Instead of disabling Yara rules altogether (I use them),
in /etc/clamav-unofficial-sigs/user.conf commented out the line
Code: Select all
#yararulesproject_dbs_rating="HIGH"
Code: Select all
systemctl restart clamd@scan
Code: Select all
#yararulesproject_dbs_rating="HIGH"
Code: Select all
systemctl restart clamd@scan