On 25th March 2015, securiteinfo announced changes to their databases:
http://lurker.clamav.net/message/20150325.133202.843fba9f.en.html
Yesterday it appears from the slightly annoyed emails I've been reciving,
that they removed their databases from the old clamav.securiteinfo.com and
diverted the domain to their main website.
Some users were left with either bad databases or lots of errors in their
log files, depending on their scripts they were using.
If you are seeing errors, and are using Bill Landry's ClamAV Unofficial
Signatures Updater, please edit clamav-unofficial-sigs.conf and
*** comment out these databases***
as they are no longer running on clamav.securiteinfo.com
# ========================
# SecuriteInfo Database(s)
# ========================
# Add or remove database file names between quote marks as needed. To
# disable any SecuriteInfo database downloads, remove the appropriate
# lines below. To disable all SecuriteInfo database file downloads,
# comment all of the following lines.
si_dbs="
honeynet.hdb
securiteinfo.hdb
securiteinfobat.hdb
securiteinfodos.hdb
securiteinfoelf.hdb
securiteinfohtml.hdb
securiteinfooffice.hdb
securiteinfopdf.hdb
securiteinfosh.hdb
"
As a side note, securiteinfo signatures are distributed by securiteinfo
themselves and don't have anything to do with the signatures
provided/distributed by Sanesecurity.
Having said that, as they are in Bill Landry's ClamAV Unofficial
Signatures Updater script, I'm putting this message out, to try and avoid
even more annoyance when people hit issues caused by their changes.
Cheers,
Steve
Web : sanesecurity.com
Blog: sanesecurity.blogspot.com
