I don't know. Please check the ClamAV documentation for this. What's the value of $go_info["server"]["network_config"] in /home/admispconfig/ispconfig/lib/config.inc.php?
Falko, here is the value in my config.inc.php: $go_info["server"]["network_config"] = 0; // 0 = none, 1 = automatic what does this mean or should be? as for the clamv i ended up moving the 9 files to a temp folder using clamscan commands and once i got the 9 files in that folder i had clamscan removed them the files that were infected. For what it is worth are as follows (they have been deleted now) server:~/infected # dir total 186032 drwxr-xr-x 2 root root 504 Mar 24 08:48 . drwx------ 28 root root 2416 Mar 24 07:21 .. -rw-r--r-- 1 root root 14130 Mar 1 19:45 0aeb93aa24adec6e5e04c2928ef8b62b.eml -rw-r--r-- 1 admispconfig admispconfig 14130 Mar 1 19:45 0aeb93aa24adec6e5e04c2928ef8b62b.eml.000 -rw------- 1 root root 44363 Mar 12 20:27 1142220453.599_0.server -rw-r--r-- 1 admispconfig admispconfig 17369 Mar 22 12:11 480ea2d98a2bf150bebb270daa4324c5.eml -rw-r--r-- 1 root root 14083 Mar 1 19:45 4cd59f0efaf9647560d3fc224de6bdb6.eml -rw-r--r-- 1 admispconfig admispconfig 14083 Mar 1 19:45 4cd59f0efaf9647560d3fc224de6bdb6.eml.000 -rw------- 1 root root 190074880 Mar 17 12:35 JagTEa.tar -rw-r--r-- 1 admispconfig admispconfig 17319 Mar 22 12:10 c181681220fc92f650a1730d530ed2d8.eml -rw------- 1 oneillpcs.com_shane web1 80719 Mar 16 05:19 quota.oneillpcs.com_shane server:~/infected # After these files were removed i did another clamscan and no more infection found...maybe that will help. LOL
This means that ISPConfig does not reconfigure your network card (eth0) when you add a new IP in the ISPConfig interface.