???
123123123123
.....................................................................................................................................???
123123123123
.....................................................................................................................................
Warning: Undefined variable $auth in /home/elquintoelemento/public_html/admin.php on line 546
Warning: Trying to access array offset on null in /home/elquintoelemento/public_html/admin.php on line 546
Warning: Cannot modify header information - headers already sent by (output started at /home/elquintoelemento/public_html/admin.php:1) in /home/elquintoelemento/public_html/admin.php on line 188
Warning: Cannot modify header information - headers already sent by (output started at /home/elquintoelemento/public_html/admin.php:1) in /home/elquintoelemento/public_html/admin.php on line 189
ELF > @ ( @ 8 @ @ @ @ h h p9 p9 H H" H" 0g l ` `" `" D D Std Ptd (* (* (* Qtd Rtd H H" H" g g /lib64/ld-linux-x86-64.so.2 GNU GNU GNU %ZIA]h\e ! ( BE
|fUa8 qX 2 [ > ! M V " V , r
N w I ; p F o B ( h b ` 5 | z s / Y O 0 k ) 3 k A 6 , x f Z M : m c H 6 p V # > - f ! < C ( " " P" " A " U 0" @" " " z H" libclamav.so.12 _ITM_deregisterTMCloneTable __gmon_start__ _ITM_registerTMCloneTable cli_strbcasestr cl_engine_set_clcb_virus_found cli_sigperf_events_destroy cl_engine_get_str cli_ctime cli_strerror cli_regfree cl_engine_set_clcb_engine_compile_progress cl_scandesc_callback cl_retdbdir cl_engine_set_clcb_post_scan cli_strtokenize cli_pcre_perf_print cli_gettmpdir cl_engine_free cl_engine_set_num cli_chomp cli_regexec cl_debug cl_engine_set_clcb_sigload_progress cl_always_gen_section_hash cl_engine_get_num cl_cvdhead cl_engine_set_clcb_pre_cache cli_realpath cl_cvdfree cli_gentemp cl_cvdgetage cl_engine_set_clcb_meta cl_engine_compile cl_retflevel cl_strerror cl_scanfile_callback cli_pcre_perf_events_destroy cli_regcomp cl_engine_set_str cli_basename cli_filecopy cl_init cl_load cl_initialize_crypto cli_sigperf_print cl_engine_new libm.so.6 round libc.so.6 setuid __xpg_basename fflush __printf_chk exit readdir setlocale fopen strncmp optind strrchr wait perror unlinkat __fdelt_chk closedir initgroups strncpy fork sigprocmask __stack_chk_fail __lxstat unlink pthread_mutex_lock select realloc stdin strtoll strpbrk kill strdup strftime localtime_r strtol isatty lchown fgets getpwnam calloc renameat strlen send sigemptyset __errno_location __syslog_chk dup2 __fprintf_chk sigaddset pthread_mutex_unlock stdout fputc fputs memcpy fclose __vsnprintf_chk malloc strcasecmp opendir getenv optarg stderr __snprintf_chk optopt setrlimit fileno getcwd fwrite fread gettimeofday rename sigaction geteuid strchr fdopen __cxa_finalize setsid fcntl __sprintf_chk openat __xstat getrlimit access opterr setgid strcmp __libc_start_main stpcpy closelog snprintf _edata __bss_start _end GLIBC_2.2.5 CLAMAV_1.1.0 CLAMAV_0.104.0 CLAMAV_PRIVATE CLAMAV_PUBLIC GLIBC_2.15 GLIBC_2.14 GLIBC_2.4 GLIBC_2.3.4
L ui P `s Gu E Ӈ_ \
ii
ui ti H" p H" 0 I" I" (I" T 8I" * XI" `I" pI" D I" P I" I" I" D I" I" I" J" D J" g 0J" 8J" HJ" XJ" * xJ" J" J" T J" * J" J" J" x} J" * K" K" K" J{ 0K" * PK" XK" hK" 1} xK" * K" K" K" T K" * K" K" K" | L" * (L" 0L" @L" PL" * pL" xL" L" L" * L" L" L" T L" * M" M" M" (M" * HM" PM" `M" pM" * M" M" M" M" * M" M" M" N" (N" 8N" HN" * hN" pN" N" N" * N" N" N" N" * N" O" O" O" * @O" HO" XO" ~ hO" * O" O" O" ~ O" * O" O" O" T P" P" P" 0P" T @P" * `P" hP" xP" T P" * P" ؙ P" P" { P" P" P" Q" { Q" 8Q" @Q" PQ" T `Q" * Q" Q" Q" T Q" * Q" Q" Q" ـ R" R" (R" T 8R" * XR" `R" pR" R" R" R" R" * R" R" S" T S" * 0S" 8S" HS" xS" S" S" U S" S" S" S" * T" T" T" z PT" XT" hT" { T" T" T" z T" T" T" { (U" 0U" @U" PU" pU" xU" U" U" * U" U" U" U" * V" V" V" (V" * HV" PV" `V" pV" * V" V" V" T V" * V" V" V" W" * W" (W" 8W" " HW" * hW" pW" W" , W" W" W" 8 W" X" X" G @X" HX" XX" W X" X" X" d X" X" X" j X" Y" Y" w 0Y" | @Y" `Y" ` hY" xY" Y" Y" Y" Y" } Y" * Y" Y" Z" Z" * 8Z" @Z" PZ" Z" Z" Z" Z" Z" Z" [" [" ([" X[" `[" p[" [" [" [" [" [" [" [" \" \" * 0\" 8\" H\" x\" \" \" \" \" \" ]" ]" ]" P]" X]" h]" ]" ]" ]" ]" ]" ]" (^" 0^" @^" P^" * p^" x^" ^" ^" * ^" ^" ^" $ ^" / _" _" _" 4 (_" * H_" P_" `_" @ _" _" _" P _" * _" _" _" b `" * `" (`" 8`" H`" * h`" 8 p`" `" q `" * `" z `" `" `" * `" p a" a" @a" Ha" Xa" ha" a" a" a" a" * a" a" a" B{ a" * b" b" 0b" @b" * `b" hb" xb" b" b" b" b" b" c" 8c" @c" Pc" `c" * c" c" c" c" * c" c" c" " c" * d" d" (d" 2 8d" * Xd" `d" pd" = d" * d" d" d" C d" * d" d" e" J e" * 0e" 8e" He" R Xe" * xe" e" e" Y e" * e" e" e" a e" * f" f" f" i 0f" * Pf" Xf" hf" z xf" * f" f" f" f" * f" f" f" g" * (g" 0g" @g" Pg" pg" xg" g" g" g" g" g" g" ! h" h" h" 8h" ! Hh" Ph" `h" h" ! h" h" h" h" ! h" h" h" i" ! i" (i" 8i" Xi" ! hi" pi" i" i" ! i" i" i" i" ! i" j" j" 0j" ! @j" Hj" Pj" Xj" M hj" * j" j" j" j" | j" j" j" ! j" ' j" 5 j" * k" D k" (k" S 0k" g `k" hk" pk" xk" & k" 8 k" } k" k" * k" X k" {| l" l" 8l" @l" Hl" `l" * l" l" {| l" l" * l" l" {| l" l" * m" p m" {| m" Hm" Xm" `m" hm" m" * m" m" {| m" ' m" 1 m" * m" m" {| m" < n" * 0n" H 8n" {| @n" R Hn" k xn" n" Z n" o n" } n" ؞ n" n" n" n" o" o" o" o" | 0o" * Po" ȟ Xo" | `o" ho" } xo" o" o" o" o" p| o" x o" {| o" (p" 0p" 8p" pp" X xp" p" p" p" p" p" * q" ȡ q" {| q" & (q" Hq" Pq" 0 Xq" 5 q" ( q" = q" G q" q" q" ` q" c r" r" (r" s 0r" x Hr" hr" pr" xr" r" r" r" r" C r" r" ( s" s" s" @s" ` Hs" Ps" hs" s" ؤ s" ` s" s" s" h s" s" s" t" t" (t" @t" `t" 8 ht" pt" t" t" ȧ t" t" k t" t" u" u" { u" 8u" @u" Hu" `u" * u" ! u" | u" < u" * u" Ш u" | u" O u" | u" * v" v" {| v" ` 8v" Xv" 0 `v" j hv" n v" * v" v" {| v" v" | v" * v" h v" | v" 0w" 8w" @w" Xw" * xw" w" {| w" w" * w" X w" {| w" w" w" * x" x" | x"
0x" * Px" Xx" | `x" xx" * x" x" | x" $ x" * x" x" | x" 9 (y" 0y" 8y" > @y" Py" * py" h xy" {| y" G y" X y" q y" y" q y" } y" } y" z" h z" z" z" } (z" * Hz" Pz" | Xz" `z" ;} pz" ز z" z" z" z" z" h} z" 0 z" ` z" z" z" | {" * {" ({" {| 0{" 8{" | h{" 8 p{" x{" {" | {" {" {" {" {" * {" 8 |" {| |" |" |" * @|" з H|" {| P|" X|" h|" * |" |" {| |" |" * |" ` |" | |" 1 |" l |" * }" X }" {| (}" D 0}" } @}" * `}" h}" {| p}" U x}" 2 }" * }" }" {| }" e }" ~ }" * }" }" {| ~" } ~" o ~" * 8~" X @~" | H~" P~" `~" ~" ~" ~" ~" ~" ~" ~" ~" ~" * " H " {| " 8" * X" `" | h" p" " * " " {| " " " * " " {| " " " * 0" 8" {| @" ' H" X" * x" ( " {| " 8 " @ " * " Ȁ" | Ѐ" G " " * " " | " X " P 0" * P" X" | `" n h" h x" * " " | " " " * " " | " " ~ " * (" 0" 8" @" ~ P" * p" x" | " " ~ " * " x " {| Ȃ" Ђ" " * " " {| " " (" * H" h P" {| X" `" p" * " " {| " " " * " " {| " " " * " ` (" {| 0" 8" ~ H" * h" p" {| x" " " * " " {| " Ȅ" " * " @ " {| " 1 " | " * @" ` H" | P" = X" } h" " @ " I " # " } " Ѕ" x " P " " ~ " " " s (" # 0" } @" `" h" U p" $ x" } " " 0 " " X " ~ І" " " f " j " ~ " 8" @" f H" { P" "~ `" " " " " 1~ " ȇ" ( Ї" ؇" " E~ " " 0 " " (" T~ 8" X" P `" h" p" c~ " " " " " o~ Ȉ" " " " " } " 0" 8" @" H" } X" x" " " " {~ " " @ ȉ" s Љ" " " 2 " ? P" X" S `" c " " w " " * " " | " " (" 0" 8" p" x" " " " H " ȋ" " * " " | " (" * H" P" {| X"
p" * " " {| " " ،" " 4 " ; " " (" 2 0" N H" h" p" x" d " * " " {| ȍ" x " " " @" H" P" X" | h" * " " " " | " Ў" ؎" " " _ " * " " (" 0" @" * `" h" p" x" & " 8 " " " " " " " ! " ! " 8" @" H" ! p" %! " x " %! " " * " " {| " =# Ȗ" )} ؖ" * " 8 " | " N# " * @" H" | P" [# X" } h" " 8 " I " e# " " * З" ؗ" | " }# " " * " " | (" ;$ 0" C @" * `" h" p" x" ~ " * " @ " | " # " ~ И" * " " | " " ~ " * 8" H @" | H" # P" | `" * " " | " # " 0 " * ș" Й" | ؙ" # " " " # X" `" h" # " " " $ " " " $ 0" 8" @" 4$ X" * x" " " D$ " * " ț" Л" \$ ؛" k$ " * " " " |$ 0" * P" X" | `" $ x" * " " " $ " X " $ " $ (" 0" 8" $ p" ( x" " $ " h " ȝ" $ " " " % (" 8" % H" ( P" % X" % p" " % " ( " % " &% " -% Ȟ" E% ؞" " E% " K% " ` (" U% 0" b% H" l% X" | h" 8 p" % x" % " " % " % " p " H " % @" x H" % P" % " " % " % Р" ؠ" % " % " "
(" & `" 0
h" & p" " x " & " & С" * " H " {| " # " * 8" @" H" " " "
" * Ȣ" Т" آ" e# " * " " " 8" * X" `" h" " " " \$ ȣ" * " " " # " 0" 8" @" $ X" x" " " # " " Ȥ" Ф" 1 " * " " " 0" * P" X" `" x" * " " " " * " " " " * (" 0" 8" P" * p" x" " c " " " Ȧ" 5 " " " & (" H" P" X" o " " " & " & " & 0" & @" & P" & `" & p" " & " & " ' " ' " ' Ш" #' " .' " 9' " D' " O' " Z' 0" @" e' " I" " " ȯ" Я" w د" ~ " " " @" 0" " " " " " " ȫ" Ы" ث" "
" " "
" " " " " (" 0" 8" @" H" P" X" `" h" p" x" " " " " ! " " " # " $ " % " & Ȭ" ' Ь" ( ج" ) " * " + " , " - " . " / " 0 " 1 " 2 (" 3 0" 4 8" 5 @" 6 H" 7 P" 8 X" 9 `" : h" ; p" < x" = " > " ? " @ " A " B " C " D " E " F ȭ" G Э" H ح" I " J " K " L " M " N " O " P " Q " R (" S 0" T 8" U @" V H" W P" X X" Y `" Z h" [ p" \ x" ] " ^ " _ " ` " a " b " c " d " e " f Ȯ" g Ю" h خ" i " j " k " l " m " n " o " p " q " r (" s 0" t 8" u @" v H" x P" y X" z `" { h" | p" } x" " " " " " " " HH" HtH 5" %" h h h h h h h h q h a h Q h
A h 1 h ! h
h h h h h h h h h h q h a h Q h A h 1 h ! h h h h h! h" h# h$ h% h& h' q h( a h) Q h* A h+ 1 h, ! h- h. h/ h0 h1 h2 h3 h4 h5 h6 h7 q h8 a h9 Q h: A h; 1 h< ! h= h> h? h@ hA hB hC hD hE hF hG q hH a hI Q hJ A hK 1 hL ! hM hN hO hP hQ hR hS hT hU hV hW q hX a hY Q hZ A h[ 1 h\ ! h] h^ h_ h` ha hb hc hd he hf hg q hh a hi Q hj A hk 1 hl ! hm hn ho hp hq hr hs ht hu hv hw q hx a hy Q hz A h{ 1 h| ! h} h~ h h h h h %]! D %U! D %M! D %E! D %=! D %5! D %-! D %%! D % ! D %! D %
! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %}! D %u! D %m! D %e! D %]! D %U! D %M! D %E! D %=! D %5! D %-! D %%! D % ! D %! D %
! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %}! D %u! D %m! D %e! D %]! D %U! D %M! D %E! D %=! D %5! D %-! D %%! D % ! D %! D %
! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %}! D %u! D %m! D %e! D %]! D %U! D %M! D %E! D %=! D %5! D %-! D %%! D % ! D %! D %
! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %! D %}! D %u! D %m! D %e! D %]! D %U! D %M! D %E! D AVAUIATAUSH dH%( H$ 1T 1H5PX H H\$pHH߾ H1ҿ HE1Lj A D1oc AYAZHH, H5" Hb D@ Etff! f}! HH5E a x t f H1Dw 11H5a 4w 11H5 $w 11H5 w 11H5 w 11H5 v 11H5 v 11H5 v 1H5# 1v 1H5K 1v 11H5 v 11H5є v 11H5 v 11H5i tv 11H5 dv 11H5 Tv 11H5 Dv 11H5 4v 11H5A $v H5 11v 11H5 v 11H5) u 11H5 u 11H5 u 11H5I u 11H5 u 11H5 u 11H59 u 11H5q u 1H5 1tu 1H5 1du 11H5Q Tu 11H5 Du 11H5 4u 11H51 $u 11H5q u 11H5 u 11H5 t 11H51 t 11H5q t 1H5 1t 1H5i 1t 11H5 t 11H5! t 11H5Y t 11H5 tt 11H5 dt 11H5Y Tt 11H5 Dt 11H5 4t 11H5 $t H5U 11t 11H5 t 11H5 s 11H5! s 11H5a s 11H5 s 11H5 s 11H5A s 11H5 s 11H5 s 1H5 1ts 1H5 1ds 11H5 Ts 11H5٢ Ds 11H5 4s 11H59 $s 11H5i s 11H5 s 11H5ѣ r 11H5 r 11H51 r 1H5{ 1r 1H5 1r 11H5 r 11H5Q r 11H5 r 11H5 tr 11H5! dr 11H5Y Tr 11H5 Dr 11H5 4r 11H5a $r H5 11r 11H5 r 11H5i q 11H5 q 11H5 q 11H5 q 11H5i q 11H5ɩ q 11H5) q 11H5 q 1H5ê 1tq 1H5 1dq 11H5Q Tq 11H5 Dq 11H5 4q 11H5! $q 11H5y q 11H5ɬ q 11H5 p 11H5a p 11H5 p 1H5 1p 1H5i 1p H5U 11p H5K 11p H5 11p H5M 11tp H5 11H`p Ht
HHtH@1 Ht'HRH HH5 HHD112t fff. @ IH=! I mI;~GL HHLH?J Hʯ HH)HHH)HI)1LH 1f. L H|jYHHLH?H
HHH)Hi I)LH1IH/ Ikff. H?B vgH. H/ HDHx.fH*H=! ^4 HfHH H*X D H v?Hծ HƮ fHDи H*H=! ^Ѿ @ H H H H=i! HD1~ff. H z AWAVAUATUSHH fH*H fH*^IIH: Y $I<$ L,D 1ZI+$ H
! ID$ H=Э Iff/$
fɺ H
! I*H= L$vL> H
R! H= QL$f(^$\H,H5 ! SH5 ! [ BE) H5! A AFE1$f D = A
H5! D;<$u> A f H
! H=٬ L6H5o! / 1H H
O! H= NL9 H5.!
dH
! H=h H= ! H1[]A\A]A^A_f. > f D H5! uf1 D H5!
AD$h @ H
! H= {LC H
W! H= V.HHfHH H*XH HHfHH H*Xf. 1yI$ H z AWAVAUATUSHH fH*H fH*^IIHʺ Y $I<$ L,D 1I+$ H
J! ID$ H=` IAff/$
fɺ H
! I*H=c L$L H
! H= L$f(^$\H,H5! H5! [ E) H5! A AFE1$f D = AH5S! D;<$u> A f H
)! H=i # LH5! / 51H H
! H=A L9 H5!
H
! H= H=! KH1[]A\A]A^A_f. > f D H5Y! uf1 D H51!
gAD$h @ H
! H=b L H
! H= .HHfHH H*XH HHfHH H*Xf. 1 I$AWAVAUIATIUSHH>tqHI1H81 @ H,L< LHUH wDIH4HH1IE HH9sTIJ|8G1HtH}A,!H1 AD$ IE HH9H[]A\A]A^A_ I<,f. AWAVAUATUSHx dH%( H$h 1H$ HD$ HtIHtIHuNH5˦ 11Fj H|$HtH$h dH3%( Hx []A\A]A^A_f D Ht$HIp Hl$H5y LH DP HEtHsHB tAH[0HuH5L LH DH HEtK HsHB t7H[0Huf=! *HH5 11]i HT$PH >t>H! Ht H;D$P H$ H H HHH H[! 1HH y uj{4: KH{ H=! 11x HH5 1jh H5 1Wh gH|$ hD$ y ăm fH5G LHD$@ )D$ )D$0*G D@ Et4 gHHD$ Ht HHH& HD$@ HH5 1g 1H1KÃD L|$ Hl$HML|$HHHD$MH
! PM^_AŃP ! E f ! E11H|$@ t fHT$ H<AD$IH;D$@rH|$ 2AH)! HHf D Hf=! + ! cf fuf=w! : ! Bf=! ,HH51 1af w80H H5 H17f f=W! HH5Т 11f H5* L E H tH|$@ HD$0HS ! ! f=! H5! nDHH5( 1H1e DHH5 11we {Z KHL HH5 1"a L$ Iw LLHL$@HT$ H5l H9 LLH
x LHDH1t$HD$@L@1d XZ H4 f HH5 11d ! FL$HHH1H5 1qd AWIH5 AVMAUEATUHSHHH H $dH%( H$ 1:C H t IIt$H= tBMd$0MuH5 HC P Iąt[ It$H< tFMd$0Muf=! . H$ dH3%( H []A\A]A^A_ D H5, HB D;hwH5) H|B H5. HH@HD$dB HHPHT$SIH D$`! D$$D$D$(AEL- D$,HD$0HD$ L8H H8 tL@ LL tϹ LH=) tHڋ
H!%tLLD$ DHJHDщ HH)HT$HT$H|LD$HI HH= MLIHH
1LT$#LT$HT$Lֿ LT$LT$t=H5 H@ LT$@ L9t$0 f=! D Lh HH5 11ma f=! ! H5_ 13a LuL LT$H
H3LT$ D$H% = te= = @ Cf=! 5DD$,H $LMHLLT$FLT$ HH5 11` 2|$$tX|$(tQf=! LH5[ 11LT$P` LT$H $LHLLT$LT$HT$Lֿ LT$LT$pD$H% = t== @ o|$$d D LH5k 11_ LT$#|$(2H $LHLLT$' AVAUATIUSH dH%( H$ 1H$ H H H=b H(HHS HDH H_LITMtLgIH H= H LHG LLxH] HEH9E HH} H4 H HE HEH] HEHtxHE Hu HLlHHMHڿ H
H 3 HDH5p 1+^ 1H$ dH3 %( umHĐ []A\A]A^f D Hu;LƐH ILATL L1HXZHE H|H] 1D @ USH dH%( H$ 1HtHHtH{ u,HCHHC1H$ dH3<%( u^HĘ []ÐHHs HHHCH;CtHtH{ uHCfHuHC HHHC HHP H]t)A H5e H1FT H5ʓ HQ3 P$
H
H=! :S
H5 H 3 @ q
H5 H2 Dx$EtHP H H5X H2 Dp$EtHP Hwb H54 H2 Dh$EtHP1HI H5 Hb2 D`$EtHP H Ht$@ I
Ld$@1Ҿ HI9 Ld$@11HI9 H5 H1 DX$EtHP H H5m H1 DP$EtHP Hh@ H5J H1 DH$EtHP H7{ H5( HP1 D@$EtHP Hr HH5 1 x$tHP Hk H5 H0 p$tHP H H5Α H0 H$tHP Hy H5 H0 P$tHP HJ H5 Hc0 Dx$EtHP H H5i H20 Dp$EtHP HH H5D H0 Dh$EtHP" H? H5% H/ D` EtL$`H5 H/ DX E
L$hH5 H/ DH E~
L$hHH5 q/ x L$h H5 HO/ H tL$`H5 H4/ P tL$dH5 H/ @ L$hH5ߐ H. @ tL$h H5Ԑ H. @ $ L$h H5Ґ H. @ tL$h@H5ϐ H. Dx EtL$h H5Ð H. Dp E
L$h H5 H^. D` EtL$d H5 H>. DX EtL$dH5 H!. DP EtL$d H5z H. DH EtL$dH5f H- D@ EtL$dHH5O - x H5B H- H tL$d@H51 H- P tL$d H5# Hw- @ tL$dH5 H\- @ tL$d H5 H>- @ tL$d H5 H - @ tL$d H5 H- @ H5 H, Dx E L$hH5 H, Dh EtL$pH5 H, D` E d$hL$ H5 H! LNtH$ uH$ H! H5 H@, Dp Eu H{@ HH5 D$4 , x tH{@ tH5` 1L HD$4Hl$HD$H$P HD$ HD$`HD$(H\$f Ht$H|$a H H IH LH=( v H|$1Ҿ
HD$8 lHH HS} HBIH
H5 H1L$ IHu# LHھ LH9u H
˽! LHHuL L 1H5 K LD$(LHL$Ht$8H! LL$PHz H! ! HD$XHD$P Ń( P! D fZ L}Ll$4LT @ $ Hοf # H访f HP H菿Ef. Hnf HNf HH5 a) HHP k
H5H5َ 1A I fH5 1A I f H= Lƺ H= L H҃f D HP! H_AA H5 H1DI
H5؇ HI( IƋ@ K AfA SH5` H1H HT$ L LJ
H!%t DHJHDщ HL)у~-HcID 8/u 1H
H</u H9u틄$h % = = S = @ LH5x 1H D$4 D A L H9 L @ E1Dd$MID I~LcLItIHMFJ<(1HH
衽I~踼\HcI Mv0MuLMDd$.AD A 8IVH5 1A G f D A KH5 H1F A #H5t H1F A p D A H5R^ H1}F LU;HH5aHH5H5H]H5\ HO% @ )H5\ H5% @ H5\ H% @ H5\ H% x H5^ 11E fH5 1E A H5 H1E L]CL蠼L 1H5 ZE D$4 LL 1 H58 2E L
LA `H5 H1D Hl$H\$Dt$4H5' H# p HÅL-1 H5 Lt,H[0HkLcLLu ȋ$ D$ f=! YLH5M 11GD A荼HH5 1"D KH5v 1
D J! f="! H5 ! f ! A H5 H1C hH5f 1 C {A úH5 H1]C #HT$ L F<$h % = ; = @ <$ L$P HL$(LA HT$Ht$H5i H! D@ EffH55 H! DP E$$A H5 H1B HH5ׄ H߁L$h ! DX E
H@H H H H5 1A B H5@ H+! Dp ECCH5 H
! @ L$`H5Ɓ H p L$d H5 H Dh E@@H5 H @ H5W H @ ffH5 H` p A sH5d H1
A H5ƃ 1 @ |$ xHL$(HT$LHt$)A H50 H1@ gA ߷H5H H1y@ ?A 跷H5` H1Q@ L$h H5 HU DP$EtHP H , H5 H$ DH$EtHP Hڴ[ H5{ H D@$EQH@HDH L$h -A H5Έ H1? EA 轶H5 H1W? A 蕶H5 H1/? A mH5 H1? KH5& 1H1> L 1 H5 > L蠷H5ہ 1: A H5̈ H1> KA õH5܈ H1]> #L$ LHt;LL .HL$`HHL$ A L"裶H5 A = A *H5 H1= H5 1A = lL$h PL$h CA ʴH5 H1d= *f. D AVAUATUHSHܸH HIhHImHcV! H||HE H HL=! M1H
z H L- Jf. ۰8uvHL! M1SH} HL 躲XZ t@H} 1 xLD$ ;D$ H[]A\A]A^f. LH} HE H[]A\A]A^Lf D AWAVAUATUSL$ H H $ L9uH(Ht$dH%( H$@ 1H= SH$HB Hl$H<$ / HIH H=̌ 1 Aǃ' I 1L-= D Ht > t6 D1/AƃtoDELHT L1 ; HI9uHD$D8E1H<$˳H$@ dH3 %( D H(@ []A\A]A^A_ HTH5 11: DAŶH5 11A}: H5t Ai: yH5 1AP: `H5l 11;: H5 11): 0迲ff. @ USH(dH%( HD$1D$ HD$ H Ht$ HuoHHT$HH藱usHt$|$ 1ŅuyH|$Htn|$ t谵HL$dH3 %( H([] H5 11K9 f HH5ć 11&9 ?8HH5 1H18 [H5 18 C{ff. HtOSHHڅt'H5( 18 Hͪ! [ H5 11[8 USHHdH%( HD$1HxwH4$H߉ HH5Ԅ 18 HH! H<$ Ht )H<$Ht˰HD$dH3%( uRH[] @ HH5s 17 H! H<$ HtH $HH50 17 $ @ AUATUSH(dH%( HD$1HD$ HA Ht$HŅI Ld$D$HD$ M Ht$H
HMHT$HHͮ Ht$|$LAŅ H|$Ht蕯|$tײHL$EteHH"
t>HL$ H1H5S s6 H! H|$ Ht:J3 H8 HL$ HH5 11%6 NH|$HtHD$dH3%( H([]A\A]HL$ H1H5 5 H! H|$ Htf. ˩8脪Hڿ H5 H15 aH5 11Ap5 H5 11AU5 HH5 11A55 lKA8LH1IH5̄ 15 <蛭ff. UH5ہ SHH dH%( H$ 1 H5 h H H5! HxH=ݦ! 耮H5Ѧ! uMHtHH sÅuD$% = @ t]H! H5 1 >4 @ H1H5L 1%4 1H$ dH3 %( HĨ []ÅHHpH=1! HDH! H&! f D H5/K H H5 K @ HH5 X jH! H
1HR PX1HOff. @ H @ AWAVAUATUSHiH11j E1A 1H= He ZYHr H5 HH Iŋ@ u.HvHIK HL[]A\A]A^A_f MuHL1tLHIڧI| IHR HǾ 1MH
H脨 Lw Lb L蒬IH L1IH
H& L L L4IH L萪AGA9FvImL*L" D HH[]A\A]A^A_fLH MEH
L1H of. LImHâ! . H=j H2IH
L1H
AVAUATUHSHdH%( HD$1H Hx HH IE1 H1MH
H蔦 H臫 E1 H1MH
H\ HO H. E H
HID HH5 1HD$dH3%( HH[]A\A]A^鑨kIH JH5S H1蔣HD$dH3%( H[]A\A]A^ H5 H1UgH訩HH0HDhH $謪 HxHPD9v
H0AH $HuL踧n1LHHHHx
$HHt M @ Lx H胤1= v
H k H AH! H81f Hf. ! ATUSHt+HS@H x! HH
k! H[]A\ HH5p
Iċ@ tH 8! H Hھ H=! SHH ! H=! HH1H! t DHqHDΉ@ HH)tWHt<T
t
u-HH
! @ H9tPH
t
tH n! H[]A\f D H=a! 1H[]A\f. I|$H5 蟥HH-! HH]! IL$ H~ H81躧HtE 6 H=! m} AV1H=,} AUATUSH dH%( HD$1Ң H=} ʼnD$ 1蹢 H=| AʼnD$1蟢AAƉD$ A 1ADjt HHt[Dd DLuHH! ADH| H81褦譧D襧D蝧f D KA5A 1HL$dH3 %( uH []A\A]A^DXf D DHf D 9H! H={ Ht AtDAVIYf SVÅt[ @ [ff. @ HtHf. ~1@ S߾ [ AUATIUSHH7uHu1H[]A\A]ÐHHH pH }MtuLԡ }4uP}蘥t HA! M H~f H81蠤U 1H5jf j) TH! M H#f H81`U 1H5f *) H! H=z HH5z 1( HH5z 1( Hk! HH{ H81ʣ H A! HM 1Hz H;蟣H;L Hy 1膣聜8I7H; Hy H1^A} HU LH5z I 1( ff. ATIUHSH dH%( H$ 1#Ãtu(H$ dH3%( Hİ []A\ H\$1 HHH|$ԠH1ҿ HHD$ɠÅu;HtLH#u3H|$ eD$ q|$ D H=nx LJ譟ff. f AU IATA UHSH8 dH%( H$( 1HH谜uPH|/Hl$ th LHhƄ$ E111HHE1蛛H߃A̚H$( dH3 %( DuCH8 []A\A] MLw H1 ]Ƅ$ 讞ff. 1?/ ATH5 USH dH%( H$ 1蒞Ht]H1I D H L@Ht <$#tHxH$ dH3 %( uH []A\ 1 UHSHdH%( HD$1HÅu-HiŀQ H;$|HHL$dH3 %( uSH[] AH5< H1$ f H 1 H5w $ Nf. @ USHHHtMuMl$(M2 Hl$XHLHHB @ M T$@$DL$ HMHIo H
! H81sD$DD9AL= w BƄ P HcD$DHD$ HHDŽ HDŽ DŽ DŽ yH! ) H=k HړH|$X@HD$ H$ dH3<%( HD$u H []A\A]A^A_褋H M 1Ht$hL裋} "HK HD$h m 1袑1HcHH H! * H=Oj HWH|$XHD$ xIm" H讎H/ A} IM t$@DL$ MHHk jHl$X1D$@mH\! ED$IL$H8EtwHl 1讐;A} H ! ED$IL$H8E! Hm 1mLH5C 虍1ɅE1{Hkl 17E " H! HIH8M` Htn 1Hl$XHo! H8M ED$IL$E Hm 1贏 k 1zE1Hl$XHH! IL$IHh H81>Hjj 1&wHHi 1 \H! H8MtHHh 12ED$IL$Et'Hh 1蹋
IHh 1蒋H! H=}j H]H|$XHD$ ~H|$^DL$@EDL$ MHH e H! H81 \DT$@ENDL$ MHHd H|$誇HD$XHD$ff. AWAVMAUATEUS1HxHt$L|$0Ll$(H|$T$ dH%( HD$h1H=! LL$(HD$0 H0(fH4!u
EtDt M HHAHHHuHHHuLt$IM L|$( LL5HtuHcP,H5! H HH ʋQ4EtAt
D H LL L|$(LLHut$ HL$Hh f D L@(LH LLHHAR@0P_AX H! H0T$ HHh H! H81_L$ HHyh HL$H+d HL! H81赈L|$(LHt$hdH34%( L Hx[]A\A]A^A_H! ? E1H=` HOH|$(H~! . H=g H#L|$(yHqIHtYA0H\$@H߃҃ς Ht$11E1HH߉HL$Hmd A~[ AFH HcH>H\$H5J HЄF H= H ( H5H H蛄HD$ HT$Ht$HH|$(c Ll$(y H|$H H 1Ht$8;"Z HT$8Mr G Ko HL$Hsd f D H|$ tNH|$
1 HD$ H5H|$ H"Iv(Ht$HHD$ 1HD$ H|! INHub LD$H81 L|$(Ok m g%H H99H HD$ HuHD$ bINH1a " H|! HL$ Hve H81tH H9HH H9H
o AWAVAUATUHSH |$H$ H$( L$0 L$8 t@)$@ )$P )$` )$p )$ )$ )$ )$ dH%( H$ 1H$ HD$h HD$pH$ D$l0 HD$x~III L|$x1A @ HI9vP| %HXuTl' s f T$h/X T$hHXI
HI9wKD5 HD$(H= z H$ LL$hI L$ HD$pHH$ LD$h D$l0 HD$xƄ$ D$@ HD$( HD$H HcD$@Ht$(HD$H9i H~! HHD$%D$@] t$A Dl$@H$ ?)HcHD$0HD$PIHD$8FD$f D HT$|$1Lm}Ņ[ A)HIEH|$L~H|$( H$ dH34%( D$@ H []A\A]A^A_ T$l T$lIHX @ T$h/ уT$hLH9HXHJ|IfT$h/wWT$hIHX H}! ^\$@HHD$赀HD$f HD$p D HD$p HL$pHQHT$p^ D HD$p$ D sz8 I H|$1|H$x! Dl$ Ld$ Ll$8 Ld$0HD$P i HHD$X D A> H߉HL萀|$11MHL Ā }xH|$Dl$ D$DLd$ T$DH|$>|H|$( H|$HU~H|$Dl$ Ld$ \ H~IHrH\$(LL$hILH$ H D$h HD$pHH$ D$l0 HD$x{AD D$@x
Ld$HL}DD$@7H|$b{H|$( H|$Hy}/}ff. @ USHH{! f8 uAH b{! HZ~H-{! H} Ht
5|HE HH[]z {븐 AWAVAUATAUHSH H$P H$X L$` L$h t@)$p )$ )$ )$ )$ )$ )$ )$ dH%( H$8 1Hz! f8 t1H$8 dH3%( e H []A\A]A^A_ Ht! HD$ D$ 0 L0H$0 HD$ H$@ HD$(dxIII Ht$(1 f D HI9vX| %HXuTl s> f
T$/ T$HXH
HI9wf II A L|$0H$ LL$I LH$0 HLD$ HD$ H$@ D$ 0 HD$(/yA A0 Hx! f8 u#A A LLz @ Hqs! L90H I BH<$z4 D T$ T$ HHX @ T$/wo׃T$HH?HXHsHt$H $vH $Ht$HT @ T$/wT$HHX3 HD$ H|$ HWHT$ HD$ \ D HD$ < D H]w! f8 u
Htr! L0LH L1 { LzH$IHtdI]# L@y Hv! f8 Hv! f8 u
Hq! L0LH L1 W{Rf A L|$0Hv! f8 *x AWAVAUIATUSHH H$ H$ L$ L$ t@)$ )$ )$ )$ )$ )$ )$ )$0 dH%( H$ 1& uHv! f8 H$ LD$X HD$`H$ D$\0 HD$hntIII HL$h1A HL9sXA| %HhuATl sd f3 T$X/ T$XHhI
HL9r MI A A H$ E1LLL$XM H$ HHD$X HD$`H$ D$\0 HD$h8uBD= H=u! xL5t! I6HtL=t! I? L-t! I} Ht! D0Hvt! f8 I} R HHWvfE D Ho! f8 Ht! f8 - Lt$L$ Lt LLqL
H!%t DHJHDH@ H5 H1L)Ƅ LHXt! f8 H=s! sMtLuE1H$ dH3 %( D[ HH []A\A]A^A_f D T$\ T$\IHht @ T$X/ փT$XHH>HhHGH $qH $I2f. T$X/w?T$XIHh Hr! f8 I} + D HD$`Ht$`HVHT$`n D HD$` D HD$`$ D L uIHd M~H HT$p asbH$ ML9NL=q! L-q! fA? u?I} Ht-Hy 13vIM a H=N w fA7I>8p HpH4$HpBqIH 1OrH|$HD$HD$ HHD$pH I6LrLHL$H H)HxH4$pqI} Ht
RrIE I>LpL'sSfHp! f8ef. Hxu V H HK l 1_rf. I>H, A 1SpAǃ_ H5< qIE HD Hyk! f: f1ҹ HL|$ D$"fT$>fL$ HD$2 D$: sqL 1BoAǃ I} 2f D I} qjfHL$L$ HH $wpH $ LHSmL
H!%tI} DHJHDL@ ƾ H1L)Ƅ H sI} HH 1ssI} >f. HH5 1
9 A A H$ H 1HH lp Hn! f8 HH 1rI} HOn! f8 H 1H p 1ok8_ H= q'ockH$ 8HnI 1HH5X #kH= n! mME3~h! AWAVAUAH=; ATIUDSHHhH $LD$jH 1A+ + H h! H Hb! DE9" McNJ HD$A <- @+ @-u
D IE9c NA Mc<-uAx tHbb! ALHLD$H $DD\$D0D\$H2b! E9 Hc0EFHD)LH NLD9~ AGHH @ HPHHPH9uILLHHE9|E)Ha! AD* Ax D Ha! ADE9}
Ha! D(Hh[]A\A]A^A_ D E<$A:A4FըaA:THcE<A:D= f Ax@-I@N Hf! 8-taAx uZf. HcrAtAHcA :p ;u Wb 9uHhLHD[]A\A]A^A_1Ax-@ID @D0HD$|$@A=* E! GH
A=tE4 HEuT$DH4$LLL$HM D$D+D$@D|$'1HLD$(HD$PD\$0Dl$4IH\$8LLd$XIĐHcL9 HcHI\ HuLD$(D\$01E1D|$'H$Dt$(Dl$4H\$8D\$0Ld$XLt$LD$Hh D|$'1L|$PH|$HDl$4IH\$8Ld$HE̐LLbuDI I}AHuډD|$'Dt$(LD$D\$0Dl$4H\$8Ld$H g H^! ? FH^! AH H DHU^! H81gH^! D H}^! A DHc! L LHDHK^! D JHcA<4:D$@D$D Ht$LHa9D|$'LD$(D\$0Dl$4H\$8HcH$HHBA= HD$Ht8HBjH (H]! 1DH]! AD|$@
Ha]! ? HO]! AH H D H&]! ? 0tH LH H\! H81 fH\! DcH\! ADE9|IH\! 1A:@ŋl:1LH H 뚋D$DH5a! HLHHD$H5a! HDHff. E14 @ A ! AWIAVIAUAATL% UH- SL)HUHt 1 LLDAHH9uH[]A\A]A^A_ff. HH (*) Default scan settings
moved copied Failed to set locale
quiet stdout debug setrlimit gen-mdb database help recursive infected suppress-ok-results bell no-summary Known viruses: %u
Engine version: %s
Scanned directories: %u
Scanned files: %u
Infected files: %u
Total errors: %u
Not removed: %u
copy Not %s: %u
Data scanned: %2.2lf MB
%Y:%m:%d %H:%M:%S Start Date: %s
End Date: %s
Clam AntiVirus: Scanner %s
By The ClamAV Team: https://www.clamav.net/about.html#credits
(C) 2024 Cisco Systems, Inc.
clamscan [options] [file/directory/-]
--help -h Show this help
--version -V Print version number
--verbose -v Be verbose
--archive-verbose -a Show filenames inside scanned archives
--debug Enable libclamav's debug messages
--quiet Only output error messages
--stdout Write to stdout instead of stderr. Does not affect 'debug' messages.
--no-summary Disable summary at end of scanning
--infected -i Only print infected files
--suppress-ok-results -o Skip printing OK files
--bell Sound bell on virus detection
--tempdir=DIRECTORY Create temporary files in DIRECTORY
--leave-temps[=yes/no(*)] Do not remove temporary files
--force-to-disk[=yes/no(*)] Create temporary files for nested file scans that would otherwise be in-memory only
--gen-json[=yes/no(*)] Generate JSON metadata for the scanned file(s). For testing & development use ONLY.
JSON will be printed if --debug is enabled.
A JSON file will dropped to the temp directory if --leave-temps is enabled.
--database=FILE/DIR -d FILE/DIR Load virus database from FILE or load all supported db files from DIR
--official-db-only[=yes/no(*)] Only load official signatures
--fail-if-cvd-older-than=days Return with a nonzero error code if virus database outdated.
--log=FILE -l FILE Save scan report to FILE
--recursive[=yes/no(*)] -r Scan subdirectories recursively
--allmatch[=yes/no(*)] -z Continue scanning within file after finding a match
--cross-fs[=yes(*)/no] Scan files and directories on other filesystems
--follow-dir-symlinks[=0/1(*)/2] Follow directory symlinks (0 = never, 1 = direct, 2 = always)
--follow-file-symlinks[=0/1(*)/2] Follow file symlinks (0 = never, 1 = direct, 2 = always)
--file-list=FILE -f FILE Scan files from FILE
--remove[=yes/no(*)] Remove infected files. Be careful!
--move=DIRECTORY Move infected files into DIRECTORY
--copy=DIRECTORY Copy infected files into DIRECTORY
--exclude=REGEX Don't scan file names matching REGEX
--exclude-dir=REGEX Don't scan directories matching REGEX
--include=REGEX Only scan file names matching REGEX
--include-dir=REGEX Only scan directories matching REGEX
--bytecode[=yes(*)/no] Load bytecode from the database
--bytecode-unsigned[=yes/no(*)] Load unsigned bytecode
**Caution**: You should NEVER run bytecode signatures from untrusted sources.
Doing so may result in arbitrary code execution.
--bytecode-timeout=N Set bytecode timeout (in milliseconds)
--statistics[=none(*)/bytecode/pcre] Collect and print execution statistics
--detect-pua[=yes/no(*)] Detect Possibly Unwanted Applications
--exclude-pua=CAT Skip PUA sigs of category CAT
--include-pua=CAT Load PUA sigs of category CAT
--detect-structured[=yes/no(*)] Detect structured data (SSN, Credit Card)
--structured-ssn-format=X SSN format (0=normal,1=stripped,2=both)
--structured-ssn-count=N Min SSN count to generate a detect
--structured-cc-count=N Min CC count to generate a detect
--structured-cc-mode=X CC mode (0=credit debit and private label, 1=credit cards only
--scan-mail[=yes(*)/no] Scan mail files
--phishing-sigs[=yes(*)/no] Enable email signature-based phishing detection
--phishing-scan-urls[=yes(*)/no] Enable URL signature-based phishing detection
--heuristic-alerts[=yes(*)/no] Heuristic alerts
--heuristic-scan-precedence[=yes/no(*)] Stop scanning as soon as a heuristic match is found
--normalize[=yes(*)/no] Normalize html, script, and text files. Use normalize=no for yara compatibility
--scan-pe[=yes(*)/no] Scan PE files
--scan-elf[=yes(*)/no] Scan ELF files
--scan-ole2[=yes(*)/no] Scan OLE2 containers
--scan-pdf[=yes(*)/no] Scan PDF files
--scan-swf[=yes(*)/no] Scan SWF files
--scan-html[=yes(*)/no] Scan HTML files
--scan-xmldocs[=yes(*)/no] Scan xml-based document files
--scan-hwp3[=yes(*)/no] Scan HWP3 files
--scan-onenote[=yes(*)/no] Scan OneNote files
--scan-archive[=yes(*)/no] Scan archive files (supported by libclamav)
--scan-image[=yes(*)/no] Scan image (graphics) files
--scan-image-fuzzy-hash[=yes(*)/no] Detect files by calculating image (graphics) fuzzy hashes
--alert-broken[=yes/no(*)] Alert on broken executable files (PE & ELF)
--alert-broken-media[=yes/no(*)] Alert on broken graphics files (JPEG, TIFF, PNG, GIF)
--alert-encrypted[=yes/no(*)] Alert on encrypted archives and documents
--alert-encrypted-archive[=yes/no(*)] Alert on encrypted archives
--alert-encrypted-doc[=yes/no(*)] Alert on encrypted documents
--alert-macros[=yes/no(*)] Alert on OLE2 files containing VBA macros
--alert-exceeds-max[=yes/no(*)] Alert on files that exceed max file size, max scan size, or max recursion limit
--alert-phishing-ssl[=yes/no(*)] Alert on emails containing SSL mismatches in URLs
--alert-phishing-cloak[=yes/no(*)] Alert on emails containing cloaked URLs
--alert-partition-intersection[=yes/no(*)] Alert on raw DMG image files containing partition intersections
--nocerts Disable authenticode certificate chain verification in PE files
--dumpcerts Dump authenticode certificate chain in PE files
--max-scantime=#n Scan time longer than this will be skipped and assumed clean (milliseconds)
--max-filesize=#n Files larger than this will be skipped and assumed clean
--max-scansize=#n The maximum amount of data to scan for each container file (**)
--max-files=#n The maximum number of files to scan for each container file (**)
--max-recursion=#n Maximum archive recursion level for container file (**)
--max-dir-recursion=#n Maximum directory recursion level
--max-embeddedpe=#n Maximum size file to check for embedded PE
--max-htmlnormalize=#n Maximum size of HTML file to normalize
--max-htmlnotags=#n Maximum size of normalized HTML file to scan
--max-scriptnormalize=#n Maximum size of script file to normalize
--max-ziptypercg=#n Maximum size zip to type reanalyze
--max-partitions=#n Maximum number of partitions in disk image to be scanned
--max-iconspe=#n Maximum number of icons in PE file to be scanned
--max-rechwp3=#n Maximum recursive calls to HWP3 parsing function
--pcre-match-limit=#n Maximum calls to the PCRE match function.
--pcre-recmatch-limit=#n Maximum recursive calls to the PCRE match function.
--pcre-max-filesize=#n Maximum size file to perform PCRE subsig matching.
--disable-cache Disable caching and cache checks for hash sums of scanned files.
Pass in - as the filename for stdin.
(**) Certain files (e.g. documents, archives, etc.) may in turn contain other
files inside. The above options ensure safe processing of this kind of data.
Can't parse command line options
-------------------------------------------------------------------------------
Problem with internal logger.
----------- SCAN SUMMARY -----------
Data read: %2.2lf MB (ratio %.2f:1)
Time: %u.%3.3u sec (%u m %u s)
Failed to get local time for Start Date.
Failed to get local time for End Date.
P?(filename not set) %2lldh %02lldm %2lldm %02llds %3llds %7.02fM %.02fM %7.02fK %.02fK %8zu %zu [?7l Compiling: , ETA: ] tasks [?7h Loading: sigs ... scanfile: Invalid args.
exclude include %s: Excluded
%s: Excluded (/proc)
%s: Empty file
ERROR: setgid(%d) failed.
ERROR: setuid(%d) failed.
%s: Access denied
archive-verbose Scanning %s
Can't open file %s: %s
%s%s!(%llu)%s: %s FOUND
%s!(%llu): %s FOUND
%s: OK
%s: %s ERROR
exclude-dir include-dir max-dir-recursion follow-dir-symlinks follow-file-symlinks %s/%s cross-fs %s: Symbolic link
%s: Can't open directory.
CL_TYPE_ ANY %s:%s Scanning %s%s!%s
yara-rules yes no official-db-only cache-size disable-cache detect-pua exclude-pua .%s include-pua dev-ac-only dev-ac-depth leave-temps force-to-disk bytecode-unsigned bytecode-timeout nocerts dumpcerts bytecode-mode ForceJIT ForceInterpreter Test statistics pcre gen-json tempdir fail-if-cvd-older-than pcre-match-limit pcre-recmatch-limit timelimit max-scantime max-scansize max-files max-recursion max-embeddedpe max-htmlnormalize max-htmlnotags max-scriptnormalize max-ziptypercg max-partitions max-iconspe max-rechwp3 pcre-max-filesize allmatch alert-phishing-ssl alert-phishing-cloak alert-partition-intersection heuristic-scan-precedence scan-archive detect-broken alert-broken alert-broken-media block-encrypted alert-encrypted alert-encrypted-archive alert-encrypted-doc block-macros alert-macros scan-pe scan-elf scan-ole2 scan-pdf scan-swf scan-html scan-mail scan-xmldocs scan-hwp3 scan-onenote scan-image scan-image-fuzzy-hash algorithmic-detection heuristic-alerts block-max alert-exceeds-max dev-performance detect-structured structured-ssn-format structured-ssn-count structured-cc-count structured-cc-mode /proc file-list - Can't generate tempfile name
wb Can't open %s for writing
Can't write to %s
Checking %s
stdin stdin: OK
stdin: %s ERROR
%s: Can't access file
%s: Not supported file type
Failed to determine real filename of %s.
Quarantine of the file may fail if file path contains symlinks.
Unable to allocate memory in scanfile()
scandirs: Memory allocation failed for fname
--follow-dir-symlinks: Invalid argument
--follow-file-symlinks: Invalid argument
Can't initialize libclamav: %s
Can't initialize antivirus engine
Can't allocate memory for pua_cats
--exclude-pua and --include-pua cannot be used at the same time
cli_engine_set_str(CL_ENGINE_PUA_CATEGORIES) failed: %s
cli_engine_set_str(CL_ENGINE_TMPDIR) failed: %s
Can't access database directory/file: %s
cli_engine_set_num(CL_ENGINE_PCRE_MATCH_LIMIT) failed: %s
cli_engine_set_num(CL_ENGINE_PCRE_RECMATCH_LIMIT) failed: %s
Database initialization error: %s
cli_engine_set_num(CL_ENGINE_MAX_SCANTIME) failed: %s
cli_engine_set_num(CL_ENGINE_MAX_SCANSIZE) failed: %s
cli_engine_set_num(CL_ENGINE_MAX_FILESIZE) failed: %s
System limit for file size is lower than engine->maxfilesize
System limit for file size is lower than engine->maxscansize
Cannot obtain resource limits for file size
cli_engine_set_num(CL_ENGINE_MAX_FILES) failed: %s
cli_engine_set_num(CL_ENGINE_MAX_RECURSION) failed: %s
cli_engine_set_num(CL_ENGINE_MAX_EMBEDDEDPE) failed: %s
cli_engine_set_num(CL_ENGINE_MAX_HTMLNORMALIZE) failed: %s
cli_engine_set_num(CL_ENGINE_MAX_HTMLNOTAGS) failed: %s
cli_engine_set_num(CL_ENGINE_MAX_SCRIPTNORMALIZE) failed: %s
cli_engine_set_num(CL_ENGINE_MAX_ZIPTYPERCG) failed: %s
cli_engine_set_num(CL_ENGINE_MAX_PARTITIONS) failed: %s
cli_engine_set_num(CL_ENGINE_MAX_ICONSPE) failed: %s
cli_engine_set_num(CL_ENGINE_MAX_RECHWP3) failed: %s
cli_engine_set_num(CL_ENGINE_PCRE_MAX_FILESIZE) failed: %s
Invalid argument for --structured-ssn-format
cli_engine_set_num(CL_ENGINE_MIN_SSN_COUNT) failed: %s
cli_engine_set_num(CL_ENGINE_MIN_CC_COUNT) failed: %s
Invalid argument for --structured-cc-mode
Only scanning files from --file-list (files passed at cmdline are ignored)
Can't write to temporary directory
Can't get absolute pathname of current working directory
.A @@ 9@%s/%s.%03u traverse_to: Failed open %s
Can't remove file '%s'
%s: Removed.
%s: copied to '%s'
Can't copy file '%s'
%s: moved to '%s'
Can't move file %s to %s
remove traverse_to: Invalid arguments!
traverse_to: Failed to get copy of directory path to be tokenized!
traverse_to: tokenize of target directory returned 0 tokens!
traverse_to: Failed to open file descriptor for '/' directory.
traverse_to: Handle opened for '%s' directory.
traverse_unlink: Invalid arguments!
traverse_unlink: Failed to open file descriptor for target directory!
traverse_unlink: Failed to get basename of target path: %s
Error: %d
traverse_unlink: Failed to unlink: %s
Error:%s
traverse_rename: Invalid arguments!
traverse_rename: Failed to open file descriptor for source directory!
traverse_rename: Failed to get basename of source path:%s
Error: %d
traverse_rename: Failed to rename: %s
to: %s
Error:%s
Can't unlink '%s' after copy: %s
action_setup: Failed to get realpath of %s
'%s' doesn't exist or is not a directory
1.4.3 /etc/freshclam.conf DatabaseDirectory %s/daily.cvd %s/daily.cld ClamAV %s
ClamAV %s/%u/%s /dev/null Can't open /dev/null
dup2(%d, %d) failed
ERROR: initgroups() failed.
log file '%s'.
Error was '%s'
sigaction %s/ Unable to allocate memory for db directory...
ERROR: This tool requires libclamav with functionality level %u or higher (current f-level: %u)
ERROR: --file-list: Can't open file %s
Can't get information about user %s.
ERROR: Can't get information about user %s.
ERROR: lchown to user '%s' failed on
lchown to user '%s' failed on log file '%s'. Error was '%s'
Virus database is older than %lld days!
ERROR: optaddarg: Unregistered option %s
ERROR: optaddarg: strdup() failed
ERROR: optaddarg: malloc() failed
ERROR: optparse: Can't register new option (not enough memory)
ERROR: optparse: longopts[] is too small
ERROR: optparse: shortopts[] is too small
ERROR: optparse: (short|long)opts[] is too small
ERROR: Please edit the example config file %s
ERROR: Missing argument for option at %s:%d
ERROR: Missing closing parenthesis in option %s at %s:%d
ERROR: Empty argument for option %s at %s:%d
ERROR: Incomplete option passed (missing argument)
ERROR: optparse: No corresponding long name for option '-%c'
ERROR: Parse error at %s:%d: Unknown option %s
WARNING: Ignoring unsupported option %s at %s:%d
WARNING: Ignoring unsupported option --%s (-%c)
WARNING: Ignoring unsupported option --%s
ERROR: Can't register argument for option %s
ERROR: Can't register argument for option --%s
WARNING: Ignoring deprecated option %s at %s:%d
WARNING: Ignoring deprecated option --%s (-%c)
WARNING: Ignoring deprecated option --%s
ERROR: optparse: Can't compile regular expression %s for option %s
ERROR: Incorrect argument format for option %s
ERROR: Incorrect argument format for option --%s (-%c)
ERROR: Incorrect argument format for option --%s
ERROR: Option --%s (-%c) requires a non-empty string argument
ERROR: Option --%s requires a non-empty string argument
ERROR: Can't parse numerical argument for option %s
ERROR: Can't parse numerical argument for option --%s (-%c)
ERROR: Can't parse numerical argument for option --%s
WARNING: Numerical value for option %s too high, resetting to %lld
WARNING: Numerical value for option --%s (-%c) too high, resetting to %lld
ERROR: optparse: calloc failed
ERROR: optparse: strdup failed
ERROR: Problem parsing options (name == NULL)
ERROR: Parse error: Unknown option %s
WARNING: Ignoring unsupported option %s
WARNING: Ignoring deprecated option %s
WARNING: Numerical value for option %s too high, resetting to 4G
Dump authenticode certificate chain. Perform HTML, script, and text normalization Always generate MDB entries for PE sections Maximum number of mismatched signatures when building a CVD. Zero disables this limit. Feature level to put in the CVD Version number of the CVD to build Create a hybrid (standard and bytecode) database file Force using the interpreter instead of the JIT Trust loaded bytecode (default yes) Load and print bytecode information without executing Print IR of bytecode signature Input file to run the bytecode n Don't show source line during tracing Number of entries the cache can store. Name of the analyzer as seen in prewikka Save all reports to a log file. By default the log file is locked for writing and only a single
daemon process can write to it. This option disables the lock. Maximum size of the log file.
Value of 0 disables the limit. Log all clean files.
Useful in debugging but drastically increases the log size. Use the system logger (can work together with LogFile). Type of syslog messages.
Please refer to 'man syslog' for the facility names. Rotate log file. Requires LogFileMaxSize option set prior to this option. Log additional information about the infected file, such as its
size and hash, together with the virus name. Save the process ID to a file. This option allows you to change the default temporary directory. This option allows you to change the default database directory.
If you enable it, please make sure it points to the same directory in
both clamd and freshclam. Only load the official signatures published by the ClamAV project. Return with a nonzero error code if the virus database is older than the specified number of days. By default, yara rules will be loaded. This option allows you to exclude yara rules when scanning and also to scan only using yara rules. Valid options are yes|no|only Path to a local socket file the daemon will listen on. Sets the group ownership on the unix socket. Sets the permissions on the unix socket to the specified mode. Remove a stale socket after unclean shutdown A TCP port number the daemon will listen on. By default clamd binds to INADDR_ANY.
This option allows you to restrict the TCP address and provide
some degree of protection from the outside world. Maximum length the queue of pending connections may grow to. Close the STREAM session when the data size limit is exceeded.
The value should match your MTA's limit for the maximum attachment size. The STREAM command uses an FTP-like protocol.
This option sets the lower boundary for the port range. This option sets the upper boundary for the port range. Maximum number of threads running at the same time. This option specifies the time (in seconds) after which clamd should
timeout if a client doesn't provide any data. This option specifies the time (in seconds) after which clamd should
timeout if a client doesn't provide any initial command after connecting. This option specifies how long to wait (in milliseconds) if the send buffer
is full. Keep this value low to prevent clamd hanging. Waiting for data from clamd will timeout after this time (seconds). Maximum number of queued items (including those being processed by MaxThreads
threads). It is recommended to have this value at least twice MaxThreads
if possible.
WARNING: you shouldn't increase this too much to avoid running out of file
descriptors, the following condition should hold:
MaxThreads*MaxRecursion + MaxQueue - MaxThreads + 6 < RLIMIT_NOFILE
(usual max for RLIMIT_NOFILE is 1024)
This option specifies how long (in seconds) the process should wait
for a new job. Don't scan files/directories whose names match the provided
regular expression. This option can be specified multiple times. Maximum depth the directories are scanned at. Follow symlinks to regular files. Scan files and directories on other filesystems. This option specifies the time intervals (in seconds) in which clamd
should perform a database check. Enable non-blocking (multi-threaded/concurrent) database reloads. This feature
will temporarily load a second scanning engine while scanning continues using
the first engine. Once loaded, the new engine takes over. The old engine is
removed as soon as all scans using the old engine have completed. This feature
requires more RAM, so this option is provided in case users are willing to
block scans during reload in exchange for lower RAM requirements. This option allows you to disable clamd's caching feature. Execute a command when virus is found.
Use the following environment variables to identify the file and virus names:
- $CLAM_VIRUSEVENT_FILENAME
- $CLAM_VIRUSEVENT_VIRUSNAME
In the command string, '%v' will also be replaced with the virus name.
Note: The '%f' filename format character has been disabled and will no longer
be replaced with the file name, due to command injection security concerns.
Use the 'CLAM_VIRUSEVENT_FILENAME' environment variable instead.
For the same reason, you should NOT use the environment variables in the
command directly, but should use it carefully from your executed script. Stop the daemon when libclamav reports an out of memory condition. Permit use of the ALLMATCHSCAN command. Enable debug messages in libclamav. Don't remove temporary files (for debugging purposes). Record metadata about the file being scanned.
Scan metadata is useful for file analysis purposes and for debugging scan behavior.
The JSON metadata will be printed after the scan is complete if Debug is enabled.
A metadata.json file will be written to the scan temp directory if LeaveTemporaryFiles is enabled. Run the daemon as a specified user (the process must be started by root). With this option enabled ClamAV will load bytecode from the database. It is highly recommended you keep this option on, otherwise you'll miss detections for many new viruses. Set bytecode security level.
Possible values:
TrustSigned - trust bytecode loaded from signed .c[lv]d files,
insert runtime safety checks for bytecode loaded from other sources
Paranoid - don't trust any bytecode, insert runtime checks for all
Recommended: TrustSigned, because bytecode in .cvd files already has these checks. Set bytecode timeout in milliseconds. Allow loading bytecode from outside digitally signed .c[lv]d files. ^(Auto|ForceJIT|ForceInterpreter|Test)$ Set bytecode execution mode.
Possible values:
Auto - automatically choose JIT if possible, fallback to interpreter
ForceJIT - always choose JIT, fail if not possible
ForceInterpreter - always choose interpreter
Test - run with both JIT and interpreter and compare results. Make all failures fatal. ^(none|None|bytecode|Bytecode|pcre|PCRE)$ Collect and print execution statistics.
Possible values:
Bytecode - reports bytecode statistics
PCRE - reports PCRE execution statistics
None - reports no statistics Detect Potentially Unwanted Applications. Exclude a specific PUA category. This directive can be used multiple times.
See https://docs.clamav.net/faq/faq-pua.html for the complete list of PUA
categories. Only include a specific PUA category. This directive can be used multiple
times. PE stands for Portable Executable - it's an executable file format used
in all 32- and 64-bit versions of Windows operating systems. This option
allows ClamAV to perform a deeper analysis of executable files and it's also
required for decompression of popular executable packers such as UPX or FSG.
If you turn off this option, the original files will still be scanned, but
without additional processing. Executable and Linking Format is a standard format for UN*X executables.
This option allows you to control the scanning of ELF files.
If you turn off this option, the original files will still be scanned, but
without additional processing. Enable the built in email scanner.
If you turn off this option, the original files will still be scanned, but
without parsing individual messages/attachments. Scan RFC1341 messages split over many emails. You will need to
periodically clean up $TemporaryDirectory/clamav-partial directory.
WARNING: This option may open your system to a DoS attack. Please don't use
this feature on highly loaded servers. With this option enabled ClamAV will try to detect phishing attempts by using
signatures. Scan URLs found in mails for phishing attempts using heuristics. In some cases (eg. complex malware, exploits in graphic files, and others),
ClamAV uses special algorithms to provide accurate detection. This option
controls the algorithmic detection. Allow heuristic match to take precedence.
When enabled, if a heuristic scan (such as phishingScan) detects
a possible virus/phish it will stop scan immediately. Recommended, saves CPU
scan-time.
When disabled, virus/phish detected by heuristic scans will be reported only
at the end of a scan. If an archive contains both a heuristically detected
virus/phish, and a real malware, the real malware will be reported.
Keep this disabled if you intend to handle "Heuristics.*" viruses
differently from "real" malware.
If a non-heuristically-detected virus (signature-based) is found first,
the scan is interrupted immediately, regardless of this config option. Enable the Data Loss Prevention module. This option sets the lowest number of Credit Card numbers found in a file
to generate a detect. This option sets the lowest number of Social Security Numbers found
in a file to generate a detect. With this option enabled the DLP module will search for valid
SSNs formatted as xxx-yy-zzzz. With this option enabled the DLP module will search for valid
SSNs formatted as xxxyyzzzz Perform HTML/JavaScript/ScriptEncoder normalisation and decryption.
If you turn off this option, the original files will still be scanned, but
without additional processing. This option enables scanning of OLE2 files, such as Microsoft Office
documents and .msi files.
If you turn off this option, the original files will still be scanned, but
without additional processing. With this option enabled clamav will try to detect broken executables
(PE, ELF, & Mach-O) and alert on them with a Broken.Executable heuristic signature. With this option enabled clamav will try to detect broken media files
(JPEG, TIFF, PNG, GIF) and alert on them with a Broken.Media heuristic signature. Alert on encrypted archives and documents (encrypted .zip, .7zip, .rar, .pdf). With this option enabled the DLP module will search for valid Credit Card
numbers only. Debit and Private Label cards will not be searched. Alert on encrypted archives (encrypted .zip, .7zip, .rar). Alert on encrypted documents (encrypted .pdf). With this option enabled OLE2 files with VBA macros, which were not
detected by signatures will be marked as "Heuristics.OLE2.ContainsMacros". Alert on SSL mismatches in URLs, even if they're not in the database.
This feature can lead to false positives. Alert on cloaked URLs, even if they're not in the database.
This feature can lead to false positives. Alert on raw DMG image files containing partition intersections. This option enables scanning within PDF files.
If you turn off this option, the original files will still be scanned, but
without decoding and additional processing. This option enables scanning within SWF files.
If you turn off this option, the original files will still be scanned, but
without decoding and additional processing. This option enables scanning xml-based document files supported by libclamav.
If you turn off this option, the original files will still be scanned, but
without additional processing. This option enables scanning HWP3 files.
If you turn off this option, the original files will still be scanned, but
without additional processing. This option enables scanning OneNote files.
If you turn off this option, the original files will still be scanned, but
without additional processing. Scan within archives and compressed files.
If you turn off this option, the original files will still be scanned, but
without unpacking and additional processing. This option enables scanning of image (graphics).
If you turn off this option, the original files will still be scanned, but without additional processing. This option enables detection by calculating a fuzzy hash of image (graphics)
files
Signatures using image fuzzy hashes typically match files and documents by
identifying images embedded or attached to those files.
If you turn off this option, then some files may no longer be detected. This option causes memory or nested map scans to dump the content to disk.
If you turn on this option, more data is written to disk and is available
when the leave-temps option is enabled at the cost of more disk writes. This option sets the maximum amount of time a scan may take to complete.
The value of 0 disables the limit.
WARNING: disabling this limit or setting it too high may result allow scanning
of certain files to lock up the scanning process/threads resulting in a Denial of Service.
The value is in milliseconds. This option sets the maximum amount of data to be scanned for each input file.
Archives and other containers are recursively extracted and scanned up to this
value.
The value of 0 disables the limit.
WARNING: disabling this limit or setting it too high may result in severe
damage. Files/messages larger than this limit won't be scanned. Affects the input
file itself as well as files contained inside it (when the input file is
an archive, a document or some other kind of container).
The value of 0 disables the limit.
WARNING: disabling this limit or setting it too high may result in severe
damage to the system. Nested archives are scanned recursively, e.g. if a Zip archive contains a RAR
file, all files within it will also be scanned. This option specifies how
deeply the process should be continued.
The value of 0 disables the limit.
WARNING: disabling this limit or setting it too high may result in severe
damage to the system. Number of files to be scanned within an archive, a document, or any other
container file.
The value of 0 disables the limit.
WARNING: disabling this limit or setting it too high may result in severe
damage to the system. This option sets the maximum size of a file to check for embedded PE.
Files larger than this value will skip the additional analysis step.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum size of a HTML file to normalize.
HTML files larger than this value will not be normalized or scanned.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum size of a normalized HTML file to scan.
HTML files larger than this value after normalization will not be scanned.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum size of a script file to normalize.
Script content larger than this value will not be normalized or scanned.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum size of a ZIP file to reanalyze type recognition.
ZIP files larger than this value will skip the step to potentially reanalyze as PE.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum number of partitions of a raw disk image to be scanned.
Raw disk images with more partitions than this value will have up to the value number partitions scanned.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum number of icons within a PE to be scanned.
PE files with more icons than this value will have up to the value number icons scanned.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum recursive calls to HWP3 parsing function.
HWP3 files using more than this limit will be terminated and alert the user.
Scans will be unable to scan any HWP3 attachments if the recursive limit is reached.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum calls to the PCRE match function during an instance of regex matching.
Instances using more than this limit will be terminated and alert the user but the scan will continue.
For more information on match_limit, see the PCRE documentation.
Negative values are not allowed.
WARNING: setting this limit too high may severely impact performance. This option sets the maximum recursive calls to the PCRE match function during an instance of regex matching.
Instances using more than this limit will be terminated and alert the user but the scan will continue.
For more information on match_limit_recursion, see the PCRE documentation.
Negative values are not allowed and values > PCREMatchLimit are superfluous.
WARNING: setting this limit too high may severely impact performance. This option sets the maximum filesize for which PCRE subsigs will be executed.
Files exceeding this limit will not have PCRE subsigs executed unless a subsig is encompassed to a smaller buffer.
Negative values are not allowed.
Setting this value to zero disables the limit.
WARNING: setting this limit too high or disabling it may severely impact performance. This option specifies a directory or mount point which should be scanned on access. The mount point specified, or the mount point containing the specified directory will be watched, but only notifications will occur. If any directories are specified, this option will preempt the DDD system. It can also be used multiple times. This option specifies a directory (including all files and directories
inside it), which should be scanned on access. This option can
be used multiple times. This option allows excluding directories from on-access scanning. It can
be used multiple times. Only works with DDD system. Use this option to exclude the root UID (0) and allow any processes run under root to access all watched files without triggering scans. With this option you can exclude specific UIDs. Processes with these UIDs
will be able to access all files.
This option can be used multiple times (one per line). Using a value of 0 on any line will disable this option entirely. To exclude the root UID please enable the OnAccessExcludeRootUID option. This option allows exclusions via user names when using the on-access scanning client. It can
be used multiple times. Files larger than this value will not be scanned in on access. This option toggles the dynamic directory determination system for on-access scanning (Linux only). This option changes fanotify behavior to prevent access attempts on malicious files instead of simply notifying the user (On Access scan only). Enables extra scanning and notification after catching certain inotify events. Only works with the DDD system enabled. Max amount of time (in milliseconds) that the OnAccess client should spend for every connect, send, and receive attempt when communicating with clamd via curl (5s default) Max number of scanning threads to allocate to the OnAccess thread pool at startup--these threads are the ones responsible for creating a connection with the daemon and kicking off scanning after an event has been processed. To prevent clamonacc from consuming all clamd's resources keep this lower than clamd's max threads. Default is 5 Number of times the OnAccess client will retry a failed scan due to connection problems (or other issues). Defaults to no retries. When using prevention, if this option is turned on, any errors that occur during scanning will result in the event attempt being denied. This could potentially lead to unwanted system behaviour with certain configurations, so the client defaults to off and allowing access events in case of error. When started by root freshclam will drop privileges and switch to the user
defined in this option. This option defined how many times daily freshclam should check for
a database update. Use DNS to verify the virus database version. FreshClam uses DNS TXT records
to verify the versions of the database and software itself. With this
directive you can change the database verification domain.
WARNING: Please don't change it unless you're configuring freshclam to use
your own database verification domain. DatabaseMirror specifies to which mirror(s) freshclam should connect.
You should have at least one entry: database.clamav.net. This option allows you to easily point freshclam to private mirrors.
If PrivateMirror is set, freshclam does not attempt to use DNS
to determine whether its databases are out-of-date, instead it will
use the If-Modified-Since request or directly check the headers of the
remote database files. For each database, freshclam first attempts
to download the CLD file. If that fails, it tries to download the
CVD file. This option overrides DatabaseMirror, DNSDatabaseInfo
and Scripted Updates. It can be used multiple times to provide
fall-back mirrors. mirror1.mynetwork.com
mirror2.mynetwork.com This option defines how many attempts freshclam should make before giving up. With this option you can control scripted updates. It's highly recommended to keep them enabled. With this option enabled, freshclam will attempt to load new
databases into memory to make sure they are properly handled
by libclamav before replacing the old ones. Tip: This feature uses a lot of RAM. If your system has limited RAM and you are actively running ClamD or ClamScan during the update, then you may need to set `TestDatabases no`. By default freshclam will keep the local databases (.cld) uncompressed to
make their handling faster. With this option you can enable the compression.
The change will take effect with the next database update. Include an optional signature databases (opt-in). This option can be used multiple times. Exclude a standard signature database (opt-out). This option can be used multiple times. With this option you can provide custom sources (http:// or file://) for database files.
This option can be used multiple times. http://myserver.com/mysigs.ndb
file:///mnt/nfs/local.hdb If you're behind a proxy, please enter its address here. A user name for the HTTP proxy authentication. A password for the HTTP proxy authentication. If your servers are behind a firewall/proxy which does a User-Agent
filtering you can use this option to force the use of a different
User-Agent header. Send the RELOAD command to clamd after a successful update. Run a command after a successful database update. Use EXIT_1 to return 1 after successful database update. Run a command when a database update error occurs. Run a command when freshclam reports an outdated version.
In the command string %v will be replaced with the new version number. With this option you can provide a client address for the database downloading.
Useful for multi-homed systems. Timeout in seconds when connecting to database server. Timeout in seconds when reading from database server. 0 means no timeout. This option enables downloading of bytecode.cvd, which includes additional
detection mechanisms and improvements to the ClamAV engine. Disable authenticode certificate chain verification in PE files. Deprecated option to download signatures derived from the Google Safe Browsing API. See https://blog.clamav.net/2020/06/the-future-of-clamav-safebrowsing.html for more details. Deprecated option to set the max-scantime.
The value is in milliseconds. Deprecated option to alert on broken PE and ELF executable files. Deprecated option to enable heuristic alerts (e.g. "Heuristics.") PhishingAlwaysBlockSSLMismatch Deprecated option to alert on SSL mismatches in URLs, even if they're not in the database.
This feature can lead to false positives. Deprecated option to alert on cloaked URLs, even if they're not in the database.
This feature can lead to false positives. Deprecated option to alert on raw DMG image files containing partition intersections. Deprecated option to alert on encrypted archives and documents (encrypted .zip, .7zip, .rar, .pdf). Initialize a supplementary group access (the process must be started by root). Define the clamd socket to connect to for scanning.
This option is mandatory! Syntax:
ClamdSocket unix:path
ClamdSocket tcp:host:port
The first syntax specifies a local unix socket (needs an absolute path) e.g.:
ClamdSocket unix:/run/clamav/clamd.sock
The second syntax specifies a tcp local or remote tcp socket: the
host can be a hostname or an ip address; the ":port" field is only required
for IPv6 addresses, otherwise it defaults to 3310
ClamdSocket tcp:192.168.0.1
This option can be repeated several times with different sockets or even
with the same socket: clamd servers will be selected in a round-robin fashion. Define the interface through which we communicate with sendmail.
This option is mandatory! Possible formats are:
[[unix|local]:]/path/to/file - to specify a unix domain socket;
inet:port@[hostname|ip-address] - to specify an ipv4 socket;
inet6:port@[hostname|ip-address] - to specify an ipv6 socket. /tmp/clamav-milter.sock
inet:7357 Define the group ownership for the (unix) milter socket. Sets the permissions on the (unix) milter socket to the specified mode. Messages originating from these hosts/networks will not be scanned
This option takes a host(name)/mask pair in CIRD notation and can be
repeated several times. If "/mask" is omitted, a host is assumed.
To specify a locally originated, non-smtp, email use the keyword "local". local
192.168.0.0/24
1111:2222:3333::/48 ^(Accept|Reject|Defer|Blackhole|Quarantine)$ Action to be performed on clean messages (mostly useful for testing).
The following actions are available:
Accept: the message is accepted for delivery
Reject: immediately refuse delivery (a 5xx error is returned to the peer)
Defer: return a temporary failure message (4xx) to the peer
Blackhole: like Accept but the message is sent to oblivion
Quarantine: like Accept but message is quarantined instead of being delivered Action to be performed on error conditions (this includes failure to
allocate data structures, no scanners available, network timeouts, unknown
scanner replies and the like.
The following actions are available:
Accept: the message is accepted for delivery;
Reject: immediately refuse delivery (a 5xx error is returned to the peer);
Defer: return a temporary failure message (4xx) to the peer. This option allows you to set a specific rejection reason for infected messages
and it's therefore only useful together with "OnInfected Reject"
The string "%v", if present, will be replaced with the virus name. If this option is set to "Replace" (or "Yes"), an "X-Virus-Scanned" and an
"X-Virus-Status" headers will be attached to each processed message, possibly
replacing existing headers.
If it is set to Add, the X-Virus headers are added possibly on top of the
existing ones.
Note that while "Replace" can potentially break DKIM signatures, "Add" may
confuse procmail and similar filters. When AddHeader is in use, this option allows you to set the reported
hostname. This may be desirable in order to avoid leaking internal names.
If unset the real machine name is used. Execute a command when an infected message is processed.
The following parameters are passed to the invoked program in this order:
virus name, queue id, sender, destination, subject, message id, message date.
Note #1: this requires MTA macroes to be available (see LogInfected below)
Note #2: the process is invoked in the context of clamav-milter
Note #3: clamav-milter will wait for the process to exit. Be quick or fork to
avoid unnecessary delays in email delivery /usr/local/bin/my_infected_message_handler Chroot to the specified directory.
Chrooting is performed just after reading the config file and before
dropping privileges. This option specifies a file which contains a list of basic POSIX regular
expressions. Addresses (sent to or from - see below) matching these regexes
will not be scanned. Optionally each line can start with the string "From:"
or "To:" (note: no whitespace after the colon) indicating if it is,
respectively, the sender or recipient that is to be allowed.
If the field is missing, "To:" is assumed.
Lines starting with #, : or ! are ignored. Messages from authenticated SMTP users matching this extended POSIX
regular expression (egrep-like) will not be scanned.
As an alternative, a file containing a plain (not regex) list of names (one
per line) can be specified using the prefix "file:".
e.g. SkipAuthenticated file:/etc/good_guys
Note: this is the AUTH login name! SkipAuthenticated ^(tom|dick|henry)$ This option allows you to tune what is logged when a message is infected.
Possible values are Off (the default - nothing is logged),
Basic (minimal info logged), Full (verbose info logged)
Note:
For this to work properly in sendmail, make sure the msg_id, mail_addr,
rcpt_addr and i macroes are available in eom. In other words add a line like:
Milter.macros.eom={msg_id}, {mail_addr}, {rcpt_addr}, i
to your .cf file. Alternatively use the macro:
define(`confMILTER_MACROS_EOM', `{msg_id}, {mail_addr}, {rcpt_addr}, i')
Postfix should be working fine with the default settings. This option allows you to tune what is logged when no threat is found in a scanned message.
See LogInfected for possible values and caveats.
Useful in debugging but drastically increases the log size. This option affects the behaviour of LogInfected, LogClean and VirusAction
when a message with multiple recipients is scanned:
If SupportMultipleRecipients is off (the default)
then one single log entry is generated for the message and, in case the
message is determined to be malicious, the command indicated by VirusAction
is executed just once. In both cases only the last recipient is reported.
If SupportMultipleRecipients is on:
then one line is logged for each recipient and the command indicated
by VirusAction is also executed once for each recipient.
Note: although it's probably a good idea to enable this option, the default value
is currently set to off for legacy reasons. Example ERROR: Unknown option passed
foo true ^(yes|true|1|no|false|0)$ config-file /etc/clamd.d/scan.conf /etc/mail/clamav-milter.conf no-warnings show-progress daemon no-dns list-mirrors update-db reload multiscan fdpass stream /var/lib/clamav ^[0-9]+$ ping wait hex-dump md5 sha1 sha256 imp fuzzy-img print-certs html-normalise ascii-normalise utf16-decode build max-bad-sigs 3000 flevel cvd-version no-cdiff server unpack unpack-current info list-sigs find-sigs decode-sigs test-sigs vba vba-hex compare run-cdiff verify-cdiff hybrid defaultcolors config-dir /etc non-default generate-config force-interpreter trust-bytecode printsrc Print source code of bytecode printbcir input trace bytecode trace level no-trace-showsource bytecode-trust-all http-proxy proxy-user log-verbose force disable-summary disable-archive no-archive no-pe no-elf no-ole2 no-pdf no-html no-mail no-phishing-sigs no-phishing-scan-urls no-algorithmic no-phishing-restrictedscan max-ratio max-space ^[0-9]+[KMG]?$ unzip unrar arj unzoo lha jar tar tgz deb AlertExceedsMax CacheSize 65536 PreludeEnable prelude-enable Enable prelude PreludeAnalyzerName prelude-analyzer-name /tmp/clamav.log LogFileUnlock LogFileMaxSize 5M LogTime Log time with each message. LogClean LogSyslog LogFacility LOG_LOCAL6 LOG_MAIL LogVerbose Enable verbose logging. LogRotate log-rotate ExtendedDetectionInfo PidFile /run/clamav/clam.pid TemporaryDirectory /tmp datadir OfficialDatabaseOnly FailIfCvdOlderThan -1 YaraRules LocalSocket /run/clamav/clamd.sock LocalSocketGroup virusgroup LocalSocketMode 660 FixStaleSocket TCPSocket 3310 TCPAddr localhost MaxConnectionQueueLength 30 StreamMaxLength 100M StreamMinPort 1024 StreamMaxPort 2048 120 CommandReadTimeout SendBufTimeout 200 300 MaxQueue IdleTimeout ^/proc/
^/sys/ MaxDirectoryRecursion 15 FollowDirectorySymlinks Follow directory symlinks. FollowFileSymlinks CrossFilesystems SelfCheck 600 ConcurrentDatabaseReload DisableCache VirusEvent /opt/send_virus_alert_sms.sh ExitOnOOM AllowAllMatchScan Foreground foreground Don't fork into background. Debug LeaveTemporaryFiles GenerateMetadataJson User Bytecode BytecodeSecurity ^(TrustSigned|Paranoid)$ TrustSigned BytecodeTimeout 10000 BytecodeUnsigned BytecodeMode Auto Statistics None DetectPUA ExcludePUA NetTool
PWTool IncludePUA Spy
Scanner
RAT ScanPE ScanELF ScanMail ScanPartialMessages PhishingSignatures PhishingScanURLs HeuristicAlerts HeuristicScanPrecedence StructuredDataDetection StructuredMinCreditCardCount StructuredMinSSNCount StructuredSSNFormatNormal StructuredSSNFormatStripped ScanHTML ScanOLE2 AlertBrokenExecutables AlertBrokenMedia AlertEncrypted StructuredCCOnly AlertEncryptedArchive AlertEncryptedDoc AlertOLE2Macros AlertPhishingSSLMismatch AlertPhishingCloak AlertPartitionIntersection ScanPDF ScanSWF ScanXMLDOCS ScanHWP3 ScanOneNote ScanArchive ScanImage ScanImageFuzzyHash ForceToDisk MaxScanTime 120000 400M 17 MaxEmbeddedPE 40M MaxHTMLNormalize MaxHTMLNoTags 8M MaxScriptNormalize 20M MaxZipTypeRcg 1M MaxPartitions 128 MaxIconsPE 100 MaxRecHWP3 16 PCREMatchLimit 100000 PCRERecMatchLimit 5000 PCREMaxFileSize OnAccessMountPath /
/home/user OnAccessIncludePath /home
/students OnAccessExcludePath /home/bofh
/root OnAccessExcludeRootUID OnAccessExcludeUID OnAccessExcludeUname clamuser OnAccessMaxFileSize OnAccessDisableDDD OnAccessPrevention OnAccessExtraScanning OnAccessCurlTimeout 10000L OnAccessMaxThreads OnAccessRetryAttempts OnAccessDenyOnError watch-list exclude-list DevACOnly DevACDepth DevPerformance DevLiblog dev-liblog UpdateLogFile /var/log/freshclam.log DatabaseOwner clamupdate Checks checks DNSDatabaseInfo current.cvd.clamav.net DatabaseMirror database.clamav.net PrivateMirror MaxAttempts ScriptedUpdates TestDatabases CompressLocalDatabase ExtraDatabase dbname1
dbname2 ExcludeDatabase DatabaseCustomURL HTTPProxyServer your-proxy HTTPProxyPort HTTP proxy's port 8080 HTTPProxyUsername username HTTPProxyPassword HTTPUserAgent NotifyClamd daemon-notify OnUpdateExecute on-update-execute command OnErrorExecute on-error-execute OnOutdatedExecute on-outdated-execute LocalIPAddress local-address aaa.bbb.ccc.ddd ConnectTimeout ReceiveTimeout DisableCertCheck SafeBrowsing TimeLimit DetectBrokenExecutables AlgorithmicDetection PhishingAlwaysBlockCloak OLE2BlockMacros ArchiveBlockEncrypted MailMaxRecursion ArchiveMaxScanSize ArchiveMaxRecursion ArchiveMaxFiles ArchiveMaxCompressionRatio ArchiveBlockMax ArchiveLimitMemoryUsage MailFollowURLs mail-follow-urls AllowSupplementaryGroups ScanOnAccess ClamdSocket tcp:scanner.mydomain:7357 MilterSocket MilterSocketGroup MilterSocketMode LocalNet OnClean Accept OnInfected Quarantine OnFail ^(Accept|Reject|Defer)$ Defer RejectMsg MTA specific AddHeader ^(No|Replace|Yes|Add)$ Replace ReportHostname my.mail.server.name VirusAction Chroot /newroot AllowList /etc/allowed_addresses Whitelist SkipAuthenticated LogInfected Basic SupportMultipleRecipients 1 c c u L P ERROR: %s WARNING: %s Log size = %lld, max = %lld
-%Y%m%d_%H%M%S.log %s -> %s -> %s LOG_AUTH LOG_AUTHPRIV LOG_CRON LOG_DAEMON LOG_FTP LOG_KERN LOG_LPR LOG_NEWS LOG_SYSLOG LOG_USER LOG_UUCP LOG_LOCAL0 LOG_LOCAL1 LOG_LOCAL2 LOG_LOCAL3 LOG_LOCAL4 LOG_LOCAL5 LOG_LOCAL7 WARNING: Log size limit met but log file rotation turned off. Forcing log file rotation anyways.
Need to rotate log file due to size but ran out of memory.
Need to rotate log file due to size but could not get local time.
ERROR: Failed to open log file %s: %s
ERROR: Failed to convert the open log file descriptor for %s to a FILE* handle: %s
WARNING: File locking not supported (NFS?) ERROR: Failed to lock the log file %s: %s
POSIXLY_CORRECT %s: illegal option -- %c
%s: unrecognized option `%s'
%s: option `%s' is ambiguous
%s: option requires an argument -- %c
%s: option `--%s' doesn't allow an argument
%s: option `--%s' requires an argument
; ; @ Ht h XX x ؟ X4 x XH t 4 ( x @ p ( hl H, xL h 0
D
x
X
H4 x X X@ x
h
"X ) ) ) *0 zR x `/ D $ 4 }P FJ w ?:*3$" \ @ t M X ̍ FBE D(A0GkHWB
0A(A BBBA 1 ( ` < p YBB B(A0A8DP4
8C0A(B BBBK pHP` p YBB B(A0A8DP4
8C0A(B BBBK pHPH BBB E(D0A8D@
8A0D(B BBBH l P 9 BBB B(A0A8Gv
8A0A(B BBBG UFAvFQAH BLE E(A0D8M
8A0A(B BBBF T FBB D(A0G[
0A(A BBBG TMYA ( d EAGO
AAB X FBB B(A0A8G L@LD
8A0A(B BBBG ` J BBB A(D0D@HMP\HA@u
0A(A BBBK b
0A(A BBBA T P BBB B(A0A8H Q
D
8A0A(B BBBH ( T5 AAD@
AAD hY Jm
I L( EAG0
AAE 8 l FBA A(DP{
(A ABBA , \ EHJ
AAA EAF l h FBB B(A0A8D@IHFP[HA@|
8D0A(B BBBJ ,
8D0A(B BBBG X , = FBB A(D0D@
0D(A BBBF D
0A(A BBBD V HT
D s D 4 LAA k
ABD
ABG R
ABK @ FKB A(A0DP
0A(A BBBA H ! EN
E H h $0 HM
K 8 EO 8 <" FBD A(G0T
(A ABBB 0 0 FDD GC
AABD 8 FJG D(G
(A ABBI L
0 ` FHA Gn
AABH , ( EDD0A
AAH $ T AAG EDA` BEE J(D0D8DP
8A0A(B BBBH L
8C0A(B BBBA L P BED D(D0g
(A ABBH
(C ABBA $ T EAG ADA, ODA ABA ` t FBB B(A0A8G L0 0D0P0A0
8A0A(B BBBA \ \
FBE B(D0C8F`DFB
8A0A(B BBBA L
0 FBB B(A0D8G
8A0A(B BBBI ( _ EAD }
DAL H 8 FBB B(D0D8G
8A0A(B BBBI L
FBB E(A0A8I
E
8A0A(B BBBG 4 Xb FKC s
IBF AFB d 8 FBB E(K0D8D@
8A0A(B BBBB L
8F0A(B BBBE d t h BBB L(D0D8G
8C0A(B BBBF
8J0A(B BBBE D
e FEE E(H0H8G@n8A0A(B BBB L
p 0 I" T h * D c P D D c g V * T * + x} * ) J{ v * : 1} * T * : | * ( * * T * : d * * * * m * * * ~ z * ~ * T d T r * T * ؙ { { T * T * ـ f T i * p w * T o * U * z { z { * * * * T * * " * , 8 G W d b j w | ` } * * u i l f * d c r * d * $ c / @ 4 n * @ @ g @ P f * b t * i * 8 q p * z c * p r T s * B{ a * t * * * " * 2 * = * C * J * R * Y * a * i * z * * * ! ! ! ! ! ! ! ! ! M * | ! ' 5 * D S g & l 8 } * X {| * {| * {| * p {| * {| ' 1 * {| < * H {| R k p Z o } - ؞ # | * ȟ | } p| x {| X * ȡ {| & 0 5 ( = G ` c @ s x C
( x ` ؤ ` h x d 8 ȧ k { * ! | < * Ш | O | * {| ` X 0 j n * {| | * h | * {| * X {| F * |
* | * | $ * | 9 > * h {| G X q q } } ' h } * | ;} ز h} 0 ` | * {| | 8 | * 8 {| * з {| * {| * ` | 1 l * X {| D } * {| U 2 * {| e ~ * {| } o * X | * H {| * | * {| * {| * {| ' * ( {| 8 @ * | G * | X P * | n h * | * | ~ * ~ * | ~ * x {| * {| * h {| * {| * {| * ` {| ~ * {| * {| * @ {| 1 | * ` | = } @ I # } x P ~ @
s # } U $ } ' 0 X ~ f j ~ f { "~ 1~ @ ( E~ 0 T~ 2 P c~ d o~ } } {~ @ @ s 2 ? S c w * | P H * | * {|
* {| 4 ; 2 N d * {| x W e | * | _ * * & l 8 u ! ! c ! %! x %! * {| =# )} * 8 | N# * | [# } 8 I e# * | }# * | ;$ C * ~ * @ | # ~ * | ~ * H | # | * | # 0 * | # # # $ $ 4$ * D$ * \$ k$ * |$ * | $ * $ X $ $ $ ( $ h $ % % ( % % % ( % &% -% E% E% K% ` U% b% l% | 8 % % % % p H % x % % % % % %
& 0
& x & & * H {| # *
* e# * * \$ * # $ # 1 * * * * * * c 5 & o & & P & H & & X & & 0 & 8 & ' ( ' ' @ #' .' 9' D' O' Z' e' L \
HT H" H" o 0 H
" ` X o o o o o f `" 0 @ P ` p Ъ 0 @ P ` p Ы 0 @ P ` p Ь 0 @ P ` p Э 0 @ P ` p Ю 0 @ P ` p Я 0 @ P ` p а 0 @ P ` p б I" d GA$3a1 GA$3p1113 p S GA* GA$annobin gcc 8.5.0 20210514 GA$plugin name: gcc-annobin GA$running gcc 8.5.0 20210514 GA* GA!
GA*FORTIFY GA+GLIBCXX_ASSERTIONS GA*GOW * GA*cf_protection GA+omit_frame_pointer GA+stack_clash GA!stack_realign GA* p GA$3a1 UT GA$3p1113 ET GA* GA$annobin gcc 8.5.0 20210514 GA$plugin name: gcc-annobin GA$running gcc 8.5.0 20210514 GA* GA!
GA*FORTIFY GA+GLIBCXX_ASSERTIONS GA*cf_protection GA+omit_frame_pointer GA+stack_clash GA!stack_realign GA* S GA*GOW * H GA* ET GA*GOW * S ET
GA*FORTIFY 5T GA+GLIBCXX_ASSERTIONS
GA*FORTIFY S GA+GLIBCXX_ASSERTIONS clamscan-1.4.3-2.el8.x86_64.debug 7zXZ ִF ! t/M] ?Eh=ڊ2N| *l[<)>j3`1KpI[K4)eMܤۃTG3 R[ rA;LŻ)Xt4d"4mz1l/OV+Tk dy$݃aiZu(M]#X'˦8p䄃ThhgE&G :
*eV b"[P C
ze *4Jh'+S&\u$l֨}3ׁmo<'%Y̺5(̰ob#RkI0݊LxPY0aQ+;4p-_u[L?_$CM=cɁޢK7L{Gn|KxVڢ墓#R,oI6{! .JY@w
k[?-d1l3̨ >D)9^OW`vg?i=St磨6ue'0b[ b V@w :ܰThHu7FP/? vU:;Lk:u:w7=t
(sacTK* 6hH bbwg[Dc`a7pڲބb"b"}%D8hbx'kj@41-^a CU?lM(>^0*xNxD*}koh6M
͢ҼYM_sHnmz] ^CC
` | G@ Փ0 n^Ƿ)9XaFmA 8@<;>G 7YJX7;'Ty T5̪iG7T8#<
"]]xA;e7,+acy}H8AERC#Kgo*QOX PzJWKs~RIgjstw<ꎴ`h {R=rp [{ ^ojG`w2r|1[?}ܲ q#K[xl)r! y]XB,]CZS-zZ 1Rkxj!p< xJٔLF
o6X)%%_} #Nsm0b phIȾlu] bIWR.& dW
>> / g YZ .shstrtab .interp .note.gnu.property .note.ABI-tag .note.gnu.build-id .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt.sec .text .fini .rodata .eh_frame_hdr .eh_frame .init_array .fini_array .data.rel.ro .dynamic .got .data .bss .gnu.build.attributes .gnu_debuglink .gnu_debugdata & 4 $ G o 0 0 L Q
Y H H a o & n o } B X X ` P 0 0 @ p p ՙ HT HT
XT XT (* (* , , `
H" H H" H I" I `` `" ` " p " " x
b , ( / T >