Hi, I am working on two nearly identical Debian systems, upgrading exim4 lite to heavy, and configuring each to run clamav. One of them seems to work okay, but the other creates an exim4 paniclog with a rapid series of messages like this: 2007-02-14 09:56:52 1HHLYy-0005Lp-KR malware acl condition: unable to connect to sophie UNIX socket (/var/run/sophie). errno=2 Neither system has anything at /var/run/sophie, and the files clamd.conf and conf.d/acl/40_exim4-config_check_data are identical as far as diff is concerned. Any ideas about where to look for the problem would be gratefully received. Chuck -- The Moon is Waning Crescent (12% of Full) But you can get a few downloads from http://www.mhcable.com/~chuckh