ELF4l4 (444  TTT~~p hhhDDPtdVV44QtdRtd~~/lib/ld-linux.so.2GNUGNU?@ABCD EFGHI J$K(L,M0N4O8P<Q@RDSHTLUPVTWXX\Y`Zd[h\l]p^t_x`|abcdefghijklmnopqrāsȁt́uЁvԁw؁x܁yz{|}~  $(,048<@DHLS[[tA1[5%%h%h%h% h%h %h(%h0%h8p% h@`%$hHP%(hP@%,hX0%0h` %4hh%8hp%<hx%@h%Dh%Hh%Lh%Ph%Th%Xh%\hp%`h`%dhP%hh@%lh0%ph %th%xh%|h%h%h%h%h%h %h(%h0%h8p%h@`%hHP%hP@%hX0%h` %hh%hp%hx%h%Āh%Ȁh%̀h%Ѐh%Ԁh%؀h%܀hp%h`%hP%h@%h0%h %h%h%h%h%h%h% h%h %h(%h0%h8p% h@`%$hHP%(hP@%,hX0%0h` %4hh%8hp%<hx%@h%Dh%Hh%Lh%Ph%Th%Xh%\hp%`h`%dhP%hh@%lh0%ph %th%xh%|h%h%h%h%h%h %h(%h0%h8p%h@`%hHP%hP@%hX0%h` %hh%hp%hx%h%āh%ȁh%́h%Ёh%ԁh%؁h%܁hp%h`%hP%h@%h0%h %h%h%h%h%h%h% h%h %h(%h0%h8p% h@`%$hHP%(hP@%,hX0%0h` %4hh%8hp%<hx%@h%Dh%Hh%LhUWVSÃ<1T$,$эqD$(11G@9u1D1D$$CD$(f_‰t+t6u_D$(D$N$Dv%D$D$ ND$D$ 3ND$(D$D$$2L$\$$.J+D$($.D$(D$((EC99|$,tD$,(D$(<[^_]UWVS\T$<$ED$4u$/*D$$D$4D$($u D$4$T$T$$|$0*tD$hN$D$}N$j;\$4`|$$|$0/tD$N$g:D$N$O"Lu{t|$(111эqD$,xu>T$$|$0*tD$N$D$N$;\$4|$$|$0/tD$N$D$N$n1ɀ||@9udBT$ RJ9‹T$$*uA|$0tD$O]$LD$0\D$%O]$/D$0?|$0tD$/]$ D$0D$8O]$D$01|$(D$MOl$<$$D$T$u!$D$4$D$$|$0u T$$C(1D$$؉1IIE;l$ t D$$|C;l$ TD$$k}t$,D$(F4$t/T$Lu $OOT$$D$L׉ŋD$4$|$<tT$<*D$$\[^_]UWVSÃL1D${$эq uD$[$x$D$,|$,~D$$11[t {t*uA@9uD$,L$$D$ \$$1ÉD$D$D$(tL|$1D$1Iŀ[t{t@*tG9uD$(D$(E]|$ t:tP9t$ uD$ $ 0D$$DD$ t$$00D$$*t&D$ $X0D$$t$$|0$D$T$D$E,$-i,$ 3D$$5D$@D$D$,$sƄ$+\$,D$M$'1@u\$$L>Ћ$,e3t<[^_]UWVSe$1T$<DŽ$u$?jD$D$ D$ $D$$et$?%$JD$ D$D$D$OD$D$ t$D$NQCH$t$?$$t$ @$r$󫉜$DŽ$7bChD$$$$hD$D$,$D$@D$l$$^D$l$D$,$D$u$$$$D$D$D$D$ D$D$4$"$1@ Butk0QQ{Bȸ@Q|$<L$ T$DƉD$$SQA$F$PD$%v u$bO $nQP $$$u㋄$$$$e3t[^_]UWVSÁL8[u+D$]$Xu$QxD$;$)D$0D$ D$DD$;$D$($0@#QD$0$QD$\$0D$,;t-D$Q$vt11р| }D$,D$4$QD$D$8$QD$T$81D$D$D$ D$$эD D$u$h@Qh@~$@5c1ۃ|$,D$(\$,9D$l$$@'9|$Q\$$QD$:D<$tD$R0$R"$R$AD$8$QD$su$RbD$tAx\$$Qu$R1101$@AL[^_]Ë|<1_S(e$1\$$$c;t,@t#D$$D$u1$e3tF([UWVS,e$1},u$lAD$,$,D$@$u+D$,$,@$AD$D$E,\$$$<e3$L$P$T$X\Í&$d4$T$ D$(T$ ljtJ1 9s9<%ud;\$,T$07D$8|$D$4D$@D$Lu|$@t ~ @Ft~F ET$HD$T$HT$$$T$,שT$,$T$,D$D$ D$\$ìT$,$D$,#D$,qF ||$L|$@j;aFD$FD$PD$D$ $"t& t&D$)D$$|D$ ֮D$X$zD$X$ e3D$X, [^_]ÍsD$"4$T$,T$,g{o$|`̂N$D$D$Xxl$48|$ D$D$$èt${411T$89T$<MD$w3D$ ?D$D$D$$sЃ,Ð& \$\$ t$t$$|$t/S,1t  \$t$|$Ít&D$$PDžtD$D$$" !%tDJDѸP t&P u$=u\$t$|$Ðt& tߐD$G$GD$D$D$ $ܙ16$1 Ft&;t&'WVS0D$$L֘D$$LÉD$$輘D$$LƉD$(袘D$,t1t,1t#t$<$/tf|$ݡ1D$D$$VD$ t$t\$uu0[^_Í&1t\$~$襝u+tu]f01[^_ft$1|$ D$lD$$9t$Le\$u$'\$P$d$L\$($T$`$Xe$<1D$t$$Ėt@$<e3$L$P$T$X\Í&4$(|/tat$;D$|$4$YƄ$;D$D$ D$t$$M1҉$‰諚Vt$;|$D$D$ D$D$4$Ƅ$;qVSt$ \$$D$4$x~ [^f| x wCCC @ fffC4$D$puD$(ȉC1[^Ð@$t@C1[^ D$8/fWVS1ہ e$1$0|$D$$苙u/v1|$#Ét$D$<$Жu܉4$Ԙ$e3u [^_SÃt0$ܗ t&@$ŗCP $S贗Cu݋C Cta&@$荗C P $S |C u݋Ct7@$]C@$OCP $S>Cuσ[fUWVSÃ,҉L$@11 &t 9u1tYD$u\+|$tE< tA t u9tU)C$譙t\$t$$,[^_]Ð4$Л,[^lj_]Ít&1u1ЍvUWV1Sƃ,T$11ҽ *|$ E\$$Ku߉|$R*htnPty$•D$@|$4$D$ D$D$Յu$蝕1,[^_]É\$$${ٍt&\$$$X붉\$$a$9$tF UWVSD$4D$0$134<.t&Apt1ۍ&4$D$ tLD$D$D$n u͋$ e3u [^_]É\$1$+m UWVS|T$T$lD$XL$\e$l1D$$m D$\D$$jD$8 T$T$@kT$T9 $iD$@ &D$@$htx .< 1D$LT$l1ۉD$D$X$D$*D$ D$D$D$mD$lD$$huoT$lD$$etUT$LD$$e+ D$<$m<$uh$mhD$lDƋD$L19MÉŃD$4,$8kD$,h,$$k9,$kT$LD$8D$LD$T$ $(eT$LD$$hD$<T$l$D$hǸND$4D$4D$,T$DD$PD$\ D$(D$/$m]xD$(1D$M$`t&D$$D$ $D$\tL$]D$D$ D$\$,$]u\$|$$M؏떍D$=$[D$M$2`t\$$dN苏FD$(D$ S$_D$(D$M$_D$(D$M$t_D$(D$M$X_D$(D$M$<_%D$(D$M$ _ D$(D$M$_D$(D$M$^D$(D$M$^D$(D$M$^D$(D$M$^}D$(D$M$x^aD$(D$M$\^D$$D$ $D$ZtxD$$D$ $D$Zt\D$;$YtHD$D$ D$\$,$,[u\$|$$M脍t&D$$$$\$\[1<[^_]fD$,D$$D$ $D$Yt$[t@D$D$ D$\$,$Zu\$|$$MfD$,D$oMD$$c`jD$M$I]tt$$dN袌4$Z=t&$xZD$$$,[$pWnD$$&W\$ D$($~W$k\$Z<1[^_]ÐD$(t$$L.D$D$$$Z$Y<[^_]1D$$D$ $D$UX-$YD$D$ D$\$,$ Yu\$|$$Ma뒋D$($L.D$D$,D$CN$-2$YD$($1MD$ $NM$XD$$$YnD$($qMD$ĊD$(D$M$ZD$;$VD$M$[t\$$dN^D$($.D$E$Z$%XD$($(.D$$-D$$$X$-xD$(D$M$Z&D$:$U!\$$dN螉'UWVS<$Wkv$W0tx . D$,D$M$yYuD$,D$ S$aYD$,$-X<$#XD$YD$,|$D$ *D$D$D$4$![}4$V$?V7&$X1<[^_]Íx x .x t&D$,D$M$|XD$,D$M$`XD$,D$M$DXD$,D$M$(XD$,D$M$ XD$,D$M$WD$,D$N$WsD$,D$M$WWD$,D$M$W;D$,D$M$WD$,D$M$dWD$,D$M$HWD$,D$M$,WD$,D$M$WD$,D$M$VD$,D$M$VwD$,D$PP$V[D$,D$FP$V:v$.D$Vt$$."4$ T$rV|$$|.h&'UWVS\ e$L 1҉$YHD$-$RTVDPD$/$qRD$OD$ D$D$ PDӍ$, T$$W$S$, D$$GT\$,D$D$ $QO l$D$ $eQ$RD$ D$ D$D$:$eUtWt$ Ot$, T$$1b,$ S$L e3\ [^_]ËD$ 1teD$(4$D$XWui4$Q.1$0$Q됍$, T$$0Ѓ,$xRi\$$@1调I\$$l1蘃4$Q)$, D$$Oq$O]cTvUWVSÁD$O$e$1L$,SfD$*'$ND$$M2|$4$ N$D$$}T"D$$EM<$BRD$*,$D$,$Rpō$$Q<$~R<$Putet$\$$83 $e3Ĝ[^_]D$eT$iRfD$*$1軁믉\$$d3詁띍D$4D$|$$LgT$,$O,$Otx .P D$,T$T$$D$*D$$D$ D$D$$ST$$|$D$*D$ T$$$D$D$sS$$D$$i@<$P,$QD$,|$$2D$舀<$P<$eNfx x .f x ,$Pvw$T$$3$D$<$Jb\$$2<$:P<$M\$$P$$~O<$O<$M,$ P|$$2$Ow$ 2cT|$$X2K<$3M4t$$2.$T$$3XP&${~輩$3D$~$3P$4P$L4~$4~$4~$$5~$h5~$5|~$6p~$T6d~$6X~$6L~$87@~$|74~$7(~$8~$T8~$8~$8}$89}$x9}$9}$ :}$H:}$:}$:}$;}$h;}$;}$<t}$`<h}$<\}$=P}$X=D}${8}Ít&UWVSÁT$L$311l$(0FƉl$T$$0HD$8%=uD$D$8$G‹ҋ8L$$T$tTLT$$-PT$D$ D$TD$_|T$$CJ0F[1Č[^_]ÍKT$$7PT$D$ D$TD$ |T$몋8$=D${$%PDI랋D$D$D$$Ht7D$$dN{$I1\D$$={D$=y{0UWVSÁlT$($e$\1L$,$UPfT$&tGD$0$.D$D$,$}GƄ$KD$D$$9IfDŽ$L$-GfDŽ$NMD$4$$P$LD$aEp1 f|$&$4T$(f|$&l$T$D$P+$D$ D$D$$Lߋ!%tDWD$)ߍ;T$T$,D$0$T$H$D$ \$|$4$K1 11D9rŀtfE\$41D$ D$\$4$~ED$Q$IWڋ !%tDJD)ڃ T$$H?x4$QID$>D$0$!L$\e3l[^_]D$PJ$_Px$T$ T$$Et$ $󥍄$D$D$$$MJD$0D$$PIt$0$.D$t$,$aDƄ$K4$E$T$D$$IO${wT$(+$l$D$PT$D$ D$D$$J8fDŽ$.$0$PD$l>;w11X4$G$PuD\$$>w$>v4$]G1 1$>v\$$?v4$#G1$jPv1$l?v4$F1$Prv1$P$PSv$D$D$$DH1\8G&UWVSÃ$-ED$FP$ʼn9FtE}tT|$\$4$IB>[^_]D$\$4$"BD$PP$Et륍G$Ftol$\$$A$M.됐t&UWVSfD$$S<$$ $,fD$ D$T$L$<Ƅ$KfT$L$3a4$$eD$T$=|$41򮋄$(D$ SD$D$D$э 2a$PB$e$f$D$D$OD$ D$D$ VBD$4$=u$e$>$eD$S4$>D$@D$@$3aT$ D$dND$$:|$Dk$f1퍴$3AD$TT$D$SD$ D$D$ t$84$At&4VD$8$fTt$T$D$SD$ D$D$ $.AtT$8D$$D$4$G:ut$l$$u,$"8D$8$F;D$8$9|$Dt|$D1t&$99u$9,$7|$Dt|$D1$99w$9D$8D$$:$3D$\$$m8$$ 4$6|$41򮋄$$D$ jQD$D$D$э 2a$e=$$$8D$ LOG_AUTHLOG_AUTHPRIVLOG_CRONLOG_DAEMONLOG_FTPLOG_KERNLOG_LPRLOG_MAILLOG_NEWSLOG_SYSLOGLOG_USERLOG_UUCPLOG_LOCAL0LOG_LOCAL1LOG_LOCAL2LOG_LOCAL3LOG_LOCAL4LOG_LOCAL5LOG_LOCAL6LOG_LOCAL7ERROR: Can't open %s in append mode (check permissions!). WARNING: File locking not supported (NFS?)ERROR: %s is locked by another process LOGGING DISABLED (Maximal log file size exceeded). x yPyHy(yX0y9y0AyJy8x Sy(^ygy@py{yyyyyyyPOSIXLY_CORRECT%s: illegal option -- %c %s: unrecognized option `%s' %s: option `%s' is ambiguous %s: option requires an argument -- %c %s: option `--%s' doesn't allow an argument %s: option `--%s' requires an argument ERROR: optaddarg: Unregistered option %s ERROR: optaddarg: strdup() failed ERROR: optaddarg: malloc() failed ERROR: optparse: Can't register new option (not enough memory) ERROR: optparse: longopts[] is too small ERROR: optparse: shortopts[] is too small ERROR: optparse: (short|long)opts[] is too small ERROR: Please edit the example config file %s ERROR: Missing argument for option at line %d ERROR: Missing closing parenthesis in option %s at line %d ERROR: Empty argument for option %s at line %d ERROR: Incomplete option passed (missing argument) ERROR: optparse: No corresponding long name for option '-%c' ERROR: Parse error at line %d: Unknown option %s WARNING: Ignoring unsupported option %s at line %u WARNING: Ignoring unsupported option --%s (-%c) WARNING: Ignoring unsupported option --%s ERROR: Can't register argument for option %s ERROR: Can't register argument for option --%s WARNING: Ignoring deprecated option %s at line %u WARNING: Ignoring deprecated option --%s (-%c) WARNING: Ignoring deprecated option --%s ERROR: optparse: Can't compile regular expression %s for option %s ERROR: Incorrect argument format for option %s ERROR: Incorrect argument format for option --%s (-%c) ERROR: Incorrect argument format for option --%s ERROR: Option --%s (-%c) requires a non-empty string argument ERROR: Option --%s requires a non-empty string argument ERROR: Can't parse numerical argument for option %s ERROR: Can't parse numerical argument for option --%s (-%c) ERROR: Can't parse numerical argument for option --%s WARNING: Numerical value for option %s too high, resetting to 4G WARNING: Numerical value for option --%s (-%c) too high, resetting to 4G ERROR: optparse: calloc failed ERROR: optparse: strdup failed /etc/clamav/clamav-milter.confForce using the interpreter instead of the JITTrust loaded bytecode (default yes)Load and print bytecode information without executingInput file to run the bytecode nDon't show source line during tracingSave all reports to a log file.By default the log file is locked for writing and only a single daemon process can write to it. This option disables the lock.Maximum size of the log file. Value of 0 disables the limit.Log all clean files. Useful in debugging but drastically increases the log size.Use the system logger (can work together with LogFile).Type of syslog messages. Please refer to 'man syslog' for the facility names.Log additional information about the infected file, such as its size and hash, together with the virus name.Save the process ID to a file.This option allows you to change the default temporary directory.This option allows you to change the default database directory. If you enable it, please make sure it points to the same directory in both clamd and freshclam.Only load the official signatures published by the ClamAV project.Path to a local socket file the daemon will listen on.Sets the group ownership on the unix socket.Sets the permissions on the unix socket to the specified mode.Remove a stale socket after unclean shutdownA TCP port number the daemon will listen on.By default clamd binds to INADDR_ANY. This option allows you to restrict the TCP address and provide some degree of protection from the outside world.Maximum length the queue of pending connections may grow to.Close the STREAM session when the data size limit is exceeded. The value should match your MTA's limit for the maximum attachment size.The STREAM command uses an FTP-like protocol. This option sets the lower boundary for the port range.This option sets the upper boundary for the port range.Maximum number of threads running at the same time.This option specifies the time (in seconds) after which clamd should timeout if a client doesn't provide any data.This option specifies the time (in seconds) after which clamd should timeout if a client doesn't provide any initial command after connecting.This option specifies how long to wait (in miliseconds) if the send buffer is full. Keep this value low to prevent clamd hanging Waiting for data from clamd will timeout after this time (seconds).Maximum number of queued items (including those being processed by MaxThreads threads) It is recommended to have this value at least twice MaxThreads if possible. WARNING: you shouldn't increase this too much to avoid running out of file descriptors, the following condition should hold: MaxThreads*MaxRecursion + MaxQueue - MaxThreads + 6 < RLIMIT_NOFILE (usual max is 1024) This option specifies how long (in seconds) the process should wait for a new job.Don't scan files/directories whose names match the provided regular expression. This option can be specified multiple times.Maximum depth the directories are scanned at.Follow symlinks to regular files.Scan files and directories on other filesystems.This option specifies the time intervals (in seconds) in which clamd should perform a database check.Execute a command when a virus is found. In the command string %v will be replaced with the virus name. Additionally, two environment variables will be defined: $CLAM_VIRUSEVENT_FILENAME and $CLAM_VIRUSEVENT_VIRUSNAME./usr/bin/mailx -s "ClamAV VIRUS ALERT: %v" alert < /dev/nullStop the daemon when libclamav reports an out of memory condition.Enable debug messages in libclamav.Don't remove temporary files (for debugging purposes).Run the daemon as a specified user (the process must be started by root).Initialize a supplementary group access (the process must be started by root).With this option enabled ClamAV will load bytecode from the database. It is highly recommended you keep this option on, otherwise you'll miss detections for many new viruses.Set bytecode security level. Possible values: TrustSigned - trust bytecode loaded from signed .c[lv]d files, insert runtime safety checks for bytecode loaded from other sources Paranoid - don't trust any bytecode, insert runtime checks for all Recommended: TrustSigned, because bytecode in .cvd files already has these checks Set bytecode timeout in miliseconds. Allow loading bytecode from outside digitally signed .c[lv]d files. ^(Auto|ForceJIT|ForceInterpreter|Test)$Set bytecode execution mode. Possible values: Auto - automatically choose JIT if possible, fallback to interpreter ForceJIT - always choose JIT, fail if not possible ForceIntepreter - always choose interpreter Test - run with both JIT and interpreter and compare results. Make all failures fatal Detect Potentially Unwanted Applications.Exclude a specific PUA category. This directive can be used multiple times. See http://www.clamav.net/support/pua for the complete list of PUA categories.Only include a specific PUA category. This directive can be used multiple times.In some cases (eg. complex malware, exploits in graphic files, and others), ClamAV uses special algorithms to provide accurate detection. This option controls the algorithmic detection.PE stands for Portable Executable - it's an executable file format used in all 32- and 64-bit versions of Windows operating systems. This option allows ClamAV to perform a deeper analysis of executable files and it's also required for decompression of popular executable packers such as UPX or FSG. If you turn off this option, the original files will still be scanned, but without additional processing.Executable and Linking Format is a standard format for UN*X executables. This option allows you to control the scanning of ELF files. If you turn off this option, the original files will still be scanned, but without additional processing.With this option enabled clamav will try to detect broken executables (both PE and ELF) and mark them as Broken.Executable.Enable the built in email scanner. If you turn off this option, the original files will still be scanned, but without parsing individual messages/attachments.Scan RFC1341 messages split over many emails. You will need to periodically clean up $TemporaryDirectory/clamav-partial directory. WARNING: This option may open your system to a DoS attack. Please don't use this feature on highly loaded servers.With this option enabled ClamAV will try to detect phishing attempts by using signatures.Scan URLs found in mails for phishing attempts using heuristics.Always block cloaked URLs, even if they're not in the database. This feature can lead to false positives.PhishingAlwaysBlockSSLMismatchAlways block SSL mismatches in URLs, even if they're not in the database. This feature can lead to false positives.Allow heuristic match to take precedence. When enabled, if a heuristic scan (such as phishingScan) detects a possible virus/phish it will stop scan immediately. Recommended, saves CPU scan-time. When disabled, virus/phish detected by heuristic scans will be reported only at the end of a scan. If an archive contains both a heuristically detected virus/phish, and a real malware, the real malware will be reported. Keep this disabled if you intend to handle "*.Heuristics.*" viruses differently from "real" malware. If a non-heuristically-detected virus (signature-based) is found first, the scan is interrupted immediately, regardless of this config option.Enable the Data Loss Prevention module.This option sets the lowest number of Credit Card numbers found in a file to generate a detect.This option sets the lowest number of Social Security Numbers found in a file to generate a detect.With this option enabled the DLP module will search for valid SSNs formatted as xxx-yy-zzzz.With this option enabled the DLP module will search for valid SSNs formatted as xxxyyzzzzPerform HTML/JavaScript/ScriptEncoder normalisation and decryption. If you turn off this option, the original files will still be scanned, but without additional processing.This option enables scanning of OLE2 files, such as Microsoft Office documents and .msi files. If you turn off this option, the original files will still be scanned, but without additional processing.With this option enabled OLE2 files with VBA macros, which were not detected by signatures will be marked as "Heuristics.OLE2.ContainsMacros".This option enables scanning within PDF files. If you turn off this option, the original files will still be scanned, but without decoding and additional processing.Scan within archives and compressed files. If you turn off this option, the original files will still be scanned, but without unpacking and additional processing.Mark encrypted archives as viruses (Encrypted.Zip, Encrypted.RAR).This option sets the maximum amount of data to be scanned for each input file. Archives and other containers are recursively extracted and scanned up to this value. The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result in severe damage.Files/messages larger than this limit won't be scanned. Affects the input file itself as well as files contained inside it (when the input file is an archive, a document or some other kind of container). The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result in severe damage to the system.Nested archives are scanned recursively, e.g. if a Zip archive contains a RAR file, all files within it will also be scanned. This option specifies how deeply the process should be continued. The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result in severe damage to the system.Number of files to be scanned within an archive, a document, or any other container file. The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result in severe damage to the system.This option enables Clamuko. Dazuko needs to be already configured and running.The number of scanner threads that will be started (DazukoFS only). Having multiple scanner threads allows Clamuko to serve multiple processes simultaneously. This is particularly beneficial on SMP machines.Scan files when they get opened by the system.Scan files when they get closed by the system.Scan files when they get executed by the system.This option specifies a directory (together will all files and directories inside this directory) which should be scanned on-access. This option can be used multiple times.This option allows excluding directories from on-access scanning. It can be used multiple times.With this option you can whitelist specific UIDs. Processes with these UIDs will be able to access all files. This option can be used multiple times (one per line).Files larger than this value will not be scanned.When started by root freshclam will drop privileges and switch to the user defined in this option.This option defined how many times daily freshclam should check for a database update.Use DNS to verify the virus database version. Freshclam uses DNS TXT records to verify the versions of the database and software itself. With this directive you can change the database verification domain. WARNING: Please don't change it unless you're configuring freshclam to use your own database verification domain.DatabaseMirror specifies to which mirror(s) freshclam should connect. You should have at least two entries: db.XY.clamav.net (or db.XY.ipv6.clamav.net for IPv6) and database.clamav.net (in this order). Please replace XY with your country code (see http://www.iana.org/cctld/cctld-whois.htm). database.clamav.net is a round-robin record which points to our most reliable mirrors. It's used as a fall back in case db.XY.clamav.net is not working.db.XY.clamav.net database.clamav.netThis option defines how many attempts freshclam should make before giving up.With this option you can control scripted updates. It's highly recommended to keep them enabled.With this option enabled, freshclam will attempt to load new databases into memory to make sure they are properly handled by libclamav before replacing the old ones.By default freshclam will keep the local databases (.cld) uncompressed to make their handling faster. With this option you can enable the compression. The change will take effect with the next database update.Download an additional 3rd party signature database distributed through the ClamAV mirrors. Here you can find a list of available databases: http://www.clamav.net/download/cvd/3rdparty This option can be used multiple times.With this option you can provide custom sources (http:// or file://) for database files. This option can be used multiple times.http://myserver.com/mysigs.ndb file:///mnt/nfs/local.hdbIf you're behind a proxy, please enter its address here.A user name for the HTTP proxy authentication.A password for the HTTP proxy authentication.If your servers are behind a firewall/proxy which does a User-Agent filtering you can use this option to force the use of a different User-Agent header.Send the RELOAD command to clamd after a successful update.Run a command after a successful database update.Run a command when a database update error occurs.Run a command when freshclam reports an outdated version. In the command string %v will be replaced with the new version number.With this option you can provide a client address for the database downlading. Useful for multi-homed systems.Timeout in seconds when connecting to database server.Timeout in seconds when reading from database server.When enabled freshclam will submit statistics to the ClamAV Project about the latest virus detections in your environment. The ClamAV maintainers will then use this data to determine what types of malware are the most detected in the field and in what geographic area they are. Freshclam will connect to clamd in order to get recent statistics.Country of origin of malware/detection statistics (for statistical purposes only). The statistics collector at ClamAV.net will look up your IP address to determine the geographical origin of the malware reported by your installation. If this installation is mainly used to scan data which comes from a different location, please enable this option and enter a two-letter code (see http://www.iana.org/domains/root/db/) of the country of origin.This option enables support for our "Personal Statistics" service. When this option is enabled, the information on malware detected by your clamd installation is made available to you through our website. To get your HostID, log on http://www.stats.clamav.net and add a new host to your host list. Once you have the HostID, uncomment this option and paste the HostID here. As soon as your freshclam starts submitting information to our stats collecting service, you will be able to view the statistics of this clamd installation by logging into http://www.stats.clamav.net with the same credentials you used to generate the HostID. For more information refer to: http://www.clamav.net/support/faq/faq-cctts/ This feature requires SubmitDetectionStats to be enabled.This option enables support for Google Safe Browsing. When activated for the first time, freshclam will download a new database file (safebrowsing.cvd) which will be automatically loaded by clamd and clamscan during the next reload, provided that the heuristic phishing detection is turned on. This database includes information about websites that may be phishing sites or possible sources of malware. When using this option, it's mandatory to run freshclam at least every 30 minutes. Freshclam uses the ClamAV's mirror infrastructure to distribute the database and its updates but all the contents are provided under Google's terms of use. See http://code.google.com/support/bin/answer.py?answer=70015 and http://safebrowsing.clamav.net for more information.This option enables downloading of bytecode.cvd, which includes additional detection mechanisms and improvements to the ClamAV engine.Define the clamd socket to connect to for scanning. This option is mandatory! Syntax: ClamdSocket unix:path ClamdSocket tcp:host:port The first syntax specifies a local unix socket (needs an absolute path) e.g.: ClamdSocket unix:/var/run/clamd/clamd.socket The second syntax specifies a tcp local or remote tcp socket: the host can be a hostname or an ip address; the ":port" field is only required for IPv6 addresses, otherwise it defaults to 3310 ClamdSocket tcp:192.168.0.1 This option can be repeated several times with different sockets or even with the same socket: clamd servers will be selected in a round-robin fashion.Define the interface through which we communicate with sendmail. This option is mandatory! Possible formats are: [[unix|local]:]/path/to/file - to specify a unix domain socket; inet:port@[hostname|ip-address] - to specify an ipv4 socket; inet6:port@[hostname|ip-address] - to specify an ipv6 socket./tmp/clamav-milter.socket inet:7357Define the group ownership for the (unix) milter socket.Sets the permissions on the (unix) milter socket to the specified mode.Messages originating from these hosts/networks will not be scanned This option takes a host(name)/mask pair in CIRD notation and can be repeated several times. If "/mask" is omitted, a host is assumed. To specify a locally orignated, non-smtp, email use the keyword "local".local 192.168.0.0/24 1111:2222:3333::/48^(Accept|Reject|Defer|Blackhole|Quarantine)$Action to be performed on clean messages (mostly useful for testing). The following actions are available: Accept: the message is accepted for delievery Reject: immediately refuse delievery (a 5xx error is returned to the peer) Defer: return a temporary failure message (4xx) to the peer Blackhole: like Accept but the message is sent to oblivion Quarantine: like Accept but message is quarantined instead of being deliveredAction to be performed on error conditions (this includes failure to allocate data structures, no scanners available, network timeouts, unknown scanner replies and the like. The following actions are available: Accept: the message is accepted for delievery; Reject: immediately refuse delievery (a 5xx error is returned to the peer); Defer: return a temporary failure message (4xx) to the peer.This option allows to set a specific rejection reason for infected messages and it's therefore only useful together with "OnInfected Reject" The string "%v", if present, will be replaced with the virus name.If this option is set to "Replace" (or "Yes"), an "X-Virus-Scanned" and an "X-Virus-Status" headers will be attached to each processed message, possibly replacing existing headers. If it is set to Add, the X-Virus headers are added possibly on top of the existing ones. Note that while "Replace" can potentially break DKIM signatures, "Add" may confuse procmail and similar filters.When AddHeader is in use, this option allows to arbitrary set the reported hostname. This may be desirable in order to avoid leaking internal names. If unset the real machine name is used.Execute a command when an infected message is processed. The following parameters are passed to the invoked program in this order: virus name, queue id, sender, destination, subject, message id, message date. Note #1: this requires MTA macroes to be available (see LogInfected below) Note #2: the process is invoked in the context of clamav-milter Note #3: clamav-milter will wait for the process to exit. Be quick or fork to avoid unnecessary delays in email delievery/usr/local/bin/my_infected_message_handlerChroot to the specified directory. Chrooting is performed just after reading the config file and before dropping privileges.This option specifies a file which contains a list of basic POSIX regular expressions. Addresses (sent to or from - see below) matching these regexes will not be scanned. Optionally each line can start with the string "From:" or "To:" (note: no whitespace after the colon) indicating if it is, respectively, the sender or recipient that is to be whitelisted. If the field is missing, "To:" is assumed. Lines starting with #, : or ! are ignored.Messages from authenticated SMTP users matching this extended POSIX regular expression (egrep-like) will not be scanned. As an alternative, a file containing a plain (not regex) list of names (one per line) can be specified using the prefix "file:". e.g. SkipAuthenticated file:/etc/good_guys Note: this is the AUTH login name!SkipAuthenticated ^(tom|dick|henry)$This option allows to tune what is logged when a message is infected. Possible values are Off (the default - nothing is logged), Basic (minimal info logged), Full (verbose info logged) Note: For this to work properly in sendmail, make sure the msg_id, mail_addr, rcpt_addr and i macroes are available in eom. In other words add a line like: Milter.macros.eom={msg_id}, {mail_addr}, {rcpt_addr}, i to your .cf file. Alternatively use the macro: define(`confMILTER_MACROS_EOM', `{msg_id}, {mail_addr}, {rcpt_addr}, i') Postfix should be working fine with the default settings.This option allows to tune what is logged when no threat is found in a scanned message. See LogInfected for possible values and caveats. Useful in debugging but drastically increases the log size.yesExampleERROR: Unknown option passed footruehelp^(yes|true|1|no|false|0)$config-file/etc/clamav/clamd.conf/etc/clamav/freshclam.confversiondebugquietleave-tempsno-warningsstdoutdaemonno-dnslist-mirrorssubmit-statsreloadmultiscanfdpassstreamdatabase/var/lib/clamav/recursivefollow-dir-symlinks^[0-9]+$follow-file-symlinksbellno-summaryfile-listinfectedcopyremoveexcludeexclude-dirincludeinclude-dirstructured-ssn-formathex-dumpmd5sha1sha256html-normaliseutf16-decodebuildno-cdiffserverunpackunpack-currentlist-sigsfind-sigsdecode-sigstest-sigsvbavba-hexrun-cdiffverify-cdiffdefaultcolorsconfig-dir/etc/clamavnon-defaultgenerate-configforce-interpretertrust-bytecodeprintsrcPrint source code of bytecodeinputtracebytecode trace levelno-trace-showsourcebytecode-trust-allhttp-proxyproxy-userlog-verboseforcedisable-summarydisable-archiveno-archiveno-peno-elfno-ole2no-pdfno-htmlno-mailno-phishing-sigsno-phishing-scan-urlsno-algorithmicno-phishing-restrictedscanmax-ratiomax-space^[0-9]+[KM]?$block-maxunzipunrararjunzoolhajartartgzdeb/tmp/clamav.logLogFileUnlockLogFileMaxSizeLogTimeLog time with each message.LogCleanLogSyslogLogFacilityLogVerboseEnable verbose logging.ExtendedDetectionInfoPidFile/var/run/clam.pidTemporaryDirectorytempdir/tmpDatabaseDirectorydatadir/var/lib/clamavOfficialDatabaseOnlyofficial-db-onlynoLocalSocket/tmp/clamd.socketLocalSocketGroupvirusgroupLocalSocketMode660FixStaleSocketTCPSocket3310TCPAddr127.0.0.1MaxConnectionQueueLength30StreamMaxLength25MStreamMinPort1024StreamMaxPort2048MaxThreads120CommandReadTimeoutSendBufTimeout200300MaxQueueIdleTimeout^/proc/ ^/sys/MaxDirectoryRecursionmax-dir-recursion15FollowDirectorySymlinksFollow directory symlinks.FollowFileSymlinksCrossFilesystemscross-fsSelfCheck600VirusEventExitOnOOMForegroundDon't fork into background.DebugLeaveTemporaryFilesUserAllowSupplementaryGroupsBytecodeBytecodeSecurity^(TrustSigned|Paranoid)$TrustSignedBytecodeTimeoutbytecode-timeout5000BytecodeUnsignedbytecode-unsignedBytecodeModebytecode-modeAutoDetectPUAdetect-puaExcludePUAexclude-puaNetTool PWToolIncludePUAinclude-puaSpy Scanner RATAlgorithmicDetectionalgorithmic-detectionScanPEscan-peScanELFscan-elfDetectBrokenExecutablesdetect-brokenScanMailscan-mailScanPartialMessagesPhishingSignaturesPhishingScanURLsPhishingAlwaysBlockCloakphishing-cloakphishing-sslHeuristicScanPrecedenceheuristic-scan-precedenceStructuredDataDetectiondetect-structuredStructuredMinCreditCardCountstructured-cc-countStructuredMinSSNCountstructured-ssn-countStructuredSSNFormatNormalStructuredSSNFormatStrippedScanHTMLscan-htmlScanOLE2scan-ole2OLE2BlockMacrosScanPDFscan-pdfScanArchivescan-archiveArchiveBlockEncryptedblock-encryptedmax-scansize100Mmax-filesizemax-recursion16max-files10000ClamukoScanOnAccessClamukoScannerCountClamukoScanOnOpenClamukoScanOnCloseClamukoScanOnExecClamukoIncludePath/home /studentsClamukoExcludePath/home/bofh /rootClamukoExcludeUIDClamukoMaxFileSizeDevACOnlydev-ac-onlyDevACDepthdev-ac-depthDevLiblogdev-liblogUpdateLogFile/var/log/freshclam.logDatabaseOwnerCheckschecksDNSDatabaseInfocurrent.cvd.clamav.netDatabaseMirrorMaxAttemptsScriptedUpdatesTestDatabasesCompressLocalDatabaseExtraDatabasedbname1 dbname2DatabaseCustomURLHTTPProxyServeryour-proxyHTTPProxyPortHTTP proxy's port8080HTTPProxyUsernameusernameHTTPProxyPasswordHTTPUserAgentNotifyClamddaemon-notifyOnUpdateExecuteon-update-executecommandOnErrorExecuteon-error-executeOnOutdatedExecuteon-outdated-executeLocalIPAddresslocal-addressaaa.bbb.ccc.dddConnectTimeoutReceiveTimeoutSubmitDetectionStats/path/to/clamd.confDetectionStatsCountrycountry-codeDetectionStatsHostIDunique-idSafeBrowsingMailMaxRecursionArchiveMaxScanSizeArchiveMaxRecursionArchiveMaxFilesArchiveMaxCompressionRatioArchiveBlockMaxArchiveLimitMemoryUsageMailFollowURLsmail-follow-urlsClamdSockettcp:scanner.mydomain:7357MilterSocketMilterSocketGroupMilterSocketModeLocalNetOnCleanAcceptOnInfectedQuarantineOnFail^(Accept|Reject|Defer)$DeferRejectMsgMTA specificAddHeader^(No|Replace|Yes|Add)$ReplaceReportHostnamemy.mail.server.nameVirusActionChroot/newrootWhitelist/etc/whitelisted_addressesSkipAuthenticatedLogInfectedBasich{{c{{{{cL{{1V{{9+{{v:{{?:{{E{{Q{{]:{{dd{{k{{r{{{{{{m{{{{{{d{{r{{{{{{{{{{f{{i{{+{{${{){{0{{8{{D{{L{{X{{n {{w {{{ {{ {{M {{ {{ {{b {{ {{ {{u {{ {{Ti {{l {{f {{ {{ {{ {{ {{ d {{r {{ {{d{{*c5@{{An@{{Mg@{{]fl{ot{Ti{~p{r{t{s{t{{{{{{{{{{{{%{{5{{@{{F{{M{{U{{\{{d{{l{{}{{{{{{{{{{{{{{{{{{{{{{{{{{ {{{{JelD#d1@Hd$mxwyAypp-#Ԇ 5 xFIUgx$dĈ\$  Ċ)3x(,l?N3xRVdČN_Dkz FHF lX$(3FOhFUFiđnF ` \ F̔* */9 DO L[ju  <     F)o < Mf 4Fu { 4 ȠF % P:TFpy p F | $ ȥF @  ( x#2&' 06FJ^pPd4P   {{" {{/9{{DelDRiu@w~c <$tز{T 8+;FTfk4}dE0l Է0?aXM]ȸl{8TTP{{{{{{+{{;{{V{{f{{~ {{Xx,@l l")AHAGQ^hF$h(t d {{{{O{{{{U{{I{{~{{ {{2{{{{){{{{p{{{{{{{{{{{{{{{{0.97.3%s/daily.cvd%s/daily.cldClamAV %s ClamAV %s/%u/%s/dev/nullCan't open /dev/null dup2(%d, %d) failed %s/ERROR: This tool requires libclamav with functionality level %u or higher (current f-level: %u) ERROR: --file-list: Can't open file %s OPEN/\rbwbab100002053ClamAV-Diff:%*u:%u:#LSIZE#LSIZE %uADDDELXCHGCLOSEMOVEUNLINK!cdiff_apply: Problem parsing line !cdiff_apply: Unknown command %s !cdiff_apply: Not enough arguments for %s !cdiff_apply: Can't execute command %s !cdiff_cmd_unlink: Database %s is still open !cdiff_cmd_unlink: Can't get first argument !cdiff_cmd_unlink: Forbidden characters found in database name !cdiff_cmd_unlink: Can't unlink %s !cdiff_cmd_xchg: Can't get first argument !cdiff_cmd_xchg: Can't get second argument !cdiff_cmd_xchg: Can't allocate memory for cdiff_node !cdiff_cmd_del: Can't get first argument !cdiff_cmd_del: Can't get second argument !cdiff_cmd_del: Can't allocate memory for cdiff_node !cdiff_cmd_open: Can't get first argument !cdiff_cmd_open: %s not closed before opening %s !cdiff_cmd_open: Forbidden characters found in database name !cdiff_cmd_close: No database to close !cdiff_cmd_close: Can't open file %s for reading !cdiff_cmd_close: Can't generate temporary name !cdiff_cmd_close: Can't open file %s for writing !cdiff_cmd_close: Can't apply DEL at line %d of %s !cdiff_cmd_close: Can't apply XCHG at line %d of %s !cdiff_cmd_close: Can't write to %s !cdiff_cmd_close: Not all DEL/XCHG have been executed !cdiff_cmd_close: Can't unlink %s !cdiff_cmd_close: Can't rename %s to %s !cdiff_cmd_close: Can't open file %s for appending !cdiff_cmd_move: Database %s is still open !cdiff_cmd_move: Can't get third argument !cdiff_cmd_move: Can't get fifth argument !cdiff_cmd_move: end_line < start_line !cdiff_cmd_move: Can't get fourth argument !cdiff_cmd_move: Can't get sixth argument !cdiff_cmd_move: Can't get first argument !cdiff_cmd_move: Can't open %s for reading !cdiff_cmd_move: Can't get second argument !cdiff_cmd_move: Can't open %s for appending !cdiff_cmd_move: Can't generate temporary name !cdiff_cmd_move: Can't open file %s for writing !cdiff_cmd_close: Can't apply MOVE due to conflict at line %d !cdiff_cmd_move: Can't write to %s !cdiff_cmd_move: No data was moved from %s to %s !cdiff_cmd_move: Can't unlink %s !cdiff_cmd_move: Can't rename %s to %s !cdiff_cmd_add: Can't get first argument !cdiff_cmd_add: Can't allocate memory for cdiff_node !cdiff_apply: Can't duplicate descriptor %d !cdiff_apply: Can't allocate memory for 'line' !cdiff_apply: Can't allocate memory for 'lbuf' !cdiff_apply: lseek(desc, %d, SEEK_END) failed !cdiff_apply: Can't read %d bytes !cdiff_apply: No digital signature in cdiff file !cdiff_apply: Can't fstat file !cdiff_apply: compressed data end offset < 0 !cdiff_apply: lseek(desc, 0, SEEK_SET) failed 14783905874077467090262228516557917570254599638376203532031989214105552847269687489771975792123442185817287694951949800908791527542017115600501303394778618535864845235700041590056318230102449612217458549016089313306591388590790796515819654102320725712300822356348724011232654837503241736177907784198700834440681124727060540035754699658105895050096576226753008596881698828185652424901921668758326578462003247906470982092298106789657211905488986281078346361469524484829559560886227198091995498440676639639830463593211386055065360288422394053998134458623712540683294034953818412458362198117811990006021989844180721010947!cdiff_apply: Incorrect digital signature !cdiff_apply: Incorrect file format !cdiff_apply: Can't gzdopen descriptor %d !cdiff_apply: Premature EOF at line %d ^cdiff_apply: Ignoring new buffer size request - invalid size %d !cdiff_apply: Can't resize line buffer to %d bytes !cdiff_apply: Error executing command at line %d !cdiff_apply: fdopen() failed for descriptor %d *cdiff_apply: File %s was not properly closed *cdiff_apply: Parsed %d lines and executed %d commands  T@X \` ap g lP%o%06omalloc failed_vba_project%s/%s_%upowerpoint documentworddocument%s/%scli_gentemp() failedERROR %s !Can't open directory %s. -------------- start of code ------------------ %s -------------- end of code ------------------ !ScanDir -> Can't open directory %s. !hexdump: Can't write to stdout !maxlinelen: Can't open file %s !maxlinelen: Can't read file %s !sha256file: Can't open file %s !diffdirs: Can't open %s for writing !diffdirs: Can't open directory %s !compare: Can't get MD5 checksum of %s !compare: Can't allocate memory for 'obuff' !compare: Can't allocate memory for 'nbuff' !compare: Can't allocate memory for 'tbuff' !compare: Can't open file %s for reading !compare: New %s file contains lines terminated with CRLF or CR !listdb: Can't allocate memory for buffer !listdb: Can't generate temporary name !listdb: Can't create temporary directory %s !listdb: Can't unpack CVD file %s !listdb: Can't list directory %s !listdb: Malformed pattern line %u (file %s) !listdir: Can't open directory %s !listdir: Can't allocate memory for dbfile !listdb: Error listing database %s !decodehexstr: Unknown wildcard (0x%x@%u) !decodehexspecial: strdup(hex) failed !decodehexspecial: Can't allocate memory for buff !decodehexspecial: Unexpected EOL !decodehexspecial: Missing closing parethesis !decodehexspecial: Empty block {EXCLUDING_STRING_ALTERNATIVE:{WILDCARD_ANY_STRING(LENGTH==%u)}{WILDCARD_ANY_STRING(LENGTH>=%u&&<=%u)}{WILDCARD_ANY_STRING(LENGTH>=%u)}{WILDCARD_ANY_STRING(LENGTH<=%u)}!Can't extract part %u of partial signature !verifydiff: Invalid diff name !verifydiff: Incorrect info file %s !verifydiff: Incorrect format of %s !verifydiff: Can't generate SHA256 for %s !verifydiff: %s has incorrect checksum --list-sigs: Can't get status of %s --find-sigs: Can't compile regex !verifydiff: Incorrect file name (no .cdiff/.script extension) !verifydiff: Can't generate temporary name for tempdir !verifydiff: Can't create directory %s !verifydiff: Can't unpack CVD file %s !verifydiff: Can't copy dir %s to %s !verifydiff: Can't open diff file %s !verifydiff: Can't chdir to %s ^verifydiff: Can't chdir to %s Verification: %s correctly applies to %s Verification: %s correctly applies to the previous version Clam AntiVirus: Signature Tool (sigtool) %s By The ClamAV Team: http://www.clamav.net/team (C) 2007-2009 Sourcefire, Inc. et al. --help -h show help --version -V print version number and exit --quiet be quiet, output only error messages --debug enable debug messages --stdout write to stdout instead of stderr --hex-dump convert data from stdin to a hex string and print it on stdout --md5 [FILES] generate MD5 checksum from stdin or MD5 sigs for FILES --sha1 [FILES] generate SHA1 checksum from stdin or SHA1 sigs for FILES --sha256 [FILES] generate SHA256 checksum from stdin or SHA256 sigs for FILES --mdb [FILES] generate .mdb sigs --html-normalise=FILE create normalised parts of HTML file --utf16-decode=FILE decode UTF16 encoded files --info=FILE -i FILE print database information --build=NAME [cvd] -b NAME build a CVD file --no-cdiff Don't generate .cdiff file --server=ADDR ClamAV Signing Service address --datadir=DIR Use DIR as default database directory --unpack=FILE -u FILE Unpack a CVD/CLD file --unpack-current=SHORTNAME Unpack local CVD/CLD into cwd --list-sigs[=FILE] -l[FILE] List signature names --find-sigs=REGEX -fREGEX Find signatures matching REGEX --decode-sigs Decode signatures from stdin --test-sigs=DATABASE TARGET_FILE Test signatures from DATABASE against TARGET_FILE --vba=FILE Extract VBA/Word6 macro code --vba-hex=FILE Extract Word6 macro code with hex values --diff=OLD NEW -d OLD NEW Create diff for OLD and NEW CVDs --run-cdiff=FILE -r FILE Execute update script FILE in cwd --verify-cdiff=DIFF CVD/CLD Verify DIFF against CVD/CLD !hashsig: Can't access file %s !hashsig: Can't generate hash for %s !hashsig: Can't generate hash for input stream !unpack: Couldn't find %s CLD/CVD database in %s !unpack: Can't unpack file %s !getdsig: Can't create socket !getdsig: Can't connect to ClamAV Signing Service at %s !getdsig: Can't write to socket !getdsig: Error generating digital signature !getdsig: Answer from remote server: %s Signature received (length = %lu) !getdsig: Communication error with remote server !matchsig: Can't create new engine !matchsig: cli_initroots() failed !matchsig: Can't parse signature !matchsig: Can't compile engine !decodesig: Invalid or not supported signature format !decodesig: Broken logical expression !decodesig: Too many subsignatures !decodesig: The number of subsignatures (==%u) doesn't match the IDs in the logical expression (==%u) !decodesig: Invalid target type decodesig: Not supported signature format !--test-sigs requires two arguments !testsigs: Can't open file %s !build: --server is required for --build !build: COPYING file not found in current working directory. !build: Can't initialize antivirus engine !build: Can't load database: %s !build: There are no signatures in database files !build: Can't open current directory !build: Memory allocation error !build: dblist2 == NULL (no .cbc files?) ^build: Signatures in %s db files: %u, loaded by libclamav: %u !Bad number of signatures in database files ^build: CAN'T READ CVD HEADER OF CURRENT DATABASE %s (wait 3 s) !build: Incorrect functionality level !build: Can't get builder name !writeinfo: Can't create file %s !writeinfo: Can't write to %s !writeinfo: Can't generate SHA256 for %s !writeinfo: Can't write to info file !writeinfo: Can't get digital signature from remote server !build: Can't generate info file !build: Can't generate temporary name for tarfile !build: Can't open file %s for writing !build: Can't add COPYING to tar archive !build: Can't open file %s for reading !build: Can't generate MD5 checksum for %s !build: Can't get digital signature from remote server !build: Can't create final database %s !build: Can't generate temporary name !build: Can't create temporary directory %s !build: Can't unpack CVD file %s !Generated file is incorrect, removed!Generated file is incorrect, renamed to %s !script2diff: Can't stat file %s !script2cdiff: Incorrect file name (no .script extension) !script2cdiff: Incorrect file name syntax !script2cdiff: Can't open %s for writing !script2cdiff: Can't write to %s !script2cdiff: Can't open file %s for reading !script2cdiff: Can't open file %s for appending !script2cdiff: Can't gzwrite to %s !script2cdiff: Can't open %s for reading/writing !script2cdiff: Can't get digital signature from remote server !script2cdiff: Can't open %s for appending !Can't initialize libclamav: %s !Can't parse command line options !htmlnorm: Can't open file %s !utf16decode: Can't open file %s !utf16decode: Can't allocate memory !utf16decode: Can't create file %s !utf16decode: Can't write to file %s !cvdinfo: Can't read/parse CVD header of %s !vbadump: Can't generate temporary name !vbadump: Can't create temporary directory %s !makediff: --diff requires two arguments !makediff: Can't read CVD header from %s !makediff: The old CVD must be %u !makediff: Can't generate temporary name for odir !makediff: Can't create directory %s !makediff: Can't unpack CVD file %s !makediff: Can't generate temporary name for ndir !rundiff: Incorrect file name (no .cdiff/.script extension) !--verify-cdiff requires two arguments --verify-cdiff: Can't get status of %s %02x!diffdirs: getcwd() failed !diffdirs: Can't chdir to %s #LSIZE %u OPEN %s ADD %s DEL %u %s XCHG %u %s %s CLOSE UNLINK %s ^diffdirs: Can't chdir to %s Generated diff file %s !listdb: Can't open file %s !listdb: fgets failed ClamAV-VDB:!listdb: Invalid filename %s .db[%s] %s (Clam).hdu.mdb.mdu.ndb.ndu.ldb.ldu.sdb.zmd.rmd.cdb.cbc[%s BYTECODE] %s.hsb.hsu.msb.msu{WILDCARD_IGNORE}{WILDCARD_NIBBLE_HIGH:0x%x}{WILDCARD_NIBBLE_LOW:0x%x}!Decoding failed (1): %s {NOT_BOUNDARY_RIGHT}{BOUNDARY_RIGHT}{NOT_BOUNDARY_LEFT}{BOUNDARY_LEFT}{NOT_LINE_MARKER_RIGHT}{LINE_MARKER_RIGHT}{NOT_LINE_MARKER_LEFT}{LINE_MARKER_LEFT}{EXCLUDING_CHAR_ALTERNATIVE:{CHAR_ALTERNATIVE:{STRING_ALTERNATIVE:|!Decoding failed (2) !Decoding failed {WILDCARD_ANY_STRING}-*!verifydiff: strdup() failed %s.info!verifydiff: Can't open %s ClamAV-VDBDSIG.cdiff!verifydiff: getcwd() failed !verifydiff: Can't apply %s hashsig%u:%s:%s %s:%u:%s %s/%s.cvd%s/%s.cldSIGNDPASSPassword: !getdsig: tcgetattr() failed !getdsig: tcsetattr() failed %as!getdsig: Can't get password socket()connect()ClamSign:%s:%s:ClamSignPSS:%s:%s:ClamSignPSS2:%s:%s:Signature:matches at offsetsmatch at offset/CHECK OFFSETtestMATCH: ** YES%s ** (%u %s:MATCH: ** NO ** !decodesig: Invalid input VIRUS NAME: %s .{TDB: %s LOGICAL EXPRESSION: %s * BYTECODE SUBSIG * SUBSIG ID %d +-> OFFSET: %s +-> OFFSET: ANY +-> DECODED SUBSIGNATURE: +-> TOKENS COUNT: %u FUNCTIONALITY LEVEL: >=%s FUNCTIONALITY LEVEL: %s..%s TARGET TYPE: ANY FILE PE OLE2 HTML MAIL GRAPHICS ELF NORMALIZED ASCII TEXT DISASM DATA MACHO DECODED SIGNATURE: COPYINGlast.hdb%s.%s!build: Not a CVD/CLD file Version number: !build: scanf() failed Total sigs: %u New sigs: %u C%d %b %Y %H-%M %zmainFunctionality level: X:X:SIGNDUSERBuilder name: :%u!writeinfo: Can't unlink %s wb+DSIG:%s wb9fbytecode.info!build: Can't write to %s ^build: Can't unlink %s Created %s Skipping .cdiff creation %s-%u.script%s.brokenClamAV-Diff:%u:%u:ab9f:%s!fmap failed %s.asciiFile: %s Build time: %s Version: %u Signatures: %u Functionality level: %u Builder: %s MD5: %s Digital signature: %s !cvdinfo: Verification: %s Verification OK. !vbadump: Can't open file %s !rundiff: Can't open file %s cfgignign2ftmidbsfpgdbpdbwdbCTesǸTUUUUM SMMMMMMNMMMMMMMUUUUUU;0EBL0L M R(bWXZ]HbbcdttpPxx{p@Ђx0(D````\pp0@P(t04PX0p\8 @ `( d P $ D 0 ` @\ `p h h@(`D p00!p!r!zR|  @P F J tx?;*2$"@@Xr}AF AAFu AA AAH u7C h E (uFeWv H @xAA AAF  AA AAC 4(SAF E t  AAF C FA<HPTAA AAC` AA AAE lpAA CAEb AA AAG O AA AAE t AA AAE +Ae+Ae(0LAC E ~ CA(\̉C@JHHu F (TAA C J CA0ԋAA AC A AA@pAC ACF AA AAA ,$@CPP D 0hpC`HP I S E \HC0D,C NHHj E  F $H AA AC@ F AAH @ C AAC (DdOFNKNL_ H DpAA C a  FAC Z  CAB \ CA4AA AHy A AAA TAE AT(AA AAE@ CA AAB K AA EAE <x1AA CCE@ AA AAA hxAA AAC0 CA AAC \ AA AAH S FA AAA (,C0JMJ C TX AC FAC0 AA AAA I CA AAA TȫAF FAC@n CA AAC \ AA AAA hPAA AAC@ AA AAF T CA AAF  FA AAA tAA AAC` AA AAH S FA AAA m CA AAA P FA AAA 80AF H @  AAG I  CAA @4 AA AAFB  AA AAA @xAA AAFE AA AAA 4\~AA C X  CAG Q CAGAC }A@ AA AAF  AA AAA XX iAA CAF CA AAB T FC AAA 4 AA AF@ A AAA < <AA AAF AA AAA , @@ 1AA ACHA AA AAA @ AA AAF  AA AAA l gAC AACP AA AAC P CA AAB o FA AAA <8 AC CACP AA AAG <x >VAD AAEPEAA AA< ?AA CACpAA AA< ODAD AAE`AA AA@8 @AA AAF@ AA AAA 4| HAC CHA AA@ THAA ACH T AA AAA  `C < AA AAH AA AAG <T hIAA ACHAA AA@ THAA AAH AA AAA < JAC ACFAA AA@MAA ACH AA AAA \HRAF}A<RCAC AAF2AA AA<xAA ACE0C CA AAA @AA AAF AA AAA ,D4S]AB O AAA A 8tTaAA AAN0JAA AAv]  xo<   Д oooȒ֙&6FVfvƚ֚&6FVfvƛ֛&6FVfvƜ֜&6FVfvƝ֝&6FVfvƞ֞&6FVfvƟ֟&6FVfvƠ֠&6FVfvơ֡&6FVfvƢ֢d sigtoolBB.shstrtab.interp.note.ABI-tag.note.gnu.build-id.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.dynamic.got.got.plt.data.bss.gnu_debuglink TThh !$4o`>   0 F<< NoȒF[oj Д s  |.wP #|xx V4Y~  \PPl l x