anchor.diff:  porcupine.ndb  #LOW Brazilian e-mail phishing and malware signatures 
   phishtank.ndb  #LOW Online and valid phishing urls from phishtank.com data feed 
   
  -" # END SANESECURITY DATABASE
  -
  -
  +### Sanesecurity YARA Format rules
  +### Note: Yara signatures require ClamAV 0.99 or newer to work
  +#Sanesecurity_sigtest.yara #LOW Sanesecurity test signatures 
  +#Sanesecurity_spam.yara #LOW detect spam 
  +
  +" # END SANESECURITY DATABASES
  +
  +# ========================
  +# SecuriteInfo Database(s)
  +# ========================
  +# Only active when you set your securiteinfo_authorisation_signature
  +# Add or remove database file names between quote marks as needed.  To
  +# disable any SecuriteInfo database downloads, remove the appropriate
  +# lines below.
  +securiteinfo_dbs="
  +### Securiteinfo https://www.securiteinfo.com/services/improve-detection-rate-of-zero-day-malwares-for-clamav.shtml
  +## REQUIRED, Do NOT disable
  +securiteinfo.ign2
  +# LOW
  +securiteinfo.hdb #LOW Malwares in the Wild
  +javascript.ndb  #LOW Malwares Javascript 
  +securiteinfohtml.hdb  #LOW Malwares HTML 
  +securiteinfoascii.hdb  #LOW Text file malwares (Perl or shell scripts, bat files, exploits, ...)
  +securiteinfopdf.hdb #LOW Malwares PDF 
  +# HIGH
  +#spam_marketing.ndb #HIGH Spam Marketing /  spammer blacklist
  +" #END SECURITEINFO DATABASES
  +
  +# ========================
  +# Linux Malware Detect Database(s)
  +# ========================
  +# Add or remove database file names between quote marks as needed.  To
  +# disable any SecuriteInfo database downloads, remove the appropriate
  +# lines below.
  +linuxmalwaredetect_dbs="
  +### Linux Malware Detect https://www.rfxn.com/projects/linux-malware-detect/
  +# LOW
  +rfxn.ndb #LOW HEX Malware detection signatures
  +rfxn.hdb  #LOW MD5 malware detection signatures
  +" #END LINUXMALWAREDETECT DATABASES
  +
  +# =========================
  +# MalwarePatrol Database 
  +# =========================
  +# Only active when you set your malwarepatrol_receipt_code
  +## REQUIRED, Do NOT disable
  +malwarepatrol_db="malwarepatrol.db" #LOW URLs containing of Viruses, Trojans, Worms, or Malware  
  +
  +# ========================
  +# Yara Rules Project Database(s)
  +# ========================
  +# Add or remove database file names between quote marks as needed.  To
  +# disable any Yara Rule database downloads, remove the appropriate
  +# lines below.
  +yararules_dbs="
  +### Yara Rules https://github.com/Yara-Rules/rules
  +# LOW
  +antidebug.yar #LOW anti debug and anti virtualization techniques used by malware 
  +malicious_document.yar #LOW documents with malicious code
  +# MED
  +#packer.yar #MED well-known sofware packers
  +# HIGH
  +#crypto.yar #HIGH detect the existence of cryptographic algoritms
  +" #END YARARULES DATABASES
  +
  +
  +# =========================
  +# Additional signature databases
  +# =========================
   # Additional signature databases can be specified here in the following
   # format: PROTOCOL://URL-or-IP/PATH/TO/FILE-NAME (use a trailing "/" in
   # place of the "FILE-NAME" to download all files from specified location,
  
positive.code: # This file contains user configuration settings for the clamav-unofficial-sigs.sh
  ###################
  # This is property of eXtremeSHOK.com
  # You are free to use, modify and distribute, however you may not remove this notice.
  # Copyright (c) Adrian Jon Kriel :: admin@extremeshok.com
  ##################
  # 
  # Originially based on: 
  # Script provide by Bill Landry (unofficialsigs@gmail.com).
  #
  # Script updates can be found at: https://github.com/extremeshok/clamav-unofficial-sigs
  #
  # License: BSD (Berkeley Software Distribution)
  
  ################################################################################
  #                     USER CONFIGURATION FILE FOR SCRIPT:                      #
  #                                    * * *                                     #
  #                          clamav-unofficial-sigs.sh                           #
  #                                    * * *                                     #
  #   SET PROGRAM PATHS AND OTHER VARIABLE OPTIONS FOR THE SCRIPT IN THIS FILE   #
  #                                    * * *                                     #
  #                NOT COMPATIBLE WITH VERSION 3.XX CONFIG                       #
  #                                                                              #
  ################################################################################
  
  # Edit the quoted variables below to meet your own particular needs
  # and requirements, but do not remove the "quote" marks.
  
  # Be sure to set the appropriate shell for your OS Platform.  It's been
  # reported that "sh" works best for BSD variants, "ksh" for Sun Solaris,
  # and "bash" for Linux variants.  If you experience problems running the
  # script, please try editing the top line of the script file and changing
  # "sh" to either "ksh" or "bash" before reporting a problem.
  
  # Set and export the appropriate program paths for your OS platform.  Required
  # utilities include: find, xargs, sed, awk, cut, dig, grep, tail, chown, chmod,
  # cmp, diff, gzip, ls, cp, mv, test, gpg, host, sleep, cksum, rsync, curl, perl,
  # and optionally socat.  It's been reported that on Sun systems, the GNU utilities
  # should be used rather than the default Sun OS versions of these utilities.
  PATH="/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin"
  export PATH
  
  # Set the appropriate ClamD user and group accounts for your system.
  # If you do not want the script to set user and group permissions on
  
negative.code: # spelled correctly or you will experience issues when the script runs
  # (hint: all rsync servers will fail to download signature updates).
  
  sanesecurity_dbs=" # BEGIN SANESECURITY DATABASE
  ### SANESECURITY http://sanesecurity.com/usage/signatures/
  ## REQUIRED, Do NOT disable
  sanesecurity.ftm  #REQUIRED Message file types, for best performance
  sigwhitelist.ign2 #REQUIRED Fast update file to whitelist any problem signatures
  ## LOW
  