Hi there, On Thu, 2 Jan 2020, i...@schroeffu.ch wrote:
... custom signatures file securiteinfohtml.hdb in ClamAV with false positives, so I deleted the file /var/lib/clamav/securiteinfohtml.hdb and restarted clamav (freshclam, clamd). But ClamAV seems still using this signature DB, it is still detecting viruses from this deleted database. So, somewhere this database is still not purged or saved in a place i don't know.
Perhaps freshclam simply replaced the deleted database, did you check?
How do I purge a CustomDatabaseURL correctly?
If my guess is correct, in addition to removing the database itself you need to tell freshclam not to download the securiteinfohtml.hdb database. Either remove or comment the DatabaseCustomURL line (not CustomDatabaseURL) in your freshclam.conf file.
ClamAV 0.101.4 fromdefault Server Repo
A lot has changed since that version of ClamAV, I recommend upgrading. -- 73, Ged. _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
