this adds a handy cronjob adding some additional databases to your clamav ( which is not so bad alone already, but yeah... ) This is just more a note that https://github.com/extremeshok/clamav-unofficial-sigs exists ... Code: cd /tmp/ git clone https://github.com/extremeshok/clamav-unofficial-sigs.git cd clamav-unofficial-sigs/ apply https://github.com/extremeshok/clamav-unofficial-sigs/pull/193 to clamav-unofficial-sigs.sh Code: line 1798: - if [ "$current_clamav_version" -le "$minimum_yara_clamav_version" ] ; then # Older + if [ "$current_clamav_version" -lt "$minimum_yara_clamav_version" ] ; then # Older Code: mkdir -p /usr/local/sbin/ mkdir -p /var/log/clamav-unofficial-sigs/ mkdir -p /etc/clamav-unofficial-sigs/ cp clamav-unofficial-sigs.sh /usr/local/sbin/ chmod +x /usr/local/sbin/clamav-unofficial-sigs.sh cp -f config/*.* /etc/clamav-unofficial-sigs/ cp -f systemd/*.* /etc/systemd/ mv /etc/clamav-unofficial-sigs/os.debian9.conf /etc/clamav-unofficial-sigs/os.conf read trough /etc/clamav-unofficial-sigs/master.conf and get some keys or not it's free or just disable these 2 securiteinfo_enabled="no" # SecuriteInfo malwarepatrol_enabled="no" # Malware Patrol now uncomment user_configuration_complete="yes" in /etc/clamav-unofficial-sigs/user.conf and check /etc/clamav/clamd.conf for OfficialDatabaseOnly false Code: clamav-unofficial-sigs.sh --install-all should work.. except you have an issue dunno https://github.com/extremeshok/clamav-unofficial-sigs/issues/204 ...