anchor.diff:  porcupine.ndb  #LOW Brazilian e-mail phishing and malware signatures 
   phishtank.ndb  #LOW Online and valid phishing urls from phishtank.com data feed 
   
  -" # END SANESECURITY DATABASE
  -
  -
  +### Sanesecurity YARA Format rules
  +### Note: Yara signatures require ClamAV 0.99 or newer to work
  +#Sanesecurity_sigtest.yara #LOW Sanesecurity test signatures 
  +#Sanesecurity_spam.yara #LOW detect spam 
  +
  +" # END SANESECURITY DATABASES
  +
  +# ========================
  +# SecuriteInfo Database(s)
  +# ========================
  +# Only active when you set your securiteinfo_authorisation_signature
  +# Add or remove database file names between quote marks as needed.  To
  +# disable any SecuriteInfo database downloads, remove the appropriate
  +# lines below.
  +securiteinfo_dbs="
  +### Securiteinfo https://www.securiteinfo.com/services/improve-detection-rate-of-zero-day-malwares-for-clamav.shtml
  +## REQUIRED, Do NOT disable
  +securiteinfo.ign2
  +# LOW
  +securiteinfo.hdb #LOW Malwares in the Wild
  +javascript.ndb  #LOW Malwares Javascript 
  +securiteinfohtml.hdb  #LOW Malwares HTML 
  +securiteinfoascii.hdb  #LOW Text file malwares (Perl or shell scripts, bat files, exploits, ...)
  +securiteinfopdf.hdb #LOW Malwares PDF 
  +# HIGH
  +#spam_marketing.ndb #HIGH Spam Marketing /  spammer blacklist
  +" #END SECURITEINFO DATABASES
  +
  +# ========================
  +# Linux Malware Detect Database(s)
  +# ========================
  +# Add or remove database file names between quote marks as needed.  To
  +# disable any SecuriteInfo database downloads, remove the appropriate
  +# lines below.
  +linuxmalwaredetect_dbs="
  +### Linux Malware Detect https://www.rfxn.com/projects/linux-malware-detect/
  +# LOW
  +rfxn.ndb #LOW HEX Malware detection signatures
  +rfxn.hdb  #LOW MD5 malware detection signatures
  +" #END LINUXMALWAREDETECT DATABASES
  +
  +# =========================
  +# MalwarePatrol Database 
  +# =========================
  +# Only active when you set your malwarepatrol_receipt_code
  +## REQUIRED, Do NOT disable
  +malwarepatrol_db="malwarepatrol.db" #LOW URLs containing of Viruses, Trojans, Worms, or Malware  
  +
  +# ========================
  +# Yara Rules Project Database(s)
  +# ========================
  +# Add or remove database file names between quote marks as needed.  To
  +# disable any Yara Rule database downloads, remove the appropriate
  +# lines below.
  +yararules_dbs="
  +### Yara Rules https://github.com/Yara-Rules/rules
  +# LOW
  +antidebug.yar #LOW anti debug and anti virtualization techniques used by malware 
  +malicious_document.yar #LOW documents with malicious code
  +# MED
  +#packer.yar #MED well-known sofware packers
  +# HIGH
  +#crypto.yar #HIGH detect the existence of cryptographic algoritms
  +" #END YARARULES DATABASES
  +
  +
  +# =========================
  +# Additional signature databases
  +# =========================
   # Additional signature databases can be specified here in the following
   # format: PROTOCOL://URL-or-IP/PATH/TO/FILE-NAME (use a trailing "/" in
   # place of the "FILE-NAME" to download all files from specified location,
  
positive.code: bofhland_phishing_URL.ndb #LOW Phishing URLs
  bofhland_malware_attach.hdb #LOW Malware Hashes
  
  ### CRDF https://threatcenter.crdf.fr/
  # LOW
  crdfam.clamav.hdb #LOW List of new threats detected by CRDF Anti Malware  
  
negative.code: # or the general script comments, change the following variables to
  # "yes".  If all variables are set to "yes", the script will output
  # nothing except error conditions.
  silence_ssl="no"	# "yes" disables certificate verification
  curl_silence="no"      # Default is "no" to report curl statistics
  rsync_silence="no"     # Default is "no" to report rsync statistics
  gpg_silence="no"       # Default is "no" to report gpg signature status
  comment_silence="no"   # Default is "no" to report script comments
  
  # If necessary to proxy database downloads, define the rsync and/or curl
  # proxy settings here.  For rsync, the proxy must support connections to
  