anchor.diff:  # Add or remove database file names between quote marks as needed.  To
   # disable usage of any of the Sanesecurity distributed database files
   # shown, remove the database file name from the quoted section below.
  -# To disable usage of all Sanesecurity distributed databases, comment
  -# all of the quoted lines below.  Only databases defined as "low" risk
  -# have been enabled by default (for additional information about the
  -# database ratings, see: http://www.sanesecurity.com/clamav/databases.htm).
  +# Only databases defined as "low" risk have been enabled by default 
  +# for additional information about the database ratings, see: 
  +# http://www.sanesecurity.com/clamav/databases.htm
   # Only add signature databases here that are "distributed" by Sanesecuirty
   # as defined at the URL shown above.  Database distributed by others sources
   # (e.g., SecuriteInfo & MalewarePatrol, can be added to other sections of
  
positive.code: porcupine.ndb  #LOW Brazilian e-mail phishing and malware signatures 
  phishtank.ndb  #LOW Online and valid phishing urls from phishtank.com data feed 
  
  " # END SANESECURITY DATABASE
  
  
  # Additional signature databases can be specified here in the following
  # format: PROTOCOL://URL-or-IP/PATH/TO/FILE-NAME (use a trailing "/" in
  # place of the "FILE-NAME" to download all files from specified location,
  
negative.code: # spelled correctly or you will experience issues when the script runs
  # (hint: all rsync servers will fail to download signature updates).
  
  sanesecurity_dbs=" # BEGIN SANESECURITY DATABASE
  ### SANESECURITY http://sanesecurity.com/usage/signatures/
  ## REQUIRED, Do NOT disable
  sanesecurity.ftm  #REQUIRED Message file types, for best performance
  sigwhitelist.ign2 #REQUIRED Fast update file to whitelist any problem signatures
  ## LOW
  