On Friday 16 May 2014 02:37:08 Steve Basford did opine And Gene did reply: > >> UNOFFICIAL means it did not come from ClamAV®. > >> You need to take it up with whomever maintains the MBL database. > >> MalwarePatrol? <http://malwarepatrol.com.br/> > > > > I don't recall every subscribing to that service, and the clamav- > > unofficial sigs database is not installed, and never has been. > > > > Now what? Shut down my daily scan? > > Hi Gene, > > Malware Patrol databases used to be a free service and was included in > most of the 3rd party download scripts, however, it's since changed to > a subscription service. > > These databases aren't mirrored by Sanesecurity, so I don't have any > real input, however, I have added the FP signature to Sanesecurity > mirrored sigwhitelist.ign2 file. > > The databases to look for in your clamav database area are: > > mbl.db > mbl.ndb
I didn't have the first one, but I just killed the .ndb and restarted the deamon. > > Remove both and restart clamd > > If the above databases come back... you've got to check your download > scripts and remove them. > > Alternatively, > > printf "MBL_343814" > localwhitelist.ign2 > place localwhitelist.ign2 into your clamav database directory > restart clamd. > > For future reference, here's the current FP report addresses: > > http://sanesecurity.com/support/false-positives/ Thanks for the link. > Hope this helps a little... I suspect a lot, thank you, Steve. > > Cheers, > > Steve > Sanesecurity Cheers, Gene Heskett -- "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author) Genes Web page <http://geneslinuxbox.net:6309/gene> US V Castleman, SCOTUS, Mar 2014 is grounds for Impeaching SCOTUS _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
