⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.133
Server IP:
185.119.109.197
Server:
Linux managedhosting.chostar.me 5.15.0-160-generic #170-Ubuntu SMP Wed Oct 1 10:06:56 UTC 2025 x86_64
Server Software:
Apache
PHP Version:
8.1.33
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
bin
/
X11
/
View File Name :
freshclam
ELF > @ xq @ 8 @ @ @ @ | | 0 0 0 H H p p p d Xu Hj Hz Hz 8 8 8 0 0 h h h D D Std 8 8 8 0 0 Ptd Qtd Rtd p p p d d /lib64/ld-linux-x86-64.so.2 GNU GNU >+oX-! ^ GNU p , H-$t p r s t u v z } iq3X 9 r@vɑFSrqk½^O.|em> C) 9 B t [ { x ? < W , | k | _ C q 7 w " ! k 6 . ' Q F f r [ ' . * l & J P I p @ X v 9 f ` 5 @ ' B P m T ` _ h G ^ 0 > Q 0 " ( p' T __cxa_finalize __libc_start_main exit strcmp calloc stderr __fprintf_chk fwrite getenv optind optarg optopt opterr memmove strlen strncmp dup2 kill __stack_chk_fail fopen64 strchr malloc fgets strpbrk fclose __errno_location strtoll strtol strcasecmp strrchr __sprintf_chk access __printf_chk ctime pthread_mutex_lock pthread_mutex_unlock stdout __vsnprintf_chk fputs fflush unlink waitpid pipe fork fdopen system sscanf lstat64 strncpy socket connect send strndup strstr mkdir getgid getuid recv __snprintf_chk getaddrinfo gai_strerror strcat freeaddrinfo getpwnam initgroups lchown setgid setuid geteuid setsid sigemptyset sigaction perror getpid putchar strncasecmp umask alarm pause getpwuid _ITM_deregisterTMCloneTable __gmon_start__ _ITM_registerTMCloneTable fc_download_url_databases fc_set_fccb_download_complete fc_test_database optparse print_version daemonize_signal_parent logg_close get_version fc_update_databases logg drop_privileges fc_cleanup fc_dns_query_update_info optfree mprintf_disabled check_flevel fc_prune_database_directory fc_strerror daemonize_parent_wait mprintf fc_initialize optget cli_strbcasestr cli_regfree cl_retdbdir cli_gentemp_with_prefix cli_chomp cli_regexec cli_safer_realloc cli_rmdirs cli_safer_strdup cl_cvdhead cl_cvdfree cl_retflevel cl_strerror cl_set_clcb_msg cli_regcomp cl_init libfreshclam.so.3 libclamav.so.12 libc.so.6 FRESHCLAM_PUBLIC CLAMAV_PUBLIC CLAMAV_PRIVATE GLIBC_2.34 GLIBC_2.33 GLIBC_2.4 GLIBC_2.3.4 GLIBC_2.2.5 2 C ^ D 0 Ӈ_ o E } T ii ti ui p ` x 8 H P ` X^ ( 8 H h p x^ @ H X h 0 @ ` h x # 8 @ P P $ ! ! (! . 8! X! `! p! 5 ! ! ! ! < ! ! ! " " 0" ^ 8" H" E h" N x" " " ^ " " " " h " # ^ # # p 0# P# X# h# x# # # # # # # # $ ($ 0$ @$ p$ x$ $ $ $ $ $ % % % (% H% P% `% p% % % % % % % & (& 8& H& h& p& & & & & & ' ' @' H' X' ' ' ' ' ' ' ' - ' ( ( 0( 6 @( `( h( x( : ( ( ( ( ? ( ( ( ) l ) 8) @) P) F `) ) ) ) J ) ) ) ) T * * (* ` X* `* p* o * * * * * + 0+ 8+ H+ X+ x+ _ + + + + X_ + + + , x_ , , 0, P, X, h, x, , , , , , , (- 0- @- p- x- - - - - - N . . . 8. N H. P. `. p. . . . . . . / (/ 8/ h/ p/ / % / / / / 0 0 @0 H0 X0 * 0 0 0 7 0 0 _ 0 0 > 0 1 1 01 L P1 W `1 h1 x1 c 1 1 1 1 o 1 1 2 2 82 _ @2 P2 `2 2 ` 2 2 2 2 0` 2 2 2 3 3 (3 83 X3 h` `3 p3 3 ` 3 3 3 3 3 4 4 04 ` 84 H4 X4 x4 4 4 4 4 4 4 ) 5 5 5 4 P5 X5 h5 ? 5 5 5 K 5 5 5 5 Q 6 (6 06 @6 a P6 p6 x6 6 q 6 6 6 6 | 6 7 7 7 (7 H7 P7 `7 p7 7 7 7 7 7 7 7 8 8 (8 88 H8 h8 p8 8 8 8 8 8 8 8 9 9 9 @9 H9 X9 h9 9 9 9 9 9 9 9 9 : : 0: P: `: h: x: " : : : : ( : : : ; , (; 8; @; P; 2 p; ; ; ; 6 ; ; ; ; : < < < (< > H< X< `< p< B < < < < F < V < < < < h = r = 0= ` 8= } @= H= X= x= = = = = a = = U = ; > 0a > > 0> P> Pa X> `> , x> > a > > $ > > > > ? (? b 0? 8? E P? p? hb x? ? ] ? ? b ? * ? ? @ 3 @ @ ; @ K (@ H@ b P@ X@ V p@ @ @c @ @ @ } @ c @ l @ @ A c (A 0A 8A XA N hA d pA N xA A A A d A A A A A e B B B @B pe HB PB B f B B + B Pf B < B G C f C W (C [ @C `C f hC pC C C f C j C C g C u D o D 8D g @D HD `D D g D D D D h D D D E h E E y 8E XE i `E hE E E Xi E E E E i E E F 0F `j 8F @F XF xF j F F F F 0k F F F G l G X G PG m XG `G hG . xG G m G @ G C G G [ G G v H (H m 0H 8H @H PH pH m xH H H H (n H H H I n I I I (I HI `p PI XI I p I I I I s I I J J Ps (J 0J 8J HJ hJ ) pJ xJ J J xs J J E J J s K K Y K @K s HK PK n K u K W K K K K `u K K s K L L v L (L 0L @L `L `w hL pL xL L L w L L L L w L L w L M M M (y 8M Xy @M ) HM . PM 8 `M M z M M C M N M 0z M Z M i M t N z N N (N 8N XN 0{ `N hN pN N N | N N N N N } N N O 0O X~ 8O @O HO XO xO P O O O O O O O O O P P P P 4 0P PP XP `P N hP f xP P P P P x P P P x P A P P Q (Q 0Q A 8Q PQ pQ @ xQ Q Q Q Q Q Q Q R R R R & (R HR PR XR 0 `R G pR R R R T R e R R R R x R S S (S 0S 8S HS hS pS xS S S S S S S S S ؈ T T T T @T HT PT , XT E hT T T T X T k T T T T T T U p U (U 0U @U `U hU pU xU U U ` U U U U U U V V V 8V @V HV PV `V V X V V V + V V V V 8 V B V W W W M (W ` 8W XW 8 `W hW v pW W W X W W W W W 8 W W X X 0X p 8X @X 8 HX I XX xX X X X X X X X 3 X X Y ( Y Y Y 0Y PY XY `Y hY xY Y Y Y ! Y / Y Y Y > Y A Y T Z (Z 0Z h 8Z l @Z z PZ pZ ( xZ Z Z Z Z H Z Z Z Z [ [ [ [ ([ H[ P[ X[ `[ p[ [ [ [ [ [ [ [ / [ 4 [ D \ \ 8 (\ 0\ V h\ p\ h x\ u \ \ \ \ ] ] ] @] H] P] h] ] ] ] ] Ȩ ] ] ] ^ @ ^ (^ @^ `^ h^ p^ - ^ ^ ^ ^ @ ^ ^ x ^ _ V _ 8_ @_ j H_ q `_ _ _ l _ _ _ _ Z _ _ ` ` (` X` `` p` ` ` ` ` ` ` ` ` a a 0a 8a @a Ha Xa xa a a a a a a a O a ; b 0a b ( b b : @b W Pb Xb W `b q hb ? xb b b b A b F b p b F b ; (c 0c 8c ( pc 0 xc X c c c c A c Q c d س d d (d Hd @ Pd Xd pd d d d s d x d ] d e ض (e ] 0e a he 8 pe xe e e m e e e x f f @f @ Hf Pf x f p f 0 f f f g f f g g @ g (g 0g `g hg pg xg g g g g g ( g h i h 8h @h Hh `h h h h h h X h X h h i i i (i 8i Xi 0 `i hi i i x i i ) i 3 i i 0 i i = j U j 0j 8j @j c Hj x Xj xj Ƚ j j ^ j j j j j j K j k 8 k k k q 0k Pk Xk `k hk xk k @ k k k k k k k k l (l 0l 8l pl xl l l l l m m m , Hm Pm Xm < m m m W m m m m g n n (n 0n 8n Hn hn pn xn n n n n n n o o @o P Ho Po o o o o o < o p ` p W (p `p hp pp $ p p , p p , p 3 p p > p p > q I q P (q h 8q @q h Hq n q X q x q q q q 0 q q r r r Xr h `r @ hr r p r r r r r 0s 8s @s xs s s * s ( s 6 s t p t 6 t < 0t Pt @ Xt `t xt t t t t t t u (u 0u 8u = Pu pu xu u E u u u u v v v (v Hv Pv Xv pv v v v 3 v v v v w w (w 0w Hw hw pw xw w w w w w w x x x @x Hx Px hx x x x x x x x x y y (y `y hy py y y y y y y ! Y m @ u | | | | | | | | | | | | | | | | } } } } } (} 0} 8} @} H} P} X} `} h} p} x} " } # } $ } % } & } ' } ( } ) } * } + } , } - } . } / } 0 } 1 } 2 ~ 3 ~ 4 ~ 5 ~ 6 ~ 7 (~ 8 0~ 9 8~ : @~ ; H~ < P~ = X~ > `~ ? h~ @ p~ A x~ B ~ C ~ D ~ E ~ F ~ G ~ H ~ I ~ J ~ K ~ L ~ M ~ N ~ O ~ P ~ Q ~ R S T U V W ( X 0 Z 8 [ @ \ H ] P ^ X _ ` ` h a p b x c d e f g h i j k l n o HH HtH 5J %K h h h h h h h h q h a h Q h A h 1 h ! h h h h h h h h h h h q h a h Q h A h 1 h ! h h h h h! h" h# h$ h% h& h' q h( a h) Q h* A h+ 1 h, ! h- h. h/ h0 h1 h2 h3 h4 h5 h6 h7 q h8 a h9 Q h: A h; 1 h< ! h= h> h? h@ hA hB hC hD hE hF hG q hH a hI Q hJ A hK 1 hL ! hM hN hO hP hQ hR hS hT hU hV hW q hX a hY Q hZ A h[ 1 h\ ! h] h^ h_ h` ha hb hc hd he hf hg q hh a hi Q hj A % D % D %} D %u D %m D %e D %] D %U D %M D %E D %= D %5 D %- D %% D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D %} D %u D %m D %e D %] D %U D %M D %E D %= D %5 D %- D %% D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D %} D %u D %m D %e D %] D %U D %M D %E D %= D %5 D %- D %% D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D %} D %u D %m D %e D %] D %U D %M D %E D %= D %5 D AWAVAUATAUSHH dH%( H$x 1HDŽ$ DŽ$ HDŽ$ D$2 T# HE1A Hj D15 A[A]HHu H5 H4 DP Ez E~`AT$HH--foregrHtf D f:-FtHH9t1HH9 uzounduH5 H84 x f_ H5O H4 HxoE1A 1W 1HUI05 AXAYHH H5! H3 x H5 H3 @ D$(6 H5 HHDŽ$ DŽ$ 3 HË@ D$xA L4$L=0 Hl$fL$ H{H5 Lk , H$ L$ L$ LLHM HH[0H HDŽ$ H{Lz 1L4$Hl$H5 A N H$ Ht $ N# H5 1E1xI H$ H Y D$ D$ At L- LHQ2 x H H= HuWZH5/ HE1"2 Hx9D H H=տ H HtfH$ E1H Ͽ D$ D$ Mt t$Ly" H$ Ht $ `" H$Ht t$HK" HtH1 MtL!\=U u61ADFH$x dH+%( HĈ D[]A\A]A^A_H 1E1A H5 H Hw H5 1 ~H=' RH=k F H= 0 H=g H= H=ρ H= H=/ H=k H= H= H=/ 0H=i H= H=у H= H=A tH= hH= \H= PH=I DH5 1QH5 1>H=7 H=s H= E1E1H= H=Q H= H= :H=N $H= H=I H= H=و t H= ^H=G RH= FH= :H= .H=O "H= H= H=; H= hZH5 1E1ME ?L 1A H= H EH5 HL$ . HH$ { HD$8 L4$Ll$8Hl$;H$ L$ LLHaH HaH[0H HDŽ$ H{LH5 f tHSAH5ˌ 1 L4$Hl$^D HH5@ HD$U- HL$LP HqQ HAL4$Hl$H5ً 1D YHSAH5r 1 L4$Hl$C 1Ld$XHl$D$x Lt$8L4$H$ L%. HLH$$ D$, x w LHHDŽ$ DŽ$ x, H$ H$ Hc AąU $ H$ HDŽ$ DŽ$ L$ HD$@HDŽ$ DŽ$ HDŽ$ DŽ$ H |$ 9HT$XH$ LH$ H$ Ta D$ Lt$H1L$ D$0 Lt$@Hl$PD$0 H9\$ M<H5 LtӋ$ tPLMl HI9t:Le LLhuHt$8H$ LE = L$ 뀋$ H$ HLlf HI9 Le LLuHt$8H$ L+E tILt$HHl$PAIU H5 1E1E L$ Mt$ L H$ Ht $ E} t$ H|$@ |$0 HDŽ$ H HD$HH5 H) Ht$HH@ $ ) H|$8 @ $ 1f= H5 H) HxH$@ HHD$PH$0 Z H5S Hj) x u%L-0 HLR) 1Hx] 1 H5/ H!) x l $ H56 H ) x HH $ H5 H( x ^ H=H $ )H5 H( x t @HH $ H5 H( x t$ H5 Hg( x t$ H5 HJ( x t$ L% HL*( Hx L-} HL ( x t$ H5g H' x t H@H$ LH' H@H LH' x S H53 H' x ) H$0 H5F H b L% HHH$8 ILH- I' x tDH5k H4' H$ HPHHT$ HT$ [ $ ? H5 H& x HH H5 HH$ HL$ uHL$ HAH$ H5g H& x t-H@LHH$ & x > H@H$( H57 H[& x H$ H5$ 11A H5' H*& x I1 H5 H& H5 HH@$ % H5 HH@$ % H5 HH@$ % H|$8@ $ |Aą H=E ULL- &LH{% x HD$0 H$ 1$ HH$ 1HCD Ht$ H$ <Ht$ 1ҿ +H5 H % @ D$@ H5 HE1$ x$ H5 HE1$ x H5 H$ 1҃x |$x HD$0 VLH$ PAUj ATRD$XPD$xPt$p$ PDL$dLD$P$ H$ t$XjJ HPAąH5 1x? H5 HHDŽ$ DŽ$ HDŽ$ DŽ$ # H$ H$ H.[ Aą H5] HL$ # L$ LLHZ $ H$ D$t$@HL$0 HtH H5 1E1?: H ( Dd$D$ LH5 1E1 Lt$HHl$PA ]> L$ H5 1E19 H ð D$ m 1A E1H5 9 D$ H$ Ht $ I H|$@ tt$ H|$@3 H5 1`9 H I H HHHD$HM" x u LLH= < Aą $ |$@ HDŽ$ DŽ$ D$ H$ HDŽ$ HD$(DŽ$ HDŽ$ DŽ$ t H|$0 |$ t H|$( HT$XH$ H$ L*W Aą $ $ <L$pD$HL$(Lt$`H$ D$ Dd$|Hl$hH\H$ 1HD$PHH$ 9l$j L$E1|$ L|$(M,$t-f I7L DDIL9uEu:LH5 1< HT$PHt$8I<$3; HpLH5 1; ߋ$ Lt$HE1Hl$PL$ D$Ht$ 1ҿ THt$ 1ҿ CHt$ 1ҿ 2H5 H H5 HPT$@9 H5V HHT$H HT$Hx / 2 f= u11MT f; H5P H x tuLh L-N H5. LD$H H HD$`[H|$` HM 1QH|$`G|$H^Y L$9t] H5u H HD$ x t H@HD$L- ucHL HxHtO-H Ht$PH=^ HD$H>t&LD$HH=C APApLD$H LHh Ht$HxR Q H5Y |$@H D$@1p9 1|$x HDD$0Lt$hHD$HHcD$@Dd$|Ld$PHD$`L|$0L|$ H\$pH\$8f= H5r HE1 x$ H5 HE1 H5 H@ D$ x E H5t Hv 1҃x ! 1|$x QH$ QAVL$0QAURL$XQP$ $ PDL$dLD$P$ H$ t$XH$ *C HPAƅ 1DH5 118 LL LL H|$XW|$@HD$`H$ H$ H9$ }G8H Y ftf fu H5M 117 f+ 2 1L G1L 8B 1H5 `7 1YA L- HL x t-L@MLD$t H5 H Ht$LP :@ AH5 1Dt$L|$0Lt$hH\$p6 H5 16 L$AH5 HHT$ V HT$ @ HPH5/ H1 LhLphH$0 1H5~ 1W6 H$0 g;L- H LH Hx'Hb PpH$0 LH H5 1HP15 H=8: H5 HO H$ H$ HQ AąC H$ tH $ HD$H H5{ 1A 0 H ǧ L- H55 H HD$0 x QH@HD$0CH5 H x vH5Y 114 fT )H@H$ H5 HO x H@H$ H$ aH5{ H x $ H5 H x Lt$XHl$ML4$ H5 H x f H5x 1E13 Dd$D$0 D$ L$ H G H5~ H1</ H5 1A #/ L- H5w 1A ^3 kH5ʀ 1. LH5- H x uH5+ H x $ ID$H$ H5w 1E12 H$ Ht $ - H$ Ht $ E H|$0 tt$@H|$0 HD$(Ht t$ H H5 HHDŽ$ H$ H$ H\N D$( AąH52x 1- H aH5 1L-y 2 4HL$0D$@Lt$`Hl$hDd$|H\$pIHD$Lt$PHl$`Dd$hH$ L9l$ M} E1E1 Jt Ls DDID9wLEt7H5y 1d1 Ht$8I} H$ 0 IH59y 1-1 H5\x 1, A E1H$ Ht $ V H|$0 tt$@H|$0@ HD$(Ht t$ H* H5#y 1W, H @ HD$0Ht t$@H H$ Ht $ H5v 1E1, H H5t HHT$ HT$@ D$@OHP2L`LhILt$HAHl$PIU H5t .LH HT$Hx D$PLt$`H5t Hl$hI$ 1E1/ D$ Dd$PH@f$ $ Lt$PHl$`Dd$hD$L$ H5"v 1* 9Lt$hDd$|L|$0H\$pH$0 H5w 1H / H5x 11/ eLHH H5 HP1. 7LHx H5Y HP1. L- H59z 1. BH5z 11x. -Lt$PHl$`D$PH5s IU 1LPp C8LH5B| H 1L- . @H5{y 1- HxH5 H1H5y 1- 1H5Pz 1- H5z 11- /LHA 1H5v HP1}- ; LHm H5v 1H HP1N- H5_w 11>- H5z 1&- L- S;H LHI L H5w HP1, > I 1LD$H=Ş Hz i8I:H= H H1=A<$LD$ H5z H1IV, LH H5^ HP1/, LH H=- H ^ HH1P H5uv 1H | HP1+ @8pLH5y Hf. @ 1I^HHPTE11H=S f. H=i Hb H9tH Ht H=9 H52 H)HH?HHHtH Htf D = u+UH= Ht H=Ɯ d ] w PX1Hff. @ ATIUSt2FHHlf. H;Ht H HH9u[L]A\ ATISHHt>Hf D I<$Ht Ht I|$Ht Ht Md$8MuHL[A\ AUIATIUHSHH P$HË@(uYuCH{Ht HwHCHH LkC$ H C 1H[]A\A] tH eIH HtH ID$H Ml$Hf D HH@0HuH{Lb0C$ Hy @ HCHHcC H1[]A\A]H=ۚ L 1HJ u1H " H=J H " H=vJ LH b " H=qJ @ AWIAVAUATUHSH= H(nH 1A+ + 56 D%ϙ H IcHH| L HcLD4D5 u] D A? 5ϙ Hc<7 f D D9} Q H(D[]A\A]A^A_ HtPA9u5 :tAW ; HcH: 8 x:O D AD$٘ 9 ǘ E1A:AAGt:O D9 IcHT - @+ @-u f D H9| HT Aŀ-uz tLH߉< #AE9 Hc$ IcHt D$ IHD$Of. AAH~LL$)H $H @H $LL$HHN|HIA9 L~A9H~HM H=ї E1 HH A: e5 D%| A:t A? @ IcHcHD <0 AD%: E/1A:A<ЍOՁ /A:"HcȃE,A:D A D H= HM E1 H Hc 5 H| I D r@-t6@1 AHŖ A D%d z txLH #AD%- @ DEHt$E)A)Dd$ A@HTD% HL<JDAD% H/ zAAD%ŕ dAH D% CH6ff. AWAVA+ AUIATUHSH=A HhHT$LD$+ HX D%= H A9 IcL| H HL$A-s @+Y @-u f D H9< L| AAƀ-uA tLD$HT$LE1H߉ $AE9 Hc Mc\$$Dl$Jt D$HHD$5fCH~D)H HILlHHE9 LnD9H~f D A & D AD$A 9} HhD[]A\A]A^A_ HL$D1A:4FըA:yHBD4h A A@-Y@uHT$HYAŋd T E\$L= A D C =f. DHL$M\$$D)E)D$Dl$AVHL HL= - 1A-IDHD$@ L$$D$28 |$2=- D$$H =tAHuL$LT$2I} H|$PH D$L+D$$A Dt$3HDd$4I\$HIDHl$8Hl$@HD$XL|$( D HcHMd M LD{L9uLHLuDDt$3L|$(Dd$4\$HHl$8HcHL|$2=B HD$0HBH RE1D% AD$ ~D$$D$LDt$3L|$(11Dd$4\$HMM 1Hl$8H|$PDt$3Lt$XL|$(ADd$4Ld$@\$HHl$8Ll$@M LLuAI} I HuDDt$3L|$(Dd$4\$HHl$8Ll$@tL A? E\$HM MH D H= 1b p|$$f A? [E\$HM MHO D B 맅 5. A? LHM H@ H=6 D% `DjD% PAD%ޏ D9cE1 ̏ A:AGl:"LHM Hy@ 1H=Џ vD% D$LHLHϏ HD$HDH ff. H @ HA1A vH H=: AH? 1 Hff. @ AW1AAVAUATL% ULSH(dH%( HD$1*L A1L D$1AD$A A 1EDt HHtODt DuH=T AD1H DDfA AoHD$dH+%( H(D []A\A]A^A_H э H= AtD tAt D f D o @ DUff D ATISHHtBHf. I<$Ht Ht I|$Ht Ht Md$8MuHL[A\ H ATIUSLG@Mt3I8Ht" f D MD$@I<HHuLIl$0Ht6H} tgH} H}H}H]0HHHuI<$I|$I|$I\$8LHtI @ Hm0[]A\ff. AWAVAUATUSH H $ H E1L-=' EH$@ t$XEEE1HT$PDIL$\dH%( H$ 1Ƅ$ :H\$HHD$ D$ D$ ; AE,!u EtDtH M ME@AIHMuI} uMADM H5+ L{HD$H| D$ D$ D Mo Ht$P|$XE1L$ H$0 LD$dLD$d Ãu : 2 LH L$ H$H 1 H 9 9uHHL0 f. I} H# |$ $ HcD$IIJ0 AE(uA} t I} EEH8 HDŽ@ DDH D$D$@]|$ L LcD$ A} B LA@ HAxƄ :AE( I} Hct$ Ƅ< :f AE(H LD$(D$0IEHD$8IE HD$@IE HD$ ~IHF LD$(M LHD$(跿LL$(IH H|$ H LL$ 莿LL$ IAH H|$@H LL$ dLL$ IAH& HL$8IA0 IA8 HQII HAA$ CH|$ Ey,IA@ AA D$0AA(t|HD$LL$LH8f A}Lf D H|$ H H#H|$@IA H7IA 1If D |$ c HD$HLL$LL$HIA8; D$ 3 H$0 HT$ HH HH1Ƀ 2H@ t@ u I9LD$ Ll$hɿHA} # LH=V 萾~ H5J LIH HXHq1ҍpH H t u I9L= ~#H D ATJv uPHu HcA A>" f. H|$HLH HcP,H o! HH ӋS4tt A A @ H|$H Hc LH=҅ M LH9 1cH|$ t H|$QH|$HHD$H f HcD$dHL0 Mv L5 f. LL u {J HsHt]C0 ED$ H|$pH|$(D$ BH|$( E111LH|$0H|$0D$(þ|$( { CH HcH>M T$\HDL$ M H= H9 10s\$D$ 9M= HD$ HcD$ Ƅ HcD$HHDŽ0 HDŽ@ DŽH DŽ8 H ) H=i5 TH|$HHD$H H$ dH+%( Y HD$HH []A\A]A^A_访 HD$(M 1Ht$hL LL$(IA9"% HD$h G&wAH HH H@ @ H H H H= M DCHKE H9 1蛺3f D E1MtL 1E1Lc H|$HLLLMuLs(IMuA> uDCHKH=u EZ He8 1 @ H5 LtIA>1uA~ t<LH5 E1AE1PHKHU6 1詹AE1A &I9LL$LL$L H Ł ? H=2 H|$HHD$H I^" HH A~ M IH ` * H=2 誽H|$H@HD$H QM t$\HDL$ M H= H4 1訸D$\DCHKH=׀ Et H5 1oE1H5 1OH I9, IHE1MLDL$\_DCHKH=N EK H3 1.Mq|$\eDD$ ML H= HJ3 襷=H= ˾ 1H2 胷H 3 H=2 H|$ H|$FH 1 H=H1 ӻH|$HiHD$H zA" H=M LIMk H`6 1E1ѶIRHK5 1诶GH2 1藶D\$\E!DD$ LH=~ H0 dDT$\EDD$ L 1H=~ H0 /\$\H=g~ L H`0 H|$ X H|$H UHc-~ ;l$XDDd$X A)A|$Hc HHD$HHX@H? HD$PH,AD$LdHHL9H} 致HHuH } H=5 H I9/I H I9I HKH=Z} M1Hf2 H=8} Mt=LH2 1ʹeH } H=\ [CDCHKE Hm2 1聴DCHKE: IH!4 1ME1IDL$\EDL$ ML H=f| H. HF3 1LH2 1׳oDD$\EaDL$ ML H={ H. 1蟳7H|$萴 H1 1u IH { H=g3 H|$HHD$H fI:lIyLL$螲LL$I9葲H|$臲vf AWAVAUATIUSH(dH%( HD$1H 譳Hx dHH LE1 H1IH H Hű E1 H1IH g H誷 H荱 M EuGH H57 1荶HD$dH+%( & HH([]A\A]A^A_s H|$FD H- IH5 16 @ HxHHg@D9v _0AH\$TMOLBf D H0HHDh@0HD$f D H11j E1A 1H= I?ZYHH H5 HHË@ tLsLL umLݯHIM HD$dH+%( H(H H5 1[ ]A\A]A^A_ D L耯I LPLIEI| IH MH1 L5/ HL| L_ LJ L躰HD$H L1MLH L Lu}LbIHtmLHD$AV9PvLkL8H|$.f LخnLCH I L1H 肴L襮LkMH L1H O?HD$dH+%( L HD$dH+%( uH([]A\A]A^A_L藯Hx NHHtLH v . H=. !ff. UH-v H|H=v Ht;Hv H] AWAVAUATAUHSH H$P H$X L$` L$h t@)$p )$ )$ )$ )$ )$ )$ )$ dH%( H$8 1f=v t,H$8 dH+%( H []A\A]A^A_ H$0 HD$ L-nu HD$H$@ D$0 HD$ IIIt|HL$ 1ۺ D HL9sO| %uHD <l_ <s <f D$/ D$HH L9rf D J 2H A Lt$0E1LL$I HH$0 HLL$HD$H$@ D$ D$0 HD$ L$C A AR At LL虬L9-2t $ H kLw^fD$= D$HD$/wgƃD$HH>HHL$H$聬H$HL$HD$/wD$Hg HD$ Ht$HFHD$HD$k D HD$j D L-is L 1HA L H蠮IHtJLSIX @ L L-s L 1H L訪A Lt$0f AVAUATUSHtSD2HHIH;AvIHHtWHHJ 萯HHtXE,$1[]A\A]A^f 1H5* [ ]A\A]A^ H5* H5* AWAVAUAATUHSH H$P H$X L$` L$h t@)$p )$ )$ )$ )$ )$ )$ )$ dH%( H$8 1AEw5H$8 dH+%( H 1[]A\A]A^A_f. H$0 HD$ HD$H$@ D$0 HD$ 让IIItzHT$ 1A HI9vO| %uHD <l <sG <f D$/ D$HI I9wf D MI A L|$0E1ILL$ LH$0 HLD$ HD$H$@ H-wp D$0 HD$ 腧A HH=Ip Ht+AJ A` HL-H= p AtLH5 D1WH_MAL4f D$= vuHD$If D D$/ HL$HAHD$H9HiHT$HT$IRfD$/w7D$I7 D$ HD$Z D HD$ D$Hz L0IHtPI\$IF LH 1R D LH 12x A L|$0 Hw+H| HcH>f~ H =n u_H=n Ht莥1H5 11跧 fd~ H m u -K~ HfH=9n f 1 ff. f H5 @t u 1\ @ 11O 1<ff. t H5C 1 ff. f AVAUATUSH dH%( H$ 1D$ HY HHM HHH5% 1 H5+& 1 S 1H5V& yH11H5 fuPH5 11E1M/l H$ dH+%( H D[]A\A]A^f H|$= k ާAă |$ L$ H 7 B|$H5 袢Ƅ$ D$ H HL0uH L HuH\$L5w f HL 1NH HޤHuHHl$1HD详u%8t L=H5$ t0|$ IL H? H HDH5b% 1T$AA $ 0H5Y% 1} H5y# 1A WH5 1D |$诡|$ 覡18躤H5S$ H¿ 1sH Dž* H5# A H1rf ˥8TH5 H A@<~(D¿ 1A H5$ | H5 1A WfH5 H15+;|$袠|$ dtsH͢8董H5R# H1f AUIATIHdH%( HD$1tv <y 3莤 Lե 1E D HD$dH+%( HHH5# 1A\ A]>f D HT$H5 LT LctnHD$dH+%( HA\A]Ð}x 8tHHD$dH+%( u_HLH5 1A\ A] LLH5 11w D LLH5 1 gmL$ L1H55 C|$ f. AWAVAUATUSH H$ $LD$8HD$H$ DL$@HD$0H$( HD$H$8 HD$(H$@ HD$ dH%( H$ 1D$\ HD$h HD$` M IAIHtuM $ Hl$pH踠H萢H5!" 1H1MD$ E D$ 1H|$Ht$hHT$`H$ L=f 菡HLğ M E HLDLT$dARLT$ t$0$( PL$ D$ L$`HT$XٟH LT$A D$\D$Mt D $E DT$E? H|$(E1H9 HE1A 1j 1/AXAYIH HH5 x IŅ H$ 1 H|$ k H1fO H$ f$ Iu1Ҿ 諝Aą Ht$ n ? $ A L-Ҿ H\$(LEM1HLD՜IŅ HID),$$ @ $A<H蠟HH DE1Et)f K<ךJD H IL9u $Dt$ E1 Ld$HH IL9tgOd LjHvI|H5t 胞uϾ/ L2L`L6LHpzD$ IC>ILD L9uLd$Ht$ Hf. D$$Et M D$ E1Ht7D$ t'ILl I>ILIF M9uH7HL蜜t =`c : E D$tHD$0H{ H|$Ll$`HttMtoH5F 苛HHU AE H > u f. AEI HtHuH5x! .f D H|$hHtiH|$`HtZH$ dH+%( q H D[]A\A]A^A_H5g 1A eL=Nb H$ Lnt=2b tD$ @ L D$ LT$\HT$ 4$LL耚Aą H5 1L$\L$: D $0 HH=Ż Jj D LӘ LH5 1A8DH5 11A D$ 軜8Et &H\$(E.H5 H1xLt$ f1ɺ D)$ DŽ$ L~H5ۺ L7H D覗H5/ 11E1f D H5o LP f )$ L$ L< )$ L)$ DH1DŽ$ DŽ$ Ld$ 軜H5 LƄ$ $IH Lt$(HD$xH$ L|$@H,$HH\$8HI}HHL谛 XIIMHu HY H5 HHD1Mm0MuH,$Lt$(H\$8L|$@LH5 H1{H|$DLH9H| IH Ht$HHH)H荕A LLMHuLA$0 LH= [LsL|$xMP AW AwAAƅ AWIw腖- ELt$(H,$H\$8L|$@LH|$x蔗H5 H1D$ bH5 A HL$(H H5 1 A DLLH$ HD$ $0 Ht$H=з B8街IM HG IH, H5( HHD1M(ML|$xL蘖Mm0躘8CIMMH IHж H5 HHD1qDr8I>H\$(EHT$ H5 0D訓 H5\ A H$ D$ L=\ 8脖IU H5 H1DBL8IIU H51 H1Ll荓HL$(Hǵ H5 1 ^CH5 1FH5* 1A (^ ATIUHS1H pHHZ {MtsL轑 {轗u{著a []A\ @ KH=Z H 1 SS 1H5 }[ ]A\ HH56 1ZH 1H=YZ H: [ ]A\ H 9Z H= 胖H5 1 [ ]A\f D H H=Y H 1 蓑L 1H=Y H v8HGH=Y H H1J} "HL IH5 1f @ KH=^Y Hv 1 S 1H5` % bff. ATIUHHڐHttH1]A\ HLH]A\ff. AUIATUHH dH%( H$ 1肔Aąt3u6H$ dH+%( Hİ D]A\A] #ːLd$1 LHH|$L1ҿ HcHD$ْAąuBMtuHLu1H|$ 諎D$ Y|$ 裑 H= A3ď @ AWL= AVIAUIATUHSHHXdH%( HD$HHԲ H H HL$HD$Hݸ HD$ H HD$0H HD$8H HD$@HD$(HD$LHLH $JH $A HH;L$tL9HD$HHL$0HD$L9LHH $LH $A HH;L$uH5 1HD$HdH+%( HXD[]A\A]A^A_LH5 1^H;HtAu 譹H AE H} HtA6荹HE A LH5 1ff. @ AWAVAUATUSHH H HIH G uRE1 @ Du I<$AvIHHtpI$LN4蓒IH H[0Dm HtL{MuH5 1A H5 1HD[]A\A]A^A_H5 A H5C 1A H5 A xf D AVAUATUSH H ?dHIItBH5 H蛍H H蚑HH I $1[]A\A]A^ bu.uH5v PHtH= OHHuH5 1$ D 1H5 [ ]A\A]A^ L蘌HH荌LtL@HHtUH HMULG L1HАXZf H5 1} H5t 1` HH ERROR: optaddarg: Unregistered option %s ERROR: optaddarg: strdup() failed ERROR: optaddarg: malloc() failed %s: option requires an argument -- %c %s: option `--%s' doesn't allow an argument %s: option `--%s' requires an argument ERROR: This tool requires libclamav with functionality level %u or higher (current f-level: %u) ERROR: optparse: Can't register new option (not enough memory) ERROR: optparse: longopts[] is too small ERROR: optparse: shortopts[] is too small ERROR: optparse: (short|long)opts[] is too small ERROR: Please edit the example config file %s ERROR: Missing argument for option at %s:%d ERROR: Missing closing parenthesis in option %s at %s:%d ERROR: Empty argument for option %s at %s:%d ERROR: Incomplete option passed (missing argument) ERROR: optparse: No corresponding long name for option '-%c' ERROR: Parse error at %s:%d: Unknown option %s WARNING: Ignoring unsupported option %s at %s:%d WARNING: Ignoring unsupported option --%s (-%c) WARNING: Ignoring unsupported option --%s ERROR: Can't register argument for option %s ERROR: Can't register argument for option --%s WARNING: Ignoring deprecated option %s at %s:%d WARNING: Ignoring deprecated option --%s (-%c) WARNING: Ignoring deprecated option --%s ERROR: optparse: Can't compile regular expression %s for option %s ERROR: Incorrect argument format for option %s ERROR: Incorrect argument format for option --%s (-%c) ERROR: Incorrect argument format for option --%s ERROR: Option --%s (-%c) requires a non-empty string argument ERROR: Option --%s requires a non-empty string argument ERROR: Can't parse numerical argument for option %s ERROR: Can't parse numerical argument for option --%s (-%c) ERROR: Can't parse numerical argument for option --%s WARNING: Numerical value for option %s too high, resetting to %lld WARNING: Numerical value for option --%s (-%c) too high, resetting to %lld ERROR: optparse: calloc failed ERROR: optparse: strdup failed Unable to allocate memory for db directory... string_list_add: Invalid arguments. string_list_add: Failed to allocate memory for optional database list entry. string_list_add: Failed to allocate memory for optional database list item. Invalid arguments to download_complete_callback. download_complete_callback: Download complete for database : %s download_complete_callback: fc_context->bTestDatabases : %u download_complete_callback: fc_context->bBytecodeEnabled : %u Database load exited with "%s" fork() to test database failed: %s dup2() call to redirect stderr to pipe failed: %s Stderr output from database load : %s%s%s Database successfully loaded, but there is stderr output Database load killed by signal %d %s: already %d processes active. perform_database_update: Invalid arguments. perform_database_update: No databases requested. ClamAV update process started at %s perform_database_update: Can't allocate memory for doNotPruneDatabaseList perform_database_update: Can't allocate memory for database name in doNotPruneDatabaseList Can't create temporary directory %s Hint: The database directory must be writable for UID %d or GID %d Database update process failed: %s Database update completed successfully. %s: Can't find or parse configuration file %s Clamd was NOT notified: Can't create socket endpoint for %s: %s Clamd was NOT notified: Can't connect to clamd through %s: %s %s: Can't resolve hostname %s (%s) %s: Can't create TCP socket to connect to %s: %s %s: Can't connect to clamd on %s:%s: %s %s: No communication socket specified in %s NotifyClamd: Unknown answer from clamd: '%s' Clamd successfully notified about the update. executeIfNewVersion: OnOutdatedExecute: Incorrect version number string executeIfNewVersion: Can't allocate memory for modifiedCommand Can't get information about user %s. ERROR: Can't get information about user %s. ERROR: lchown to user '%s' failed on lchown to user '%s' failed on log file '%s'. Error was '%s' Failed to add %s to list of standard databases. Failed to add %s to list of optional databases. Collected lists of official standard and optional databases. get_string_list: Invalid arguments. get_string_list: Failed to add string to list. get_server_node: Invalid args! get_server_node: Failed to duplicate string for database.clamav.net url. get_server_node: Failed to allocate memory for server url. get_server_node: Failed to duplicate string for server url. Can't parse command line options Clam AntiVirus: Database Updater %s By The ClamAV Team: https://www.clamav.net/about.html#credits (C) 2024 Cisco Systems, Inc. --help -h Show this help --version -V Print version number and exit --verbose -v Be verbose --debug Enable debug messages --quiet Only output error messages --no-warnings Don't print and log warnings --stdout Write to stdout instead of stderr. Does not affect 'debug' messages. --show-progress Show download progress percentage --config-file=FILE Read configuration from FILE. --log=FILE -l FILE Log into FILE --daemon -d Run in daemon mode --pid=FILE -p FILE Write the daemon's pid to FILE --foreground -F Don't fork into background (for use in daemon mode). --user=USER -u USER Run as USER --no-dns Force old non-DNS verification method --checks=#n -c #n Number of checks per day, 1 <= n <= 50 --datadir=DIRECTORY Download new databases into DIRECTORY NOTE: DIRECTORY must already exist, be an absolute path, and be writeable by freshclam and readable by clamd/clamscan. --daemon-notify[=/path/clamd.conf] Send RELOAD command to clamd --local-address=IP -a IP Bind to IP for HTTP downloads --on-update-execute=COMMAND Execute COMMAND after successful update. Use EXIT_1 to return 1 after successful database update. --on-error-execute=COMMAND Execute COMMAND if errors occurred --on-outdated-execute=COMMAND Execute COMMAND when software is outdated --update-db=DBNAME Only update database DBNAME CURL_CA_BUNDLE May be set to the path of a file (bundle) containing one or more CA certificates. This will override the default openssl certificate path. FRESHCLAM_CLIENT_CERT May be set to the path of a file (PEM) containing the client certificate. This may be used for client authentication to a private mirror. FRESHCLAM_CLIENT_KEY May be set to the path of a file (PEM) containing the client private key. This is required if FRESHCLAM_CLIENT_CERT is set. FRESHCLAM_CLIENT_KEY_PASSWD May be set to a password for the client key PEM file. This is required if FRESHCLAM_CLIENT_KEY is set and the PEM file is password protected. ERROR: Can't open/parse the config file %s Deprecated option --list-mirrors. Individual mirrors are no longer tracked, as official signature distribution is now done through the CloudFlare CDN. The PrivateMirror config option may not include servers under *.clamav.net. get_database_server_list: Failed to read PrivateMirror server %s get_database_server_list: Failed to add string to list. No DatabaseMirror or PrivateMirror servers set in freshclam config file. get_database_server_list: Failed to parse DatabaseMirror server %s. Error when attempting to read ExtraDatabase entries. select_from_official_databases: Invalid arguments. Failed to get lists of official standard and optional databases. Failed to add standard database %s to list of selected databases. Failed to add optional database %s to list of selected databases. Requested database is not available: %s. Failed to select specific databases from available official databases. Error when attempting to read ExcludeDatabase entries. --update-db=custom requires at least one DatabaseCustomURL in freshclam.conf Failed to add bytecode to list of opt-out databases. select_from_official_databases: Invalid arguments. Number of opt-in databases does not match empty database array. select_from_official_databases: Invalid arguments. Number of opt-out databases does not match empty database array. Opting out of standard database: %s Selecting standard database: %s Desired optional database "%s" is not available. Selecting optional database: %s Failed to select databases from list of official databases. Creating missing database directory: %s Failed to create database directory: %s Manually prepare the database directory, or re-run freshclam with higher privileges. ERROR: Failed to get information about user "%s". Create the "%s" user account for freshclam to use, or set the DatabaseOwner config option in freshclam.conf to a different user. For more information, see https://docs.clamav.net/manual/Installing/Installing-from-source-Unix.html An unexpected error occurred when attempting to query the "%s" user account. Failed to change database directory ownership to user %s. Error: %s Assigned ownership of database directory to user "%s". initialize: Can't initialize libclamav: %s Can't stat %s (critical error) Insecure permissions (for HTTPProxyPassword): %s must have no more than 0700 permissions. HTTPProxyUsername requires HTTPProxyPassword In an effort to reduce CDN data costs, HTTPUserAgent may not be used when updating from clamav.net. The HTTPUserAgent specified in your config will be ignored so that FreshClam is not blocked by the CDN. If ClamAV's user agent is not allowed through your firewall/proxy, please contact your network administrator. initialize: libfreshclam init failed. Number of checks must be a positive integer. Number of checks must be between 1 and 50. Can't save PID to file %s: %s Can't change ownership of PID file %s '%s' ERROR: lchown to user '%s' failed on freshclam.dat lchown to user '%s' failed on freshclam.dat. Error was '%s' freshclam daemon %s (OS: Linux, ARCH: x86_64, CPU: x86_64) FreshClam was forbidden from downloading a database. This is fatal. Retrying later won't help. Exiting now. -------------------------------------- Received signal: re-opening log file Unable to find DatabaseMirror or PrivateMirror option(s) that specify database server FQDNs. /etc/clamav/clamav-milter.conf Dump authenticode certificate chain. Perform HTML, script, and text normalization Always generate MDB entries for PE sections Maximum number of mismatched signatures when building a CVD. Zero disables this limit. Feature level to put in the CVD Version number of the CVD to build Create a hybrid (standard and bytecode) database file Force using the interpreter instead of the JIT Trust loaded bytecode (default yes) Load and print bytecode information without executing Print IR of bytecode signature Input file to run the bytecode n Don't show source line during tracing Number of entries the cache can store. Name of the analyzer as seen in prewikka Save all reports to a log file. By default the log file is locked for writing and only a single daemon process can write to it. This option disables the lock. Maximum size of the log file. Value of 0 disables the limit. Log all clean files. Useful in debugging but drastically increases the log size. Use the system logger (can work together with LogFile). Type of syslog messages. Please refer to 'man syslog' for the facility names. Rotate log file. Requires LogFileMaxSize option set prior to this option. Log additional information about the infected file, such as its size and hash, together with the virus name. Save the process ID to a file. This option allows you to change the default temporary directory. This option allows you to change the default database directory. If you enable it, please make sure it points to the same directory in both clamd and freshclam. Only load the official signatures published by the ClamAV project. Return with a nonzero error code if the virus database is older than the specified number of days. By default, yara rules will be loaded. This option allows you to exclude yara rules when scanning and also to scan only using yara rules. Valid options are yes|no|only Path to a local socket file the daemon will listen on. Sets the group ownership on the unix socket. Sets the permissions on the unix socket to the specified mode. Remove a stale socket after unclean shutdown A TCP port number the daemon will listen on. By default clamd binds to INADDR_ANY. This option allows you to restrict the TCP address and provide some degree of protection from the outside world. Maximum length the queue of pending connections may grow to. Close the STREAM session when the data size limit is exceeded. The value should match your MTA's limit for the maximum attachment size. The STREAM command uses an FTP-like protocol. This option sets the lower boundary for the port range. This option sets the upper boundary for the port range. Maximum number of threads running at the same time. This option specifies the time (in seconds) after which clamd should timeout if a client doesn't provide any data. This option specifies the time (in seconds) after which clamd should timeout if a client doesn't provide any initial command after connecting. This option specifies how long to wait (in milliseconds) if the send buffer is full. Keep this value low to prevent clamd hanging. Waiting for data from clamd will timeout after this time (seconds). Maximum number of queued items (including those being processed by MaxThreads threads). It is recommended to have this value at least twice MaxThreads if possible. WARNING: you shouldn't increase this too much to avoid running out of file descriptors, the following condition should hold: MaxThreads*MaxRecursion + MaxQueue - MaxThreads + 6 < RLIMIT_NOFILE (usual max for RLIMIT_NOFILE is 1024) This option specifies how long (in seconds) the process should wait for a new job. Don't scan files/directories whose names match the provided regular expression. This option can be specified multiple times. Maximum depth the directories are scanned at. Follow symlinks to regular files. Scan files and directories on other filesystems. This option specifies the time intervals (in seconds) in which clamd should perform a database check. Enable non-blocking (multi-threaded/concurrent) database reloads. This feature will temporarily load a second scanning engine while scanning continues using the first engine. Once loaded, the new engine takes over. The old engine is removed as soon as all scans using the old engine have completed. This feature requires more RAM, so this option is provided in case users are willing to block scans during reload in exchange for lower RAM requirements. This option allows you to disable clamd's caching feature. Execute a command when virus is found. Use the following environment variables to identify the file and virus names: - $CLAM_VIRUSEVENT_FILENAME - $CLAM_VIRUSEVENT_VIRUSNAME In the command string, '%v' will also be replaced with the virus name. Note: The '%f' filename format character has been disabled and will no longer be replaced with the file name, due to command injection security concerns. Use the 'CLAM_VIRUSEVENT_FILENAME' environment variable instead. For the same reason, you should NOT use the environment variables in the command directly, but should use it carefully from your executed script. Stop the daemon when libclamav reports an out of memory condition. Permit use of the ALLMATCHSCAN command. Enable debug messages in libclamav. Don't remove temporary files (for debugging purposes). Record metadata about the file being scanned. Scan metadata is useful for file analysis purposes and for debugging scan behavior. The JSON metadata will be printed after the scan is complete if Debug is enabled. A metadata.json file will be written to the scan temp directory if LeaveTemporaryFiles is enabled. Run the daemon as a specified user (the process must be started by root). With this option enabled ClamAV will load bytecode from the database. It is highly recommended you keep this option on, otherwise you'll miss detections for many new viruses. Set bytecode security level. Possible values: TrustSigned - trust bytecode loaded from signed .c[lv]d files, insert runtime safety checks for bytecode loaded from other sources Paranoid - don't trust any bytecode, insert runtime checks for all Recommended: TrustSigned, because bytecode in .cvd files already has these checks. Set bytecode timeout in milliseconds. Allow loading bytecode from outside digitally signed .c[lv]d files. ^(Auto|ForceJIT|ForceInterpreter|Test)$ Set bytecode execution mode. Possible values: Auto - automatically choose JIT if possible, fallback to interpreter ForceJIT - always choose JIT, fail if not possible ForceInterpreter - always choose interpreter Test - run with both JIT and interpreter and compare results. Make all failures fatal. ^(none|None|bytecode|Bytecode|pcre|PCRE)$ Collect and print execution statistics. Possible values: Bytecode - reports bytecode statistics PCRE - reports PCRE execution statistics None - reports no statistics Detect Potentially Unwanted Applications. Exclude a specific PUA category. This directive can be used multiple times. See https://docs.clamav.net/faq/faq-pua.html for the complete list of PUA categories. Only include a specific PUA category. This directive can be used multiple times. PE stands for Portable Executable - it's an executable file format used in all 32- and 64-bit versions of Windows operating systems. This option allows ClamAV to perform a deeper analysis of executable files and it's also required for decompression of popular executable packers such as UPX or FSG. If you turn off this option, the original files will still be scanned, but without additional processing. Executable and Linking Format is a standard format for UN*X executables. This option allows you to control the scanning of ELF files. If you turn off this option, the original files will still be scanned, but without additional processing. Enable the built in email scanner. If you turn off this option, the original files will still be scanned, but without parsing individual messages/attachments. Scan RFC1341 messages split over many emails. You will need to periodically clean up $TemporaryDirectory/clamav-partial directory. WARNING: This option may open your system to a DoS attack. Please don't use this feature on highly loaded servers. With this option enabled ClamAV will try to detect phishing attempts by using signatures. Scan URLs found in mails for phishing attempts using heuristics. In some cases (eg. complex malware, exploits in graphic files, and others), ClamAV uses special algorithms to provide accurate detection. This option controls the algorithmic detection. Allow heuristic match to take precedence. When enabled, if a heuristic scan (such as phishingScan) detects a possible virus/phish it will stop scan immediately. Recommended, saves CPU scan-time. When disabled, virus/phish detected by heuristic scans will be reported only at the end of a scan. If an archive contains both a heuristically detected virus/phish, and a real malware, the real malware will be reported. Keep this disabled if you intend to handle "Heuristics.*" viruses differently from "real" malware. If a non-heuristically-detected virus (signature-based) is found first, the scan is interrupted immediately, regardless of this config option. Enable the Data Loss Prevention module. This option sets the lowest number of Credit Card numbers found in a file to generate a detect. This option sets the lowest number of Social Security Numbers found in a file to generate a detect. With this option enabled the DLP module will search for valid SSNs formatted as xxx-yy-zzzz. With this option enabled the DLP module will search for valid SSNs formatted as xxxyyzzzz Perform HTML/JavaScript/ScriptEncoder normalisation and decryption. If you turn off this option, the original files will still be scanned, but without additional processing. This option enables scanning of OLE2 files, such as Microsoft Office documents and .msi files. If you turn off this option, the original files will still be scanned, but without additional processing. With this option enabled clamav will try to detect broken executables (PE, ELF, & Mach-O) and alert on them with a Broken.Executable heuristic signature. With this option enabled clamav will try to detect broken media files (JPEG, TIFF, PNG, GIF) and alert on them with a Broken.Media heuristic signature. Alert on encrypted archives and documents (encrypted .zip, .7zip, .rar, .pdf). With this option enabled the DLP module will search for valid Credit Card numbers only. Debit and Private Label cards will not be searched. Alert on encrypted archives (encrypted .zip, .7zip, .rar). Alert on encrypted documents (encrypted .pdf). With this option enabled OLE2 files with VBA macros, which were not detected by signatures will be marked as "Heuristics.OLE2.ContainsMacros". Alert on SSL mismatches in URLs, even if they're not in the database. This feature can lead to false positives. Alert on cloaked URLs, even if they're not in the database. This feature can lead to false positives. Alert on raw DMG image files containing partition intersections. This option enables scanning within PDF files. If you turn off this option, the original files will still be scanned, but without decoding and additional processing. This option enables scanning within SWF files. If you turn off this option, the original files will still be scanned, but without decoding and additional processing. This option enables scanning xml-based document files supported by libclamav. If you turn off this option, the original files will still be scanned, but without additional processing. This option enables scanning HWP3 files. If you turn off this option, the original files will still be scanned, but without additional processing. This option enables scanning OneNote files. If you turn off this option, the original files will still be scanned, but without additional processing. Scan within archives and compressed files. If you turn off this option, the original files will still be scanned, but without unpacking and additional processing. This option enables scanning of image (graphics). If you turn off this option, the original files will still be scanned, but without additional processing. This option enables detection by calculating a fuzzy hash of image (graphics) files Signatures using image fuzzy hashes typically match files and documents by identifying images embedded or attached to those files. If you turn off this option, then some files may no longer be detected. This option causes memory or nested map scans to dump the content to disk. If you turn on this option, more data is written to disk and is available when the leave-temps option is enabled at the cost of more disk writes. This option sets the maximum amount of time a scan may take to complete. The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result allow scanning of certain files to lock up the scanning process/threads resulting in a Denial of Service. The value is in milliseconds. This option sets the maximum amount of data to be scanned for each input file. Archives and other containers are recursively extracted and scanned up to this value. The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result in severe damage. Files/messages larger than this limit won't be scanned. Affects the input file itself as well as files contained inside it (when the input file is an archive, a document or some other kind of container). The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result in severe damage to the system. Nested archives are scanned recursively, e.g. if a Zip archive contains a RAR file, all files within it will also be scanned. This option specifies how deeply the process should be continued. The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result in severe damage to the system. Number of files to be scanned within an archive, a document, or any other container file. The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result in severe damage to the system. This option sets the maximum size of a file to check for embedded PE. Files larger than this value will skip the additional analysis step. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum size of a HTML file to normalize. HTML files larger than this value will not be normalized or scanned. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum size of a normalized HTML file to scan. HTML files larger than this value after normalization will not be scanned. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum size of a script file to normalize. Script content larger than this value will not be normalized or scanned. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum size of a ZIP file to reanalyze type recognition. ZIP files larger than this value will skip the step to potentially reanalyze as PE. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum number of partitions of a raw disk image to be scanned. Raw disk images with more partitions than this value will have up to the value number partitions scanned. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum number of icons within a PE to be scanned. PE files with more icons than this value will have up to the value number icons scanned. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum recursive calls to HWP3 parsing function. HWP3 files using more than this limit will be terminated and alert the user. Scans will be unable to scan any HWP3 attachments if the recursive limit is reached. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum calls to the PCRE match function during an instance of regex matching. Instances using more than this limit will be terminated and alert the user but the scan will continue. For more information on match_limit, see the PCRE documentation. Negative values are not allowed. WARNING: setting this limit too high may severely impact performance. This option sets the maximum recursive calls to the PCRE match function during an instance of regex matching. Instances using more than this limit will be terminated and alert the user but the scan will continue. For more information on match_limit_recursion, see the PCRE documentation. Negative values are not allowed and values > PCREMatchLimit are superfluous. WARNING: setting this limit too high may severely impact performance. This option sets the maximum filesize for which PCRE subsigs will be executed. Files exceeding this limit will not have PCRE subsigs executed unless a subsig is encompassed to a smaller buffer. Negative values are not allowed. Setting this value to zero disables the limit. WARNING: setting this limit too high or disabling it may severely impact performance. This option specifies a directory or mount point which should be scanned on access. The mount point specified, or the mount point containing the specified directory will be watched, but only notifications will occur. If any directories are specified, this option will preempt the DDD system. It can also be used multiple times. This option specifies a directory (including all files and directories inside it), which should be scanned on access. This option can be used multiple times. This option allows excluding directories from on-access scanning. It can be used multiple times. Only works with DDD system. Use this option to exclude the root UID (0) and allow any processes run under root to access all watched files without triggering scans. With this option you can exclude specific UIDs. Processes with these UIDs will be able to access all files. This option can be used multiple times (one per line). Using a value of 0 on any line will disable this option entirely. To exclude the root UID please enable the OnAccessExcludeRootUID option. This option allows exclusions via user names when using the on-access scanning client. It can be used multiple times. Files larger than this value will not be scanned in on access. This option toggles the dynamic directory determination system for on-access scanning (Linux only). This option changes fanotify behavior to prevent access attempts on malicious files instead of simply notifying the user (On Access scan only). Enables extra scanning and notification after catching certain inotify events. Only works with the DDD system enabled. Max amount of time (in milliseconds) that the OnAccess client should spend for every connect, send, and receive attempt when communicating with clamd via curl (5s default) Max number of scanning threads to allocate to the OnAccess thread pool at startup--these threads are the ones responsible for creating a connection with the daemon and kicking off scanning after an event has been processed. To prevent clamonacc from consuming all clamd's resources keep this lower than clamd's max threads. Default is 5 Number of times the OnAccess client will retry a failed scan due to connection problems (or other issues). Defaults to no retries. When using prevention, if this option is turned on, any errors that occur during scanning will result in the event attempt being denied. This could potentially lead to unwanted system behaviour with certain configurations, so the client defaults to off and allowing access events in case of error. When started by root freshclam will drop privileges and switch to the user defined in this option. This option defined how many times daily freshclam should check for a database update. Use DNS to verify the virus database version. FreshClam uses DNS TXT records to verify the versions of the database and software itself. With this directive you can change the database verification domain. WARNING: Please don't change it unless you're configuring freshclam to use your own database verification domain. DatabaseMirror specifies to which mirror(s) freshclam should connect. You should have at least one entry: database.clamav.net. This option allows you to easily point freshclam to private mirrors. If PrivateMirror is set, freshclam does not attempt to use DNS to determine whether its databases are out-of-date, instead it will use the If-Modified-Since request or directly check the headers of the remote database files. For each database, freshclam first attempts to download the CLD file. If that fails, it tries to download the CVD file. This option overrides DatabaseMirror, DNSDatabaseInfo and Scripted Updates. It can be used multiple times to provide fall-back mirrors. mirror1.mynetwork.com mirror2.mynetwork.com This option defines how many attempts freshclam should make before giving up. With this option you can control scripted updates. It's highly recommended to keep them enabled. With this option enabled, freshclam will attempt to load new databases into memory to make sure they are properly handled by libclamav before replacing the old ones. Tip: This feature uses a lot of RAM. If your system has limited RAM and you are actively running ClamD or ClamScan during the update, then you may need to set `TestDatabases no`. By default freshclam will keep the local databases (.cld) uncompressed to make their handling faster. With this option you can enable the compression. The change will take effect with the next database update. Include an optional signature databases (opt-in). This option can be used multiple times. Exclude a standard signature database (opt-out). This option can be used multiple times. With this option you can provide custom sources (http:// or file://) for database files. This option can be used multiple times. http://myserver.com/mysigs.ndb file:///mnt/nfs/local.hdb If you're behind a proxy, please enter its address here. A user name for the HTTP proxy authentication. A password for the HTTP proxy authentication. If your servers are behind a firewall/proxy which does a User-Agent filtering you can use this option to force the use of a different User-Agent header. Send the RELOAD command to clamd after a successful update. Run a command after a successful database update. Use EXIT_1 to return 1 after successful database update. Run a command when a database update error occurs. Run a command when freshclam reports an outdated version. In the command string %v will be replaced with the new version number. With this option you can provide a client address for the database downloading. Useful for multi-homed systems. Timeout in seconds when connecting to database server. Timeout in seconds when reading from database server. 0 means no timeout. This option enables downloading of bytecode.cvd, which includes additional detection mechanisms and improvements to the ClamAV engine. Disable authenticode certificate chain verification in PE files. Deprecated option to download signatures derived from the Google Safe Browsing API. See https://blog.clamav.net/2020/06/the-future-of-clamav-safebrowsing.html for more details. Deprecated option to set the max-scantime. The value is in milliseconds. Deprecated option to alert on broken PE and ELF executable files. Deprecated option to enable heuristic alerts (e.g. "Heuristics.<sig name>") PhishingAlwaysBlockSSLMismatch Deprecated option to alert on SSL mismatches in URLs, even if they're not in the database. This feature can lead to false positives. Deprecated option to alert on cloaked URLs, even if they're not in the database. This feature can lead to false positives. Deprecated option to alert on raw DMG image files containing partition intersections. Deprecated option to alert on encrypted archives and documents (encrypted .zip, .7zip, .rar, .pdf). Initialize a supplementary group access (the process must be started by root). Define the clamd socket to connect to for scanning. This option is mandatory! Syntax: ClamdSocket unix:path ClamdSocket tcp:host:port The first syntax specifies a local unix socket (needs an absolute path) e.g.: ClamdSocket unix:/run/clamav/clamd.sock The second syntax specifies a tcp local or remote tcp socket: the host can be a hostname or an ip address; the ":port" field is only required for IPv6 addresses, otherwise it defaults to 3310 ClamdSocket tcp:192.168.0.1 This option can be repeated several times with different sockets or even with the same socket: clamd servers will be selected in a round-robin fashion. Define the interface through which we communicate with sendmail. This option is mandatory! Possible formats are: [[unix|local]:]/path/to/file - to specify a unix domain socket; inet:port@[hostname|ip-address] - to specify an ipv4 socket; inet6:port@[hostname|ip-address] - to specify an ipv6 socket. /tmp/clamav-milter.sock inet:7357 Define the group ownership for the (unix) milter socket. Sets the permissions on the (unix) milter socket to the specified mode. Messages originating from these hosts/networks will not be scanned This option takes a host(name)/mask pair in CIRD notation and can be repeated several times. If "/mask" is omitted, a host is assumed. To specify a locally originated, non-smtp, email use the keyword "local". local 192.168.0.0/24 1111:2222:3333::/48 ^(Accept|Reject|Defer|Blackhole|Quarantine)$ Action to be performed on clean messages (mostly useful for testing). The following actions are available: Accept: the message is accepted for delivery Reject: immediately refuse delivery (a 5xx error is returned to the peer) Defer: return a temporary failure message (4xx) to the peer Blackhole: like Accept but the message is sent to oblivion Quarantine: like Accept but message is quarantined instead of being delivered Action to be performed on error conditions (this includes failure to allocate data structures, no scanners available, network timeouts, unknown scanner replies and the like. The following actions are available: Accept: the message is accepted for delivery; Reject: immediately refuse delivery (a 5xx error is returned to the peer); Defer: return a temporary failure message (4xx) to the peer. This option allows you to set a specific rejection reason for infected messages and it's therefore only useful together with "OnInfected Reject" The string "%v", if present, will be replaced with the virus name. If this option is set to "Replace" (or "Yes"), an "X-Virus-Scanned" and an "X-Virus-Status" headers will be attached to each processed message, possibly replacing existing headers. If it is set to Add, the X-Virus headers are added possibly on top of the existing ones. Note that while "Replace" can potentially break DKIM signatures, "Add" may confuse procmail and similar filters. When AddHeader is in use, this option allows you to set the reported hostname. This may be desirable in order to avoid leaking internal names. If unset the real machine name is used. Execute a command when an infected message is processed. The following parameters are passed to the invoked program in this order: virus name, queue id, sender, destination, subject, message id, message date. Note #1: this requires MTA macroes to be available (see LogInfected below) Note #2: the process is invoked in the context of clamav-milter Note #3: clamav-milter will wait for the process to exit. Be quick or fork to avoid unnecessary delays in email delivery /usr/local/bin/my_infected_message_handler Chroot to the specified directory. Chrooting is performed just after reading the config file and before dropping privileges. This option specifies a file which contains a list of basic POSIX regular expressions. Addresses (sent to or from - see below) matching these regexes will not be scanned. Optionally each line can start with the string "From:" or "To:" (note: no whitespace after the colon) indicating if it is, respectively, the sender or recipient that is to be allowed. If the field is missing, "To:" is assumed. Lines starting with #, : or ! are ignored. Messages from authenticated SMTP users matching this extended POSIX regular expression (egrep-like) will not be scanned. As an alternative, a file containing a plain (not regex) list of names (one per line) can be specified using the prefix "file:". e.g. SkipAuthenticated file:/etc/good_guys Note: this is the AUTH login name! SkipAuthenticated ^(tom|dick|henry)$ This option allows you to tune what is logged when a message is infected. Possible values are Off (the default - nothing is logged), Basic (minimal info logged), Full (verbose info logged) Note: For this to work properly in sendmail, make sure the msg_id, mail_addr, rcpt_addr and i macroes are available in eom. In other words add a line like: Milter.macros.eom={msg_id}, {mail_addr}, {rcpt_addr}, i to your .cf file. Alternatively use the macro: define(`confMILTER_MACROS_EOM', `{msg_id}, {mail_addr}, {rcpt_addr}, i') Postfix should be working fine with the default settings. This option allows you to tune what is logged when no threat is found in a scanned message. See LogInfected for possible values and caveats. Useful in debugging but drastically increases the log size. This option affects the behaviour of LogInfected, LogClean and VirusAction when a message with multiple recipients is scanned: If SupportMultipleRecipients is off (the default) then one single log entry is generated for the message and, in case the message is determined to be malicious, the command indicated by VirusAction is executed just once. In both cases only the last recipient is reported. If SupportMultipleRecipients is on: then one line is logged for each recipient and the command indicated by VirusAction is also executed once for each recipient. Note: although it's probably a good idea to enable this option, the default value is currently set to off for legacy reasons. POSIXLY_CORRECT %s: illegal option -- %c %s: unrecognized option `%s' %s: option `%s' is ambiguous 1.4.3 /dev/null Can't open /dev/null dup2(%d, %d) failed Example ERROR: Unknown option passed foo yes true /etc/clamav/freshclam.conf DatabaseDirectory %s/daily.cvd %s/daily.cld ClamAV %s ClamAV %s/%u/%s ERROR: %s WARNING: %s Update process terminated [LibClamAV] %s [...] Testing database: '%s' ... pipe() failed: %s LibClamAV Warning: waitpid() failed: %s Unknown status from wait: %d Database test passed. Database test FAILED. EXIT_%d %s: EXIT_%d %s: system(%s) failed %s: couldn't execute "%s". %s::fork() failed, %s. localhost RELOAD NotifyClamd LocalSocket TCPSocket %u TCPAddr Can't send to clamd: %s RELOADING OnUpdateExecute %v OnOutdatedExecute 0123456789. ERROR: initgroups() failed. log file '%s'. Error was '%s' ERROR: setgid(%d) failed. ERROR: setuid(%d) failed. sigaction daily main safebrowsing test valhalla https://database.clamav.net %s://%s help freshclam [options] Environment Variables: --foreground config-file list-mirrors PrivateMirror http DatabaseMirror https update-db custom DatabaseCustomURL ExtraDatabase ExcludeDatabase Bytecode TestDatabases Foreground DatabaseOwner daemon Failed to switch to %s user. Debug debug LogVerbose quiet no-warnings stdout show-progress LogTime LogFileMaxSize LogRotate LogSyslog UpdateLogFile LogFacility LocalIPAddress HTTPProxyPassword HTTPProxyServer http:// HTTPProxyUsername HTTPProxyPort Connecting via %s HTTPUserAgent MaxAttempts ConnectTimeout ReceiveTimeout CompressLocalDatabase no-dns Initialization error! DNSDatabaseInfo ScriptedUpdates Update failed. Checks daemonize() failed PidFile w freshclam.dat OnErrorExecute Received signal: wake up ^(yes|true|1|no|false|0)$ /etc/clamav/clamd.conf gen-json dumpcerts leave-temps reload multiscan fdpass stream allmatch database /var/lib/clamav recursive gen-mdb follow-dir-symlinks ^[0-9]+$ follow-file-symlinks bell no-summary file-list infected ping wait suppress-ok-results copy remove exclude exclude-dir include include-dir structured-ssn-format hex-dump md5 sha1 sha256 imp fuzzy-img print-certs html-normalise ascii-normalise utf16-decode build max-bad-sigs 3000 flevel cvd-version no-cdiff server unpack unpack-current info list-sigs find-sigs decode-sigs test-sigs vba vba-hex compare run-cdiff verify-cdiff hybrid defaultcolors config-dir /etc/clamav non-default generate-config force-interpreter trust-bytecode printsrc Print source code of bytecode printbcir input trace bytecode trace level no-trace-showsource archive-verbose bytecode-trust-all http-proxy proxy-user log-verbose force disable-summary disable-archive no-archive no-pe no-elf no-ole2 no-pdf no-html no-mail no-phishing-sigs no-phishing-scan-urls no-algorithmic no-phishing-restrictedscan max-ratio max-space ^[0-9]+[KMG]?$ unzip unrar arj unzoo lha jar tar tgz deb AlertExceedsMax alert-exceeds-max CacheSize cache-size 65536 PreludeEnable prelude-enable Enable prelude PreludeAnalyzerName prelude-analyzer-name /tmp/clamav.log LogFileUnlock 5M Log time with each message. LogClean LOG_LOCAL6 LOG_MAIL Enable verbose logging. log-rotate ExtendedDetectionInfo /run/clamav/clam.pid TemporaryDirectory tempdir /tmp datadir OfficialDatabaseOnly official-db-only no FailIfCvdOlderThan fail-if-cvd-older-than -1 YaraRules yara-rules /run/clamav/clamd.sock LocalSocketGroup virusgroup LocalSocketMode 660 FixStaleSocket 3310 MaxConnectionQueueLength 30 StreamMaxLength 100M StreamMinPort 1024 StreamMaxPort 2048 120 CommandReadTimeout SendBufTimeout 200 300 MaxQueue IdleTimeout ^/proc/ ^/sys/ MaxDirectoryRecursion max-dir-recursion 15 FollowDirectorySymlinks Follow directory symlinks. FollowFileSymlinks CrossFilesystems cross-fs SelfCheck 600 ConcurrentDatabaseReload DisableCache disable-cache VirusEvent /opt/send_virus_alert_sms.sh ExitOnOOM AllowAllMatchScan Don't fork into background. LeaveTemporaryFiles GenerateMetadataJson User BytecodeSecurity ^(TrustSigned|Paranoid)$ TrustSigned BytecodeTimeout bytecode-timeout 10000 BytecodeUnsigned bytecode-unsigned BytecodeMode bytecode-mode Auto Statistics statistics None DetectPUA detect-pua ExcludePUA exclude-pua NetTool PWTool IncludePUA include-pua Spy Scanner RAT ScanPE scan-pe ScanELF scan-elf ScanMail scan-mail ScanPartialMessages PhishingSignatures PhishingScanURLs HeuristicAlerts heuristic-alerts HeuristicScanPrecedence heuristic-scan-precedence StructuredDataDetection detect-structured StructuredMinCreditCardCount structured-cc-count StructuredMinSSNCount structured-ssn-count StructuredSSNFormatNormal StructuredSSNFormatStripped ScanHTML scan-html ScanOLE2 scan-ole2 AlertBrokenExecutables alert-broken AlertBrokenMedia alert-broken-media AlertEncrypted alert-encrypted StructuredCCOnly structured-cc-mode AlertEncryptedArchive alert-encrypted-archive AlertEncryptedDoc alert-encrypted-doc AlertOLE2Macros alert-macros AlertPhishingSSLMismatch alert-phishing-ssl AlertPhishingCloak alert-phishing-cloak AlertPartitionIntersection alert-partition-intersection ScanPDF scan-pdf ScanSWF scan-swf ScanXMLDOCS scan-xmldocs ScanHWP3 scan-hwp3 ScanOneNote scan-onenote ScanArchive scan-archive ScanImage scan-image ScanImageFuzzyHash scan-image-fuzzy-hash ForceToDisk force-to-disk MaxScanTime max-scantime 120000 max-scansize 400M max-recursion 17 max-files MaxEmbeddedPE max-embeddedpe 40M MaxHTMLNormalize max-htmlnormalize MaxHTMLNoTags max-htmlnotags 8M MaxScriptNormalize max-scriptnormalize 20M MaxZipTypeRcg max-ziptypercg 1M MaxPartitions max-partitions 128 MaxIconsPE max-iconspe 100 MaxRecHWP3 max-rechwp3 16 PCREMatchLimit pcre-match-limit 100000 PCRERecMatchLimit pcre-recmatch-limit 5000 PCREMaxFileSize pcre-max-filesize OnAccessMountPath / /home/user OnAccessIncludePath /home /students OnAccessExcludePath /home/bofh /root OnAccessExcludeRootUID OnAccessExcludeUID OnAccessExcludeUname clamuser OnAccessMaxFileSize OnAccessDisableDDD OnAccessPrevention OnAccessExtraScanning OnAccessCurlTimeout 10000L OnAccessMaxThreads OnAccessRetryAttempts OnAccessDenyOnError watch-list exclude-list DevACOnly dev-ac-only DevACDepth dev-ac-depth DevPerformance dev-performance DevLiblog dev-liblog /var/log/freshclam.log checks current.cvd.clamav.net dbname1 dbname2 your-proxy HTTP proxy's port 8080 username daemon-notify on-update-execute command on-error-execute on-outdated-execute local-address aaa.bbb.ccc.ddd DisableCertCheck nocerts SafeBrowsing TimeLimit timelimit DetectBrokenExecutables detect-broken AlgorithmicDetection algorithmic-detection block-max PhishingAlwaysBlockCloak OLE2BlockMacros block-macros ArchiveBlockEncrypted block-encrypted MailMaxRecursion ArchiveMaxScanSize ArchiveMaxRecursion ArchiveMaxFiles ArchiveMaxCompressionRatio ArchiveBlockMax ArchiveLimitMemoryUsage MailFollowURLs mail-follow-urls AllowSupplementaryGroups ScanOnAccess ClamdSocket tcp:scanner.mydomain:7357 MilterSocket MilterSocketGroup MilterSocketMode LocalNet OnClean Accept OnInfected Quarantine OnFail ^(Accept|Reject|Defer)$ Defer RejectMsg MTA specific AddHeader ^(No|Replace|Yes|Add)$ Replace ReportHostname my.mail.server.name VirusAction Chroot /newroot AllowList /etc/allowed_addresses Whitelist SkipAuthenticated LogInfected Basic SupportMultipleRecipients (H 5 5 ; " hP (x 8 8 ( Hh x8 ( h H0 $ xt ( H x "T H$ X0 h2` 2 3 5 6d zR x & D $ 4 FJ w ?:*3$" \ t EAF ( I BDA wDB $ 0X BDD GDBL h BED D(D0g (A ABBH (C ABBA H L BEB B(A0D8M` 8D0A(B BBBD L $ BBH E(A0D8Md 8D0A(B BBBD Q HW A p H 8 FGB B(H0D8D` 8I0A(B BBBE $ h ` FDD KDB, ODA ABA P FBB B(A0A8G L0A 8A0A(B BBBA FBB B(D0A8D` 8A0A(B BBBH hFp[hA`l 8Q0F(B BBBJ 8A0A(B BBBA 9 Eo H 8 FBB B(D0D8G 8A0A(B BBBD L BBB A(A0G (A BBBJ T (F BBBH H X FBB E(A0D8G 8C0A(B BBBK $ ` Hh H H H U C D D# @ `' FBB A(A0G 0D(A BBBJ @ 8 L BEG0j NGK B BBB s NGH p | BBB B(A0A8G:MIHbMMNBO 8D0A(B BBBA P D) BDD ^ ABE t FBD t FBD q FBG 0 D +B FDG R CBH DGB 0 x + FEA JB DBBH L + BIE E(A0D8G 8D0A(B BBBA H h- BBB B(A0A8D@ 8D0A(B BBBA X H <.z BBB A(A0Q (A BBBH d (F BBBH l8L@Y8A0 $ FBB B(D0A8JPNQBKJB 8D0A(B BBBA LBBBAEEDHfIBEBAEAGHn ` h c c X^ V + ) v : x^ : ( : d # P $ m . 5 < z ^ E d N ^ r h ^ p f i p w o - 6 : ? l F J T ` o b _ X_ x_ u i l N f N % d c r * 7 _ > d L c W @ c n @ o g @ f _ t ` i 0` p c h` r ` T s ` a t ) 4 ? K Q a q | " ( , 2 6 : > B F V h r ` } a U ; l 0a Pa , a $ b E hb ] b * 3 ; K b V @c } p c l - c N # d N d e pe f + Pf < G f W [ f f j g u o g @ g h h y i x Xi i `j x j d 0k l X m . m @ C [ v m m X (n n `p p s Ps F ) xs E s Y s n u W `u s v ' `w w w w (y Xy ) . 8 z C N 0z Z i t z 0{ | } X~ P 4 N f P x x A A @ & 0 G T e x ؈ , E X k p ` X + 8 B M ` 8 v X 8 p 8 I @ 3 ' ( ! / > A T @ h l z ( 2 H d / 4 D @ 8 V h u Ȩ P @ - @ x V j q l Z W e O ; l 0a ( : u W W q ? c A F p F ; ( 0 X A Q س @ s x ] ض ] a 8 m x @ x p 0 g @ ( i a < X X 0 x ) 3 0 = U c x Ƚ ^ K 8 q @ , < W g P < ` W $ , , 3 > > I P h h n X x 0 h @ p * ( 6 p 6 < @ = E 3 2 D T , p x o h T h| ( o o ( o o o P Hz 0 @ P ` p а 0 @ P ` p б 0 @ P ` p в 0 @ P ` p г 0 @ P ` p д 0 @ P ` p е 0 @ P ` p ж 10d11e133e13c0e72bb56f58042d211711005e.debug 2, .shstrtab .interp .note.gnu.property .note.gnu.build-id .note.ABI-tag .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt.got .plt.sec .text .fini .rodata .eh_frame_hdr .eh_frame .init_array .fini_array .data.rel.ro .dynamic .data .bss .gnu_debuglink 8 8 0 & h h $ 9 G o Q h h ` Y T a o n o ( ( } ( B :o , , 0 0 p p p x x ^ Hz Hj h| hl p p p 4 Tp