ClamAV SaneSecurity Signatures
From ASSPSMTP
Install instructions for ClamSup, the ClamAV SaneSecurity signatures synchronization script.
The SaneSecurity signatures are a collection of signatures for phishing, scam, and image spam emails.
More info can be obtained at the above link.
This article assumes you installed ClamAV according to the Installing ClamAV and the Clamd Service on Win32 article.
Some paths may differ from those shown if you used a different installer.
Some paths may differ from those shown if you used a different installer.
Download
- ClamSup.zip
- rsync_w32.zip You can ignore this if you do not wish to use rsync
Installation
- Extract the above files to
c:\ClamSup\
- Open 'ClamSup.cfg' in notepad.
- Change the LOCALFOLDER path to:
C:\Progra~1\clamAV\data\
- Change the CLAMSCAN path to:
C:\Progra~1\clamAV\clamscan.exe
- Save and close 'ClamSup.cfg'
- Change the LOCALFOLDER path to:
- Open 'ClamSup.ini' in notepad You can ignore this section if you do not wish to use rsync
- Go to the 'MSRBL signature updates' section.
- Comment out 'http://download.mirror.msrbl.com;MSRBL-SPAM.ndb;N;Y;Y' by putting a # in front of it.
#http://download.mirror.msrbl.com;MSRBL-SPAM.ndb;N;Y;Y
- Delete the # and blank space in front of 'rsync://rsync.mirror.msrbl.com/msrbl;MSRBL-SPAM.ndb;N;Y;Y'
rsync://rsync.mirror.msrbl.com/msrbl;MSRBL-SPAM.ndb;N;Y;Y
- Save and close 'ClamSup.url'
- Double click 'ClamSup.bat'
- You should see 'scam.ndb', 'phish.ndb'. and 'MSRBL-SPAM.ndb' in the 'C:\Program Files\clamAV\data' folder when 'ClamSup.url' is finished running.
- Schedule the script to run every 3 hours using Scheduled Tasks.


