Anne Wilson wrote:
freshclam.conf was root:root, so I've fixed that. Running your strace command gives me
strace -eopen clamscan open("/etc/freshclam.conf", O_RDONLY) = 3 open("/var/clamav/daily.cld", O_RDONLY) = 3 open("/var/clamav", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY) = 3 open("/var/clamav/main.cvd", O_RDONLY) = 4
So it opened freshclam.conf and then proceeded to read the database which is kept fresh by freshclam.
The message about signatures being ancient comes from ClamTK virus scanner. Maybe there's some connection there that needs fixing?
I have no idea about ClamTK - so yes, that might be the problem. No idea where that looks >:)
Cheers,
Ralph