Remove any rules file with 'sare' in its name. It would also be wise to make sure that you are running 'sa-update' regularly (weekly at least, ideally daily) to be sure that you have the current default ruleset.
Thanks, Bill. I'll do that right away. Paul Schmehl Independent Researcher