I'm using CentOS 5 with Exim, Spamassassin and Clamav however Clamav is not working. I have confirmed this by using the eicar test.

/etc/exim/exim.conf

av_scanner = /var/run/clamav/clamd.socket <-- yep the socket exists

acl_check_data:

deny malware = *
message = This message contains a virus ($malware_name).

/etc/clamd.conf

SocketFile = /var/run/clamav/clamd.socket

I've also added clamd to the Exim group.

Not sure what the problem could be.

My setup is the same as yours except my av_scanner is:

av_scanner = clamd:/var/lib/clamav/clamd.sock

And I also have the following in clamd.conf:

AllowSupplementaryGroups yes

Is there anything out of the ordinary in your clamd.log or exim/mainlog files? Normally when clamd is acting up, exim complains heavily.

Also, I'm using Arch Linux and my clamd user is clamav (not clamd). Make sure that is right for your group file.

My mistake - the user/group is clamav.

I did "usermod -G exim clamav"

Nothing in my logs. No mention of it in clamd.log or exim main.log.