate libclam brings the following files:
lrwxrwxrwx 1 root root 18 Feb 13 15:11 /usr/lib/libclamav.so.5 -> libclamav.so.5.0.4
-rwxr-xr-x 1 root root 735504 Jan 23 21:11 /usr/lib/libclamav.so.5.0.4
lrwxrwxrwx 1 root root 21 Feb 13 15:11 /usr/lib/libclamunrar.so.5 -> libclamunrar.so.5.0.4
-rwxr-xr-x 1 root root 47648 Jan 23 21:11 /usr/lib/libclamunrar.so.5.0.4
lrwxrwxrwx 1 root root 27 Feb 13 15:11 /usr/lib/libclamunrar_iface.so.5 -> libclamunrar_iface.so.5.0.4
-rwxr-xr-x 1 root root 7568 Jan 23 21:11 /usr/lib/libclamunrar_iface.so.5.0.4


Help! Anyone know what else the problem could be?

Maybe the mirror you use is outdated. Also according to the stock freshclam.conf file, you should use: "DatabaseMirror database.clamav.net".
Also there is no need to define twice the mirror.

But why is it done twice out of the box? Mine looks like:A couple months ago I thought it was weird to have it twice so I started checking to see if it would work fine with just one, but could never get it to work properly that way IIRC. =/

Thanks bathory, I changed it to

DatabaseMirror database.clamav.net
DatabaseMirror db.local.clamav.net

ran freshclam and clamd restarted with no warnings!

What's wierd is that the freshclam.conf file was untouched by me except the user value. Oh well, now it works, so thanks again!