Hi Steve, > Can do do the following test for me... > 1. Load db's as normal.. make a note of the time to load. > 2. sed -i "s/:687474703A2F2F/:2F2F/g" bofhland_malware_URL.ndb > 3. reload and take a note of the time. > Any improvement? Befor sed command: Wed Apr 25 11:44:51 2012 -> Reading databases from /var/log/copfilter/default/opt/clamav/virdb Wed Apr 25 11:47:36 2012 -> Database correctly reloaded (3366359 signatures) 2:45 min After sed command: Wed Apr 25 11:52:50 2012 -> Reading databases from /var/log/copfilter/default/opt/clamav/virdb Wed Apr 25 11:54:12 2012 -> Database correctly reloaded (3366359 signatures) 1.22 min regards Hans mailto:severus@xxxxxxxxxx