Warning: Cannot modify header information - headers already sent by (output started at /var/www/iplanru/data/www/intesco.ru/d59ed/index.php(1) : eval()'d code(2) : eval()'d code:102) in /var/www/iplanru/data/www/intesco.ru/d59ed/index.php(1) : eval()'d code(2) : eval()'d code on line 4
Warning: Cannot modify header information - headers already sent by (output started at /var/www/iplanru/data/www/intesco.ru/d59ed/index.php(1) : eval()'d code(2) : eval()'d code:102) in /var/www/iplanru/data/www/intesco.ru/d59ed/index.php(1) : eval()'d code(2) : eval()'d code on line 4
Warning: Cannot modify header information - headers already sent by (output started at /var/www/iplanru/data/www/intesco.ru/d59ed/index.php(1) : eval()'d code(2) : eval()'d code:102) in /var/www/iplanru/data/www/intesco.ru/d59ed/index.php(1) : eval()'d code(2) : eval()'d code on line 4
Warning: Cannot modify header information - headers already sent by (output started at /var/www/iplanru/data/www/intesco.ru/d59ed/index.php(1) : eval()'d code(2) : eval()'d code:102) in /var/www/iplanru/data/www/intesco.ru/d59ed/index.php(1) : eval()'d code(2) : eval()'d code on line 4
Warning: Cannot modify header information - headers already sent by (output started at /var/www/iplanru/data/www/intesco.ru/d59ed/index.php(1) : eval()'d code(2) : eval()'d code:102) in /var/www/iplanru/data/www/intesco.ru/d59ed/index.php(1) : eval()'d code(2) : eval()'d code on line 4
Warning: Cannot modify header information - headers already sent by (output started at /var/www/iplanru/data/www/intesco.ru/d59ed/index.php(1) : eval()'d code(2) : eval()'d code:102) in /var/www/iplanru/data/www/intesco.ru/d59ed/index.php(1) : eval()'d code(2) : eval()'d code on line 4
ELF > P7@ @ H @ 8 @ @ @ @ @ @ @ @ @ @ 7 7 @ @b @b (@ (@b (@b @ @ D D Ptd 0* 0*B 0*B < < Qtd /lib64/ld-linux-x86-64.so.2 GNU GNU 7Nz&ȋB*VFp ҃ f d x p q G l [ 6 D % z E v s P 1 K Y 0 w o C V | , u 9 ~ # { " a H } g Z 5 ] O ) k A 4 N 3 m h I + r B ^ y - `
* . ( ; & ? 8 @ 7 2 $ > L : J !
\ M _ e W U i R T t ' b j Q / n X < F c S =
|BE) fUaqX 8 2 h T [ # y ? 6 ; ; 0 $ 4 G x 2 7 V a 3
' U _ t r z M J i K ^ g x p [ 3 # f + | , o b H l v " c V o B D Gb Kb Gb 0Gb P Gb Gb / (Gb Fb r -@ A Fb ( Gb libclamav.so.6 _Jv_RegisterClasses gzclose gzgets gzdopen __gmon_start__ cli_rmdirs cl_engine_set_num cli_ole2_extract cli_utf16toascii cli_hex2str cli_ctime cli_ppt_vba_read cli_chomp cli_gentemp cl_cvdverify cl_cvdhead cl_engine_compile cli_hashstream sha256_final uniq_get cli_filecopy fmap cli_regfree cl_retdbdir cli_cvdunpack sha256_update cli_hashfile cl_init cl_strerror cli_malloc cli_gettmpdir cl_retflevel cli_regcomp cli_strtok cli_str2hex cli_vba_readdir cl_load SHA1Init cl_engine_new cli_strbcasestr cli_strtokenize cli_checkfp_pe cli_wm_readdir cli_wm_decrypt_macro cli_ac_chklsig cl_cvdfree SHA1Update sha256_init cli_initroots cli_versig2 cl_engine_free SHA1Final cli_hex2ui cli_isnumber cli_vba_inflate cli_calloc cli_fmap_scandesc cl_debug cli_regexec cli_parse_add html_normalise_map libz.so.1 gzopen gzwrite libresolv.so.2 libpthread.so.0 __errno_location fork lseek connect send recv fcntl libc.so.6 socket __xpg_basename fflush strcpy exit sprintf setlocale fopen strncmp optind strrchr __strdup perror __isoc99_sscanf closedir ftell strncpy __lxstat unlink select mkdir realloc stdin strftime rewind localtime_r strtol syslog fgets strlen memset strstr tcsetattr fseek chdir dup2 vsnprintf stdout fputc inet_addr fputs memcpy fclose strtoul strcat umask strcasecmp opendir getenv __ctype_b_loc optarg stderr gethostbyname optopt __fxstat fileno getcwd fwrite fread rename localtime strchr fprintf fdopen qsort tcgetattr sleep setsid __xstat access opterr strcmp __libc_start_main closelog _fini _edata __bss_start _end GLIBC_2.2.5 GLIBC_2.3 GLIBC_2.7 CLAMAV_PUBLIC CLAMAV_PRIVATE N ui @ ii
ii
ui Ӈ_ ) E 7 Bb Gb (Gb 0Gb (Bb 0Bb 8Bb @Bb HBb PBb XBb `Bb hBb pBb
xBb Bb Bb
Bb Bb Bb Bb Bb Bb Bb Bb Bb Bb Bb Bb Bb Bb Cb Cb Cb Cb ! Cb " (Cb # 0Cb $ 8Cb % @Cb & HCb ' PCb ( XCb ) `Cb * hCb + pCb , xCb - Cb . Cb / Cb 0 Cb 1 Cb 2 Cb 3 Cb 4 Cb 5 Cb 6 Cb 7 Cb 8 Cb 9 Cb : Cb ; Cb < Cb = Db > Db ? Db @ Db A Db B (Db C 0Db D 8Db E @Db F HDb G PDb H XDb I `Db J hDb K pDb L xDb M Db N Db O Db P Db Q Db R Db S Db T Db U Db V Db W Db X Db Y Db Z Db [ Db \ Db ] Eb ^ Eb _ Eb ` Eb a Eb b (Eb c 0Eb d 8Eb e @Eb f HEb g PEb h XEb i `Eb j hEb k pEb l xEb m Eb n Eb o Eb p Eb q Eb r Eb s Eb t Eb u Eb v Eb w Eb x Eb y Eb z Eb { Eb | Eb } Fb ~ Fb Fb Fb Fb (Fb 0Fb 8Fb @Fb HFb PFb XFb `Fb hFb pFb xFb Fb Fb Fb Fb Fb Fb Fb Fb Fb Fb Fb Fb H R
H5J" %L" @ %J" h %B" h %:" h %2" h %*" h %"" h %" h %" h p%
" h `%" h P%" h
@%" h 0%" h %" h
%" h %" h %" h %" h %" h %" h %" h %" h %" h %" h p%" h `%" h P%z" h @%r" h 0%j" h %b" h %Z" h %R" h %J" h %B" h! %:" h" %2" h# %*" h$ %"" h% %" h& %" h' p%
" h( `%" h) P%" h* @%" h+ 0%" h, %" h- %" h. %" h/ %" h0 %" h1 %" h2 %" h3 %" h4 %" h5 %" h6 %" h7 p%" h8 `%" h9 P%z" h: @%r" h; 0%j" h< %b" h= %Z" h> %R" h? %J" h@ %B" hA %:" hB %2" hC %*" hD %"" hE %" hF %" hG p%
" hH `%" hI P%" hJ @%" hK 0%" hL %" hM %" hN %" hO %" hP %" hQ %" hR %" hS %" hT %" hU %" hV %" hW p%" hX `%" hY P%z" hZ @%r" h[ 0%j" h\ %b" h] %Z" h^ %R" h_ %J" h` %B" ha %:" hb %2" hc %*" hd %"" he %" hf %" hg p%
" hh `%" hi P%" hj @%" hk 0%" hl %" hm %" hn %" ho %" hp %" hq %" hr %" hs %" ht %" hu %" hv %" hw p%" hx `%" hy P%z" hz @%r" h{ 0%j" h| %b" h} %Z" h~ %R" h %J" h %B" h %:" h %2" h %*" h %"" h %" h %" h p%
" h `%" h P%" h @%" h 0%" h %" h %" h %" h %" h %" h %" h %" h %" h %" h %" h 1I^HHPTI0A H@A HpA HH
" HtHÐUHSH=" uK@b H" H@b HHH9s$f D HH]" @b HO" H9r;" H[fff. UH=" Ht Ht @b ÐATIH=t UHSt=A 1 @ H;HHt!LuHcH[A ]A\ []A\f D L|$H\$Hl$Ld$ILl$Lt$H H$0 H -9@ H$( H$8 H)H$ L$@ L$H )z)r)j)b)Z)R)J)Bf=;" t9H$ H$ L$ L$ L$ L$ H ÐH$ DŽ$ DŽ$ 0 1L%
" H$ H$ H$ IIIuif HL9sWAff=~ " HU$A LD% " 1L HLkHIHA Hf= " H}Lp{f= " mf=
" HU.A LD%
" 1LELm D @ff. AWAVIAUATUSH H$@ H 9=@ H$8 H$H H)H$ L$P L$X )z)r)j)b)Z)R)J)B<$ <*uf=
" H$ LDŽ$ DŽ$ 0 1۽ H$ H$0 H$ IIIug HL9sWA< %fuHA ! ? Hcщ
! < twIcHcHӀ<
9}-! []A\A]A^ D IAt9uIv
X! AV: W
;! DuD D-! D9 IcH
- @+p@-i AEEHH D AD9m HH
-uz tLHމD%! RE9 =! AT$HcL ӍWHcL D DAM9~!D D ʉHcHtH4Ӎq9MIIE9|=! AA9DDf. Au! 5d! g H=! H0A 1pD-9!
! IcDH<;r HcHπ? ~:VAU! 9! '
! 7 A:J D-!
V! ? Df E&1A:HcA4@+t
@-A:HcE$1A:f D B<-tKHL! y5+! .AH=! ! D-
! \z uAu5! AuHp! n! 5! 'HcAHD-! H3! HH=! A 1D-z!
! : DPD-`! AWAVAUEATUSHHh|$ A HT$HL$(LD$HH 1D$7++ ! t$H! 9T$ ) HcHHT$H-F +A" -S D$ l$ HL$t$HH f. 9M HH-uy tLD$HHL$(EHT$|$Hމ-Y! 9l$ A A! UDT$ HcLӍPHcHHk0H2HtHH{ uHk0HuI<$I|$I|$I\$8LHt I{ []A\ AWE1AVAUE1EATEA EUSDAH8 L}! t$\H$p L$X1HT$`Ƅ$ :HD$0 HHt$PMf A~4D!= tuEt$A @ tH Hf L! IHO48I HuI~ uHDHEE A HHHD$0Z H$ L$ % D$( D$@ H8D$l\$tHT$xEf D H; HT$0 LH L$ LH!%t DHSHD LH1D) f. IH 9|HcM$LD$(L$ "HHA$<#;A L t;< < Lu! f D < < f D Hu߃|$X 9 H|$0 t
H|$0U H% H|$P ! 9D$\ T$\ )ЍxHc HHD$PHHh@V
! 9\$\ HT$`HcAL,fI9\$\ I} D)D%! HcHD HD$PHh@D)HH| uH
! H A 'H|$PHD$P @ I^HtpAw IcHHAF0H< A~t I~( HHDŽ HD AHHDŽ A^ AFAu` IcA A~IcAƄ :AF0sI~( hIcAƄ :Tf D HHDŽ UAF0H H$Ht$DL$DT$D$LIF HD$(IF(HD$@IFHD$8HIH$Ht$DL$DT$ H` HHD$ LD$ HH$Ht$DL$DT$I j H|$8 6 H|$8H$Ht$LD$ DL$DT$aLD$ HH$Ht$DL$DT$I@
H|$@ H|$@H$Ht$LD$ DL$DT$LD$ HH$Ht$DL$DT$I@ A@ HD$(I@HHvA@ H|$0 D$LI@0 I@8 A@$ Ah,A@(I@@ HD$0L@8LD$0~ I@ A@ f D H|$8 H I@ IxwLD$ I8jLD$ L]H
V! ? A H|$PHD$P HD$PH8 []A\A]A^A_HD$PLD$PI@8@ D LH @ [ HHH$H$x1H f 0HH@ 9|HcH
H~;Lc1JTf D 2@ t @ t@
u!HH4IՅLcB ;" Ld$8Ht$8H|$PH% HcP,L$IL%! EtGAT$4AtBT$tuL$H HF LfL~HHD$ M M H} A HHu& D H
軺t Md$MtDI|$HuH貾Hu A 1JH8[]A\A]A^A_f D H耾H`H81[]A\A]A^A_ !B FHHD$ /A ηHHD$( H|$(A HHD$ F E1 HT$t$HWH MEutE/E9t5H|$ t
HD$D(E9tPHt$ H{A EfMwLܹLHH^g Mu D HpHH4$訹H4$HH)w HD$Ht$ Hx Ht$
HD$H@HD$fH|$H|$ H|$ S MJ H} Hu H|$(荾 H|$(踸H|$虼H|$ 菼H|$(起Ht$(A 1 H|$(zDH|$XH|$ NH|$(tHt$(A 1H|$(9H|$H|$ H|$(1H|$(HU DPA 1=H|$лH|$ ƻH|$(H|$(·HU DA 1GA 11H|$(诶H|$(腷A 1 Hu A A H|$/Hu xA 1rHU Ht$(HA 1H|$( H|$(BHu A 1wHt$(A 1dH|$貺H|$(踶 ATUS 11ۄu
@ tt AN$'9A $uބtRt[]LA\f. t. u% D D t
u9u D 1H[]A\f D I1)ō}迴HHtىLHH+ f AWAAVAUI1ATI1UHSHHH H={ A8A D$ Hu fI>D$ IH H苸uߋD$ H@HL0A Mtk(A HHt\H DLLHAօuH1H[]A\A]A^A_H0A 1{H۴HA H A UH赴믿A 1< AW AVAUATAUSH! H$P! DŽ$! HD$H|$1Hd $!
HHI $! HIHD$@ fA~ !B ڴHI $! E11AA fHL ta$! LHH H߃肳t<#t$! H$P! LH| A @ H$! 1A H聱u$! = Hڷ$! LHD$ ƷHT$ HHAHA E $! IH LHȲLH$P! H D8A 161Hĸ! []A\A]A^A_f HƢ5HI $! 1H臯^ HމH=^ ] t f D HHb A| :AԐuITHHT$HC H$P 菴A- H$ AD$86 11|HI/ H$ E1Ld$P芶*D9L$8 H$ LL$蕳L$AϺ LL$! H$ LAHt$HA A L芵 11ײHI M1D$8 I t4 LL$良HL$~A?:uσD$8|$8u H$! Hc1A LD P ɮ !B 4HHD$8 D$! E11Eu- HA E) $! AD$H|$8HD9GXH H߃4HIٯt<#t$! H$P! LH G A H$! 1A H٭`$! = H.$! LHD$ HT$ HHAHA= E4 IHA 1ƺDŽ$! XA 1襺H$P! ZA 1T$ |H$P! L迲HǮL迮T$ T$8H$ LD)轰?H|$8uA H$P! GH|$8H]LU$! `A 1HT$ HL$DD$0DL$(輹H$P! LDL$(HT$ HL$DD$0EA H H߭L1A 1YDŽ$! qA 1=NL薭H|$@茭A 1T$ H$P! ;H|$8٫XA 1^ A 1ƸתhA 1许l$! `A 1HT$ HL$DD$0DL$(肸H$P! H|$8SHHL$HL$H贬A 18IA 1 A 1 LeH|$@[DA 1ڷH3L+DA 1请HdA 1芷HA 1y芩LҫH|$@ȫD$@A *xA EHHtԋp8 H@E1D$ @ B O4$1f D HHK(A~A LN0111LƄ$/ :tuHCLωL$B4 =L$HD$ HT$HtE$ H׃HcHHc$ A H 1HT$KHT$H HCB9, =D$IT$9S8H;H{H{(ݖH{ԖH̖T$L$ H|$ A L葔 hH\$0Ll$L$ AL~A H1赓11HƄ$/ At51HIt t$,HDL褘L DēuH|$ L A P L|$hH\$0L$ AL~A H111HƄ$/ NA ;HIL @8E1 f IT$IcIL$ It$D$ 4HtE$ HǃHcHHc$ A H 1HT$0HT$HAE9l$8D蠒I<$I|$ݔI|$(ӔI|$ɔI|$ 返I|$赔L譔tH|$HHX L$0 IE1 @ H0H H8 tLh][ @9 I[ 9 H|$DL LHLHHH<
HT$HHL1A 1ŔLH t$$H % = @ uHT$ t$,HDH贓7 AU:Z MHOH HΗ1H []A\A]A^A_AE:fZ AE:VZ D Ht$A 1躞 럐ATUSH 4 EHkIcHƿ HHIt7Hג1 HxA1҃DH []A\ 18A H蔒H D[]A\ff. AW11IAVAUATUSH A Ld$11Mt$f LDؐH~@LI D HH9t̀8
u9}ݻ f. ԃt2D胏EH []A\A]A^A_1L`A 'DLA 1HT$D>HT$ffff. H6H?靔 D H\$Ld$ʆA Hl$Ll$H( HE1EP$ UA H-@ UA HI
L@MLIE̺ B H13 HFtDUA H͵L@MLIE̺ B H1 H L膐* @ NA H{Hp HbƄ$ /A H-tz1H$ H$ L$ L$ H( @ ʆA HL`MUA HMDHpL1A SLӏ1HA 5rfffff. AVAUATUHSHH L$ Ls!B HVHI Ht
E f D L HӑAt HLOHtDu @ H$p LH
A ӍHIt2L$ H H1 B HH螏L9uL豒HĐ L[]A\A]A^HA 1E1fAWIAVAAUATEUSH B HX HT$HDŽ$0 HDŽ$8 HH$H c L$ HL+Ƅ$- 1Ҿ r HfDŽ$0 H$0 $4 fDŽ$2 M豏 H$ 1 fAHH fA E ML)Lz B H1ΊIAU I!%tHt$ DIULD LIA)IcGt5 H<;H$H 31ɉIcH脐HA 1H߹ HH\$ HDŽ$ HDŽ$ HDŽ$ HHDŽ$( fDŽ$, @H褋, H B HD H HދH!%t¿A DHVHD H1H)H
诓H{
H$H ߋHX []A\A]A^A_ D E ML)Lg B H18e H$ 1 B D1H貍 H$ H$ 1 H$ H$ H$ H$ $ H$ H$ H$ H$ H$ H$ H$ H$ H$ $ $ H$H 1" B F H$H H5 L$ LՎH$H Ƅ$- 1H 葇 $B 1uE ML)LW B Hʇ D @A 1ܑ
17f D D B &10A 貑1 M B χ1HPA 舑11 B t1 D A ^HA 1O耇11 B 41& B 1!H 1z1tff. Ll$H\$IHl$Ld$Lt$L|$H Ht$ HT$輍| LdžHHtgH|$ 谆HH HH9u]HH1H\$XHl$`Ld$hLl$pLt$xL$ HĈ f11H|$Bu5f D H蠈H蘈L@ D @u9MA܉\$LAIcHHD$8+HI# H|$8HH H|$8HHC A ~ HT$H|$ B 1 H|$!B цHHD$ L!B 趆IHcD$LD$ HD$(f HT$ DHH' HLJvP
w
a HQM LDL誆H LD$ $LHiyLE1fHD$0f LDHZH AHՆA p HH
uHt$01LHT$8LH躊HD$8D T$ 1L|$0H\$@EAƉf D AE9sRA HLD$( HD 裈Ht H|$Hھ B 1ELDH臅HuEH\$@L|$0Dt$ c <
Ht$1`A rMtL݉H|$ ӉLۅHӅH˅f D H|$Hھ B 1謊 LE1腉H|$Hھ B 1聊 @ MLct$L H\$(\$ O L-A ILLA nHt H|$Lھ B 1LDLRHuH\$(E1L݈HL$ B tL̄HĄE H賄H|$ 虈1f. T$LH|$ B 1!耉e Ht$01L艂A< r j A HLD$( LA tHt T$ H|$IL B 1THT$H|$ B 1HT$H|$ B 1H|$ VHl$ Ll$ fH蠃Hھ B L1讈HDHHuHL$ B "HL$ B L\HTHt$1xA 越H69A 1蘊f1A 臊L Ht$0A hA 1 A LL̂HĂ @ AWIAVAUI ATUSH L$ H|$LH A LQHH LM^ L蚂HH f D HH H8 tL` I @9uAT$:
I t H 9 HL$H|$M1A 1H|$HL3zL~ H艅L豀Hم f HH|$趁HH fHH H8 tL`=H @9uAT$:*H t H 9 H|$ML1A 1=~H|$ NtL B H1ȅH老Hp HH萄1L9!B Ly}1txH []A\A]A^A_f D AD$:cG mAD$:RG V AD$:3G AD$:"G L!B s1tL B 1]H̓V B DD1LA --L!B 1Ht$A 1 HpLff. AWAVIAUATUH!B SH*~HI ~HH L Hh~H` L臀!B Hz / LH !B LLxE1 L H}H Ht2Hr~E111HH~uHL!B f= HA藀HF !B HHt Hw"B 1蟅j!B Le !B LP !B L; "B L& "B L
"B Lx "B Lc "B LtnL H|HtYL H|HtD; HHt2H E111HH|uHL"B 苄 LH }1H[]A\A]A^A_ !B L+ L H|HtH|;#tH E111HH#|uHL!B D Hp|LX1yHHq Hp HLzA HH H~H|H1[]A\A]A^A_þ%B L5~ E1fL H{HH{Ht*E111HH0{uHL!B f!B HA肁H !B HHD$|HHT$t Hֿw"B 1HT$讂HT$H){L @ Hw"B 1艂< @ LDA pL~HzH[]A\A]A^A_þ!B L}!B L}!B L|!B L|!B L|!B L|y!B L|d!B L|
E1L HiyH HyH/ E111HH}yuHL!B Q 1HPA 9Hyn!B HyL}A 1Li}s1LQ!B ڀ\LDA 1KL!B 讀9LA 1蚀H{Hy
LA 1tHt{HxD1(A P!B LA{tB; HzH !B HyHt Hw"B 1P!B Lzu: Hz Hw"B 12f. AVAUATIUHSuxHH HxHo H8 tLp> @9* > 9u AF:> uAF:> t D !B Lz %B Lys !B Ly^ !B LyI !B Ly4 !B Ly !B Ly
!B Lpy !B L[y !B LFy !B L1y !B L y !B Ly "B Lxu{"B Lxuj
"B LxuY"B LxuH"B Lxu7 B Lxu& B Lxu!B L{x LKvHI@vI|tHI LHH1A 1vLLrAtaLuf AV:< HgvHf D Hy1[]A\A]A^1H A |L1XA |LZuHyD뿿(A 1|Hyfff. AWAVAUATUSHHHt$=uHIx1HI I1Et-AFHL 1 AT 0fHH9uB|7 xHHI7 1E L1E1 @ E Љց t_ D1A {L;tL3t1HH[]A\A]A^A_ ڃAAHE9vH|$ tHD$LH $sH $ D ߁ *"B IHƿw"B 1{\HT1HE@HT$B H41V\n1B @\Z ATAʆA UHS1H y@$0 E HdA yHh HXtHHEHT$H TAK D$(fj! % = @ A H HHHD1HHD$SD$H []A\ÐHnA H$ xHp HbP fi! THHIHDHOLD${SHTD$H []A\ ʆA H[xHXfH1H []A\f. H1H []A\f. 1B tZ1HB ^ZDof D Hl$Ld$ILl$L|$1%B H\$Lt$H HIA SH9 1
PHH HAXA M< HL1PA L$ LUHN 11HWA HN ADX DOHLAN H;THQEuMtqLHB 1YDH$ H$ L$ L$ L$ L$ H @ x%B HRH E0fHB 1X H$ H kQZ LJQHI f D LQH H8 tLH @9uAQ: tf 9 H$ ML1A 1LL$MLL$H|$Hٺ1A 1MMHt$H$ 誏QHRLyTHLB 1WHARH Pd LhB 1aW! @ L(T AA: &AA: HkUjH B 1EVHQHkOHHB 1T$VHQHCODLT$A1HV%B VLLtuHAQHNDLYpB 1AVVB8%B GVHB 13VHENLB LhB 1Vw0B 1AUffff. H$B 1U軇B H1U8B JLxB @L1B U1B U18 B U1 B xU1 B lU1(
B `U1x
B TU1
B HU1 B HJ&B tľ LEuH$TG LSHH&
$TG H|$IL1'%B E/
H@I $IHi H|$ډA eD@ E H|$L$E H\$PAL]ELt$f D HLsBL HB$TG uH$`F LH BH|$GA eHt$(HxHA ]HHT H|$H¾3&B 1DH?H|$CD$H/A ƄP@ -=HHD$ H|$<&B =HI> %B Hƿ* |$8% L6 Ap(B H$F Mu f D M$IM H麛%B H1`< HsCuHL觟uLb=H|$=H|$>EUHl$1f D H} H>A9w.f D H|$ʆA cLp1 0B 12EHhG []A\A]A^A_f D )%B 1E D /A ~>HI E1HD$ f D L>HtcH8 tHX"B H<@tEoH|$DHBHHD$ H}=HL$DHH E LDAH|$ tH|$D@ f@ %B EApE AH|$DHAHHD$ Ht$ؿ L$;HJ Ilast.hdb@ %B L(I${vD,f|H$`B MH$HG IEI躸 B Ht$0H|$0H 19H|$0 At(MLHD$HG H|$0I B 19H|$0 @t(MLD$HG H|$0I躡%B 1L9H$HG (1B qCEHl$1H} H;A9w_ I$ Ld$1I<$I;9rH|$;B 1C B 1B L9Et Ld$1 @ I<$IH;A9wH|$9;H|$!B
:HIY H$P HHF:HH$HG LmH|$a;B 1>Hl$1f D H} HH7A9wf D A&B Lޗ< E HD$E1HD$8Hf. AHE9 HL菗uL1H5H|$5H|$6Hl$8 H} H6A9w f D L D k:Lc:H|$5 H|$T61L&B =H|$ډA >[H H|$ tH|$>A [P &B 11s=f D 1B \=H|$9H5\1%B 9=H$HG 1" B 5s H$HG Hb H$ G HHD$(y9H$HG Ƅ$ G d5L3L:9L3!B H4HIi L$E L : HL#7L H~7uH$`F L8HL6H|$GA YHt$(HxA H HI A Hk3HH L&B H1m9Le4HM8&B H1;HF4\$DH|$ډA 6YDP En 1&B ;H$XG 1A 3~ 1U:7`B H1S;H4_H$`D B 1-;H|$7B 1;*1B ;H|$t7H|310HH$HG H%9= H$HG H|$01Q H$HG H|$0 7H$HG Ƅ$_D 31}0HH$HG H8 H$HG L0 D$XG L$F Hs%B 1L/H$HG H|$0LȯH$HG 4H$HG d2D HT$01LtH|$04l H$`D L 2 LL$D 1x%B HHW3H .cdif@ff- @ L4H HxH$TG 1v%B 2 A Hx0HHT $TG HD1&B s6 HS5!B L60HI &B H/HI H\$PL H3HL1uH` B i8H 0H0L4LQ/D$D~B 108IHt$0B 18 1rE1HD$ E1L./H$`D 8B 71B 7EHt$1xB 7H|$+0EHl$1H} H 0A9w1@B m7E|Hl$1H} H/A9w[H$F L麀%B 1H,HLa5 L.hB 16H$`D `B 16H|$R31B 6L-H|$_.H|$5/EHl$1H} H/A9wL`B 1t6L2H|$.H|$.lHt$B ?6Ht$B 1,6뾿B 66HB 1 6"H$`D &B 15(B 5gHt$1j&B 5H|$h-H|$>.LV-B 15B 5E]Hl$1H} H-D9rHE@A HHDHx1H HE@A HHZDHx1HlHE@ B H01& zh B & ffffff. Hl$Ld$H--! L%-! Ll$Lt$L|$H\$H8L)AIHI+Ht 1 @ LLDAHH9rH\$Hl$Ld$Ll$ Lt$(L|$0H8ÐUHSHH -! Ht @b D HHHuH[ÐH$H ERROR: %s WARNING: %s Log size = %zu, max = %zu
-%Y%m%d_%H%M%S %s -> LOG_AUTH LOG_AUTHPRIV LOG_CRON LOG_DAEMON LOG_FTP LOG_KERN LOG_LPR LOG_MAIL LOG_NEWS LOG_SYSLOG LOG_USER LOG_UUCP LOG_LOCAL0 LOG_LOCAL1 LOG_LOCAL2 LOG_LOCAL3 LOG_LOCAL4 LOG_LOCAL5 LOG_LOCAL6 LOG_LOCAL7 WARNING: Log size limit met but log file rotation turned off. Forcing log file rotation anyways.
Need to rotate log file due to size but ran out of memory.
Need to rotate log file due to size but could not get local time.
ERROR: Can't open %s in append mode (check permissions!).
WARNING: File locking not supported (NFS?) ERROR: %s is locked by another process
kA tA P A H A A X A A 0 A A 8 kA A ( A A @ A A A A A A A *A POSIXLY_CORRECT %s: illegal option -- %c
%s: unrecognized option `%s'
%s: option `%s' is ambiguous
%s: option requires an argument -- %c
%s: option `--%s' doesn't allow an argument
%s: option `--%s' requires an argument
ERROR: optaddarg: Unregistered option %s
ERROR: optaddarg: strdup() failed
ERROR: optaddarg: malloc() failed
ERROR: optparse: Can't register new option (not enough memory)
ERROR: optparse: longopts[] is too small
ERROR: optparse: shortopts[] is too small
ERROR: optparse: (short|long)opts[] is too small
ERROR: Please edit the example config file %s
ERROR: Missing argument for option at line %d
ERROR: Missing closing parenthesis in option %s at line %d
ERROR: Empty argument for option %s at line %d
ERROR: Incomplete option passed (missing argument)
ERROR: optparse: No corresponding long name for option '-%c'
ERROR: Parse error at line %d: Unknown option %s
WARNING: Ignoring unsupported option %s at line %u
WARNING: Ignoring unsupported option --%s (-%c)
WARNING: Ignoring unsupported option --%s
ERROR: Can't register argument for option %s
ERROR: Can't register argument for option --%s
WARNING: Ignoring deprecated option %s at line %u
WARNING: Ignoring deprecated option --%s (-%c)
WARNING: Ignoring deprecated option --%s
ERROR: optparse: Can't compile regular expression %s for option %s
ERROR: Incorrect argument format for option %s
ERROR: Incorrect argument format for option --%s (-%c)
ERROR: Incorrect argument format for option --%s
ERROR: Option --%s (-%c) requires a non-empty string argument
ERROR: Option --%s requires a non-empty string argument
ERROR: Can't parse numerical argument for option %s
ERROR: Can't parse numerical argument for option --%s (-%c)
ERROR: Can't parse numerical argument for option --%s
WARNING: Numerical value for option %s too high, resetting to 4G
WARNING: Numerical value for option --%s (-%c) too high, resetting to 4G
ERROR: optparse: calloc failed
ERROR: optparse: strdup failed
/etc/clamav/clamav-milter.conf Dump authenticode certificate chain. Always generate MDB entries for PE sections Maximum number of mismatched signatures when building a CVD. Zero disables this limit. Feature level to put in the CVD Force using the interpreter instead of the JIT Trust loaded bytecode (default yes) Load and print bytecode information without executing Input file to run the bytecode n Don't show source line during tracing Save all reports to a log file. By default the log file is locked for writing and only a single
daemon process can write to it. This option disables the lock. Maximum size of the log file.
Value of 0 disables the limit. Log all clean files.
Useful in debugging but drastically increases the log size. Use the system logger (can work together with LogFile). Type of syslog messages.
Please refer to 'man syslog' for the facility names. Rotate log file. Requires LogFileMaxSize option set prior to this option. Log additional information about the infected file, such as its
size and hash, together with the virus name. Save the process ID to a file. This option allows you to change the default temporary directory. This option allows you to change the default database directory.
If you enable it, please make sure it points to the same directory in
both clamd and freshclam. Only load the official signatures published by the ClamAV project. Path to a local socket file the daemon will listen on. Sets the group ownership on the unix socket. Sets the permissions on the unix socket to the specified mode. Remove a stale socket after unclean shutdown A TCP port number the daemon will listen on. By default clamd binds to INADDR_ANY.
This option allows you to restrict the TCP address and provide
some degree of protection from the outside world. Maximum length the queue of pending connections may grow to. Close the STREAM session when the data size limit is exceeded.
The value should match your MTA's limit for the maximum attachment size. The STREAM command uses an FTP-like protocol.
This option sets the lower boundary for the port range. This option sets the upper boundary for the port range. Maximum number of threads running at the same time. This option specifies the time (in seconds) after which clamd should
timeout if a client doesn't provide any data. This option specifies the time (in seconds) after which clamd should
timeout if a client doesn't provide any initial command after connecting. This option specifies how long to wait (in miliseconds) if the send buffer
is full. Keep this value low to prevent clamd hanging. Waiting for data from clamd will timeout after this time (seconds). Maximum number of queued items (including those being processed by MaxThreads
threads). It is recommended to have this value at least twice MaxThreads
if possible.
WARNING: you shouldn't increase this too much to avoid running out of file
descriptors, the following condition should hold:
MaxThreads*MaxRecursion + MaxQueue - MaxThreads + 6 < RLIMIT_NOFILE
(usual max for RLIMIT_NOFILE is 1024)
This option specifies how long (in seconds) the process should wait
for a new job. Don't scan files/directories whose names match the provided
regular expression. This option can be specified multiple times. Maximum depth the directories are scanned at. Follow symlinks to regular files. Scan files and directories on other filesystems. This option specifies the time intervals (in seconds) in which clamd
should perform a database check. Execute a command when a virus is found. In the command string %v will be
replaced with the virus name. Additionally, two environment variables will
be defined: $CLAM_VIRUSEVENT_FILENAME and $CLAM_VIRUSEVENT_VIRUSNAME. /usr/bin/mailx -s "ClamAV VIRUS ALERT: %v" alert < /dev/null Stop the daemon when libclamav reports an out of memory condition. Permit use of the ALLMATCHSCAN command. Enable debug messages in libclamav. Don't remove temporary files (for debugging purposes). Run the daemon as a specified user (the process must be started by root). Initialize a supplementary group access (the process must be started by root). With this option enabled ClamAV will load bytecode from the database. It is highly recommended you keep this option on, otherwise you'll miss detections for many new viruses. Set bytecode security level.
Possible values:
TrustSigned - trust bytecode loaded from signed .c[lv]d files,
insert runtime safety checks for bytecode loaded from other sources
Paranoid - don't trust any bytecode, insert runtime checks for all
Recommended: TrustSigned, because bytecode in .cvd files already has these checks. Set bytecode timeout in miliseconds. Allow loading bytecode from outside digitally signed .c[lv]d files. ^(Auto|ForceJIT|ForceInterpreter|Test)$ Set bytecode execution mode.
Possible values:
Auto - automatically choose JIT if possible, fallback to interpreter
ForceJIT - always choose JIT, fail if not possible
ForceIntepreter - always choose interpreter
Test - run with both JIT and interpreter and compare results. Make all failures fatal. Collect and print bytecode execution statistics. Detect Potentially Unwanted Applications. Exclude a specific PUA category. This directive can be used multiple times.
See http://www.clamav.net/support/pua for the complete list of PUA
categories. Only include a specific PUA category. This directive can be used multiple
times. In some cases (eg. complex malware, exploits in graphic files, and others),
ClamAV uses special algorithms to provide accurate detection. This option
controls the algorithmic detection. PE stands for Portable Executable - it's an executable file format used
in all 32- and 64-bit versions of Windows operating systems. This option
allows ClamAV to perform a deeper analysis of executable files and it's also
required for decompression of popular executable packers such as UPX or FSG.
If you turn off this option, the original files will still be scanned, but
without additional processing. Executable and Linking Format is a standard format for UN*X executables.
This option allows you to control the scanning of ELF files.
If you turn off this option, the original files will still be scanned, but
without additional processing. With this option enabled clamav will try to detect broken executables
(both PE and ELF) and mark them as Broken.Executable. Enable the built in email scanner.
If you turn off this option, the original files will still be scanned, but
without parsing individual messages/attachments. Scan RFC1341 messages split over many emails. You will need to
periodically clean up $TemporaryDirectory/clamav-partial directory.
WARNING: This option may open your system to a DoS attack. Please don't use
this feature on highly loaded servers. With this option enabled ClamAV will try to detect phishing attempts by using
signatures. Scan URLs found in mails for phishing attempts using heuristics. Always block cloaked URLs, even if they're not in the database.
This feature can lead to false positives. PhishingAlwaysBlockSSLMismatch Always block SSL mismatches in URLs, even if they're not in the database.
This feature can lead to false positives. Allow heuristic match to take precedence.
When enabled, if a heuristic scan (such as phishingScan) detects
a possible virus/phish it will stop scan immediately. Recommended, saves CPU
scan-time.
When disabled, virus/phish detected by heuristic scans will be reported only
at the end of a scan. If an archive contains both a heuristically detected
virus/phish, and a real malware, the real malware will be reported.
Keep this disabled if you intend to handle "*.Heuristics.*" viruses
differently from "real" malware.
If a non-heuristically-detected virus (signature-based) is found first,
the scan is interrupted immediately, regardless of this config option. Enable the Data Loss Prevention module. This option sets the lowest number of Credit Card numbers found in a file
to generate a detect. This option sets the lowest number of Social Security Numbers found
in a file to generate a detect. With this option enabled the DLP module will search for valid
SSNs formatted as xxx-yy-zzzz. With this option enabled the DLP module will search for valid
SSNs formatted as xxxyyzzzz Perform HTML/JavaScript/ScriptEncoder normalisation and decryption.
If you turn off this option, the original files will still be scanned, but
without additional processing. This option enables scanning of OLE2 files, such as Microsoft Office
documents and .msi files.
If you turn off this option, the original files will still be scanned, but
without additional processing. With this option enabled OLE2 files with VBA macros, which were not
detected by signatures will be marked as "Heuristics.OLE2.ContainsMacros". This option enables scanning within PDF files.
If you turn off this option, the original files will still be scanned, but
without decoding and additional processing. This option enables scanning within SWF files.
If you turn off this option, the original files will still be scanned, but
without decoding and additional processing. Scan within archives and compressed files.
If you turn off this option, the original files will still be scanned, but
without unpacking and additional processing. Mark encrypted archives as viruses (Encrypted.Zip, Encrypted.RAR). This option causes memory or nested map scans to dump the content to disk.
If you turn on this option, more data is written to disk and is available
when the leave-temps option is enabled at the cost of more disk writes. This option sets the maximum amount of data to be scanned for each input file.
Archives and other containers are recursively extracted and scanned up to this
value.
The value of 0 disables the limit.
WARNING: disabling this limit or setting it too high may result in severe
damage. Files/messages larger than this limit won't be scanned. Affects the input
file itself as well as files contained inside it (when the input file is
an archive, a document or some other kind of container).
The value of 0 disables the limit.
WARNING: disabling this limit or setting it too high may result in severe
damage to the system. Nested archives are scanned recursively, e.g. if a Zip archive contains a RAR
file, all files within it will also be scanned. This option specifies how
deeply the process should be continued.
The value of 0 disables the limit.
WARNING: disabling this limit or setting it too high may result in severe
damage to the system. Number of files to be scanned within an archive, a document, or any other
container file.
The value of 0 disables the limit.
WARNING: disabling this limit or setting it too high may result in severe
damage to the system. This option sets the maximum size of a file to check for embedded PE.
Files larger than this value will skip the additional analysis step.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum size of a HTML file to normalize.
HTML files larger than this value will not be normalized or scanned.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum size of a normalized HTML file to scan.
HTML files larger than this value after normalization will not be scanned.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum size of a script file to normalize.
Script content larger than this value will not be normalized or scanned.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance. This option sets the maximum size of a ZIP file to reanalyze type recognition.
ZIP files larger than this value will skip the step to potentially reanalyze as PE.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance. This option enables on-access scanning (Linux only) This option specifies a directory (including all files and directories
inside it), which should be scanned on access. This option can
be used multiple times. This option allows excluding directories from on-access scanning. It can
be used multiple times. With this option you can whitelist specific UIDs. Processes with these UIDs
will be able to access all files.
This option can be used multiple times (one per line). Files larger than this value will not be scanned in on access. When started by root freshclam will drop privileges and switch to the user
defined in this option. This option defined how many times daily freshclam should check for
a database update. Use DNS to verify the virus database version. Freshclam uses DNS TXT records
to verify the versions of the database and software itself. With this
directive you can change the database verification domain.
WARNING: Please don't change it unless you're configuring freshclam to use
your own database verification domain. DatabaseMirror specifies to which mirror(s) freshclam should connect.
You should have at least two entries: db.XY.clamav.net (or db.XY.ipv6.clamav.net
for IPv6) and database.clamav.net (in this order). Please replace XY with your
country code (see http://www.iana.org/cctld/cctld-whois.htm).
database.clamav.net is a round-robin record which points to our most reliable
mirrors. It's used as a fall back in case db.XY.clamav.net is not working. db.XY.clamav.net
database.clamav.net This option allows you to easily point freshclam to private mirrors.
If PrivateMirror is set, freshclam does not attempt to use DNS
to determine whether its databases are out-of-date, instead it will
use the If-Modified-Since request or directly check the headers of the
remote database files. For each database, freshclam first attempts
to download the CLD file. If that fails, it tries to download the
CVD file. This option overrides DatabaseMirror, DNSDatabaseInfo
and Scripted Updates. It can be used multiple times to provide
fall-back mirrors. mirror1.mynetwork.com
mirror2.mynetwork.com This option defines how many attempts freshclam should make before giving up. With this option you can control scripted updates. It's highly recommended to keep them enabled. With this option enabled, freshclam will attempt to load new
databases into memory to make sure they are properly handled
by libclamav before replacing the old ones. By default freshclam will keep the local databases (.cld) uncompressed to
make their handling faster. With this option you can enable the compression.
The change will take effect with the next database update. Download an additional 3rd party signature database distributed through
the ClamAV mirrors. This option can be used multiple times.
Here you can find a list of available databases:
http://www.clamav.net/download/cvd/3rdparty With this option you can provide custom sources (http:// or file://) for database files.
This option can be used multiple times. http://myserver.com/mysigs.ndb
file:///mnt/nfs/local.hdb If you're behind a proxy, please enter its address here. A user name for the HTTP proxy authentication. A password for the HTTP proxy authentication. If your servers are behind a firewall/proxy which does a User-Agent
filtering you can use this option to force the use of a different
User-Agent header. Send the RELOAD command to clamd after a successful update. Run a command after a successful database update. Run a command when a database update error occurs. Run a command when freshclam reports an outdated version.
In the command string %v will be replaced with the new version number. With this option you can provide a client address for the database downlading.
Useful for multi-homed systems. Timeout in seconds when connecting to database server. Timeout in seconds when reading from database server. When enabled freshclam will submit statistics to the ClamAV Project about
the latest virus detections in your environment. The ClamAV maintainers
will then use this data to determine what types of malware are the most
detected in the field and in what geographic area they are.
Freshclam will connect to clamd in order to get recent statistics. Country of origin of malware/detection statistics (for statistical
purposes only). The statistics collector at ClamAV.net will look up
your IP address to determine the geographical origin of the malware
reported by your installation. If this installation is mainly used to
scan data which comes from a different location, please enable this
option and enter a two-letter code (see http://www.iana.org/domains/root/db/)
of the country of origin. This option enables support for our "Personal Statistics" service.
When this option is enabled, the information on malware detected by
your clamd installation is made available to you through our website.
To get your HostID, log on http://www.stats.clamav.net and add a new
host to your host list. Once you have the HostID, uncomment this option
and paste the HostID here. As soon as your freshclam starts submitting
information to our stats collecting service, you will be able to view
the statistics of this clamd installation by logging into
http://www.stats.clamav.net with the same credentials you used to
generate the HostID. For more information refer to:
http://www.clamav.net/support/faq/faq-cctts/
This feature requires SubmitDetectionStats to be enabled. This option enables support for Google Safe Browsing. When activated for
the first time, freshclam will download a new database file (safebrowsing.cvd)
which will be automatically loaded by clamd and clamscan during the next
reload, provided that the heuristic phishing detection is turned on. This
database includes information about websites that may be phishing sites or
possible sources of malware. When using this option, it's mandatory to run
freshclam at least every 30 minutes.
Freshclam uses the ClamAV's mirror infrastructure to distribute the
database and its updates but all the contents are provided under Google's
terms of use. See http://code.google.com/support/bin/answer.py?answer=70015
and http://safebrowsing.clamav.net for more information. This option enables downloading of bytecode.cvd, which includes additional
detection mechanisms and improvements to the ClamAV engine. Disable authenticode certificate chain verification in PE files. Define the clamd socket to connect to for scanning.
This option is mandatory! Syntax:
ClamdSocket unix:path
ClamdSocket tcp:host:port
The first syntax specifies a local unix socket (needs an absolute path) e.g.:
ClamdSocket unix:/var/run/clamd/clamd.socket
The second syntax specifies a tcp local or remote tcp socket: the
host can be a hostname or an ip address; the ":port" field is only required
for IPv6 addresses, otherwise it defaults to 3310
ClamdSocket tcp:192.168.0.1
This option can be repeated several times with different sockets or even
with the same socket: clamd servers will be selected in a round-robin fashion. Define the interface through which we communicate with sendmail.
This option is mandatory! Possible formats are:
[[unix|local]:]/path/to/file - to specify a unix domain socket;
inet:port@[hostname|ip-address] - to specify an ipv4 socket;
inet6:port@[hostname|ip-address] - to specify an ipv6 socket. /tmp/clamav-milter.socket
inet:7357 Define the group ownership for the (unix) milter socket. Sets the permissions on the (unix) milter socket to the specified mode. Messages originating from these hosts/networks will not be scanned
This option takes a host(name)/mask pair in CIRD notation and can be
repeated several times. If "/mask" is omitted, a host is assumed.
To specify a locally orignated, non-smtp, email use the keyword "local". local
192.168.0.0/24
1111:2222:3333::/48 ^(Accept|Reject|Defer|Blackhole|Quarantine)$ Action to be performed on clean messages (mostly useful for testing).
The following actions are available:
Accept: the message is accepted for delievery
Reject: immediately refuse delievery (a 5xx error is returned to the peer)
Defer: return a temporary failure message (4xx) to the peer
Blackhole: like Accept but the message is sent to oblivion
Quarantine: like Accept but message is quarantined instead of being delivered Action to be performed on error conditions (this includes failure to
allocate data structures, no scanners available, network timeouts, unknown
scanner replies and the like.
The following actions are available:
Accept: the message is accepted for delievery;
Reject: immediately refuse delievery (a 5xx error is returned to the peer);
Defer: return a temporary failure message (4xx) to the peer. This option allows to set a specific rejection reason for infected messages
and it's therefore only useful together with "OnInfected Reject"
The string "%v", if present, will be replaced with the virus name. If this option is set to "Replace" (or "Yes"), an "X-Virus-Scanned" and an
"X-Virus-Status" headers will be attached to each processed message, possibly
replacing existing headers.
If it is set to Add, the X-Virus headers are added possibly on top of the
existing ones.
Note that while "Replace" can potentially break DKIM signatures, "Add" may
confuse procmail and similar filters. When AddHeader is in use, this option allows to arbitrary set the reported
hostname. This may be desirable in order to avoid leaking internal names.
If unset the real machine name is used. Execute a command when an infected message is processed.
The following parameters are passed to the invoked program in this order:
virus name, queue id, sender, destination, subject, message id, message date.
Note #1: this requires MTA macroes to be available (see LogInfected below)
Note #2: the process is invoked in the context of clamav-milter
Note #3: clamav-milter will wait for the process to exit. Be quick or fork to
avoid unnecessary delays in email delievery /usr/local/bin/my_infected_message_handler Chroot to the specified directory.
Chrooting is performed just after reading the config file and before
dropping privileges. This option specifies a file which contains a list of basic POSIX regular
expressions. Addresses (sent to or from - see below) matching these regexes
will not be scanned. Optionally each line can start with the string "From:"
or "To:" (note: no whitespace after the colon) indicating if it is,
respectively, the sender or recipient that is to be whitelisted.
If the field is missing, "To:" is assumed.
Lines starting with #, : or ! are ignored. Messages from authenticated SMTP users matching this extended POSIX
regular expression (egrep-like) will not be scanned.
As an alternative, a file containing a plain (not regex) list of names (one
per line) can be specified using the prefix "file:".
e.g. SkipAuthenticated file:/etc/good_guys
Note: this is the AUTH login name! SkipAuthenticated ^(tom|dick|henry)$ This option allows to tune what is logged when a message is infected.
Possible values are Off (the default - nothing is logged),
Basic (minimal info logged), Full (verbose info logged)
Note:
For this to work properly in sendmail, make sure the msg_id, mail_addr,
rcpt_addr and i macroes are available in eom. In other words add a line like:
Milter.macros.eom={msg_id}, {mail_addr}, {rcpt_addr}, i
to your .cf file. Alternatively use the macro:
define(`confMILTER_MACROS_EOM', `{msg_id}, {mail_addr}, {rcpt_addr}, i')
Postfix should be working fine with the default settings. This option allows to tune what is logged when no threat is found in a scanned message.
See LogInfected for possible values and caveats.
Useful in debugging but drastically increases the log size. This option affects the behaviour of LogInfected, LogClean and VirusAction
when a message with multiple recipients is scanned:
If SupportMultipleRecipients is off (the default)
then one single log entry is generated for the message and, in case the
message is determined to be malicious, the command indicated by VirusAction
is executed just once. In both cases only the last recipient is reported.
If SupportMultipleRecipients is on:
then one line is logged for each recipient and the command indicated
by VirusAction is also executed once for each recipient.
Note: although it's probably a good idea to enable this option, the default value
is currently set to off for legacy reasons. Example ERROR: Unknown option passed
foo yes true help ^(yes|true|1|no|false|0)$ config-file /etc/clamav/clamd.conf /etc/clamav/freshclam.conf version debug dumpcerts quiet leave-temps no-warnings stdout daemon no-dns list-mirrors submit-stats update-db reload multiscan fdpass stream allmatch database /var/lib/clamav/ recursive gen-mdb follow-dir-symlinks ^[0-9]+$ follow-file-symlinks bell no-summary file-list infected suppress-ok-results copy remove exclude exclude-dir include include-dir structured-ssn-format hex-dump md5 sha1 sha256 print-certs html-normalise utf16-decode build max-bad-sigs 3000 flevel no-cdiff server unpack unpack-current list-sigs find-sigs decode-sigs test-sigs vba vba-hex compare run-cdiff verify-cdiff defaultcolors config-dir /etc/clamav non-default generate-config force-interpreter trust-bytecode printsrc Print source code of bytecode input trace bytecode trace level no-trace-showsource archive-verbose bytecode-trust-all http-proxy proxy-user log-verbose force disable-summary disable-archive no-archive no-pe no-elf no-ole2 no-pdf no-html no-mail no-phishing-sigs no-phishing-scan-urls no-algorithmic no-phishing-restrictedscan max-ratio max-space ^[0-9]+[KM]?$ block-max unzip unrar arj unzoo lha jar tar tgz deb /tmp/clamav.log LogFileUnlock LogFileMaxSize LogTime Log time with each message. LogClean LogSyslog LogFacility LogVerbose Enable verbose logging. LogRotate log-rotate ExtendedDetectionInfo PidFile /var/run/clam.pid TemporaryDirectory tempdir /tmp DatabaseDirectory datadir /var/lib/clamav OfficialDatabaseOnly official-db-only no LocalSocket /tmp/clamd.socket LocalSocketGroup virusgroup LocalSocketMode 660 FixStaleSocket TCPSocket 3310 TCPAddr 127.0.0.1 MaxConnectionQueueLength 30 StreamMaxLength 25M StreamMinPort 1024 StreamMaxPort 2048 MaxThreads 120 CommandReadTimeout SendBufTimeout 200 300 MaxQueue IdleTimeout ^/proc/
^/sys/ MaxDirectoryRecursion max-dir-recursion 15 FollowDirectorySymlinks Follow directory symlinks. FollowFileSymlinks CrossFilesystems cross-fs SelfCheck 600 VirusEvent ExitOnOOM AllowAllMatchScan Foreground Don't fork into background. Debug LeaveTemporaryFiles User AllowSupplementaryGroups Bytecode BytecodeSecurity ^(TrustSigned|Paranoid)$ TrustSigned BytecodeTimeout bytecode-timeout 5000 BytecodeUnsigned bytecode-unsigned BytecodeMode bytecode-mode Auto BytecodeStatistics bytecode-statistics DetectPUA detect-pua ExcludePUA exclude-pua NetTool
PWTool IncludePUA include-pua Spy
Scanner
RAT AlgorithmicDetection algorithmic-detection ScanPE scan-pe ScanELF scan-elf DetectBrokenExecutables detect-broken ScanMail scan-mail ScanPartialMessages PhishingSignatures PhishingScanURLs PhishingAlwaysBlockCloak phishing-cloak phishing-ssl HeuristicScanPrecedence heuristic-scan-precedence StructuredDataDetection detect-structured StructuredMinCreditCardCount structured-cc-count StructuredMinSSNCount structured-ssn-count StructuredSSNFormatNormal StructuredSSNFormatStripped ScanHTML scan-html ScanOLE2 scan-ole2 OLE2BlockMacros ScanPDF scan-pdf ScanSWF scan-swf ScanArchive scan-archive ArchiveBlockEncrypted block-encrypted ForceToDisk force-to-disk max-scansize 100M max-filesize max-recursion 16 max-files 10000 MaxEmbeddedPE max-embeddedpe 10M MaxHTMLNormalize max-htmlnormalize MaxHTMLNoTags max-htmlnotags 2M MaxScriptNormalize max-scriptnormalize MaxZipTypeRcg max-ziptypercg 1M OnAccessIncludePath /home
/students OnAccessExcludePath /home/bofh
/root OnAccessExcludeUID OnAccessMaxFileSize DevACOnly dev-ac-only DevACDepth dev-ac-depth DevPerformance dev-performance DevLiblog dev-liblog UpdateLogFile /var/log/freshclam.log DatabaseOwner Checks checks DNSDatabaseInfo current.cvd.clamav.net DatabaseMirror PrivateMirror MaxAttempts ScriptedUpdates TestDatabases CompressLocalDatabase ExtraDatabase dbname1
dbname2 DatabaseCustomURL HTTPProxyServer your-proxy HTTPProxyPort HTTP proxy's port 8080 HTTPProxyUsername username HTTPProxyPassword HTTPUserAgent NotifyClamd daemon-notify OnUpdateExecute on-update-execute command OnErrorExecute on-error-execute OnOutdatedExecute on-outdated-execute LocalIPAddress local-address aaa.bbb.ccc.ddd ConnectTimeout ReceiveTimeout SubmitDetectionStats /path/to/clamd.conf DetectionStatsCountry country-code DetectionStatsHostID unique-id SafeBrowsing DisableCertCheck nocerts MailMaxRecursion ArchiveMaxScanSize ArchiveMaxRecursion ArchiveMaxFiles ArchiveMaxCompressionRatio ArchiveBlockMax ArchiveLimitMemoryUsage MailFollowURLs mail-follow-urls ClamukoScanOnAccess ClamukoScannerCount ClamukoScanOnOpen ClamukoScanOnClose ClamukoScanOnExec ClamukoIncludePath ClamukoExcludePath ClamukoExcludeUID ClamukoMaxFileSize ClamdSocket tcp:scanner.mydomain:7357 MilterSocket MilterSocketGroup MilterSocketMode LocalNet OnClean Accept OnInfected Quarantine OnFail ^(Accept|Reject|Defer)$ Defer RejectMsg MTA specific AddHeader ^(No|Replace|Yes|Add)$ Replace ReportHostname my.mail.server.name VirusAction Chroot /newroot Whitelist /etc/whitelisted_addresses SkipAuthenticated LogInfected Basic SupportMultipleRecipients A h A $B $B *A c 6A $B $B *A MA $B $B *A c h A $B $B hA V A $B $B pA A + $B $B A v A : $B $B vA A A $B A A : $B $B A A $B $B A A $B $B A A : $B $B A d A $B $B A A $B $B A A $B $B A 6A $B $B ́A $B $B ׁA A $B $B ށA m A $B $B A A $B $B A A $B $B A z A $B $B A d A $B $B A r A $B $B #A A A $B +A ?A $B $B HA ?A $B $B ]A A $B $B bA A $B $B mA f $B $B wA i A $B $B A o A $B $B A $B $B A $B $B A A $B $B A $B $B A $B $B A $B $B A $B $B ȂA ?A $B $B ނA A $B $B A A $B $B A A $B $B A A $B $B 'A A $B $B A $B $B A $B $B A $B $B A b $B $B %A ?A A 2A 7A ?A L 8 A $B ډA A $B $B >A A $B $B GA $B $B NA u $B $B UA $B $B J&B i $B $B dA l A $B $B nA f A $B $B xA A $B $B A $B $B A $B $B A $B $B A d $B $B A c $B $B A r $B $B A $B $B A d A $B $B ǃA c ҃A @ $B $B ރA n A @ $B $B A g @ $B $B A f A X A $B A t A A $B J&B i A A $B A p A $A $B BA r A $B HA t ?A NA $B cA s A !A $B wA a A $B $B A t A $B $B A $B $B A $B $B A $B $B A A $B $B A A $B $B ҄A A $B $B A A $B $B A A $B $B A A $B $B A A $B $B A A $B $B A A $B $B A A $B $B A A $B $B *A A $B $B @A A $B $B OA A $B $B jA ?A $B $B tA ~A $B $B A A $B $B A A $B $B A A $B $B A A $B $B A A $B $B A A $B $B A A $B $B A A $B $B A A $B $B A A $B $B ߎA A l 8!A A ЅA A X!A A ޅA ~A !A A A A A A A A "A A A A p"A A $A A "A A 0A A ;A A SA ]A A "A A hA A H#A A ~A A p #A A A A - #A A A ʆA A # $A ҆A A A A $A A A %A A )A H%A :A EA x%A UA YA A %A A hA ?A %A rA wA &A A A ?A &A A A ~A &A A A ?A x'A LJA ̇A ?A 'A ڇA ߇A ?A
(A A A ?A x P(A A A ?A (A eA A ?A X)A A A ?A x )A A A ?A d (*A A !A ?A +A VA ӒA ,A -A A A ًA A ?A ?A eA
A A ?A p?A eA 5A A ?A A OA A 8@A A kA tA A @A A ~A A A HAA A A A BA A A A A BA A A A A PCA A ÌA όA A CA A ܌A A A DA A A A A DA A ǑA A ~A @ EA )A A .A ~A
FA A ڑA ;A ?A 8HA IA A LA ?A ' IA VA \A jA ~A `JA yA }A A ~A hKA yA A A ~A hLA A A ӍA ~A P xMA A A A ~A NA A aA A OA A A OA A +A xPA ?A PA ?A PA ZA cA ~A P QA A wA A A $B $B A A ?A $B $B A A A $B $B ĎA ΎA A $B $B َA A l 8!A A A A u ۆA QA ۆA A A c ?A 0RA ɇA A *A RA *A AA SA UA PA UA WA ^A ?A XA eA jA A XXA A zA A XA A A A hYA $B A @ZA A A ([A [A ΏA [A ޏA A ?A A A A 0\A A )A `\A A ;A \A A IA UA 6A 0]A A cA sA p]A A A A ]A A A A ]A A ӐA A a h^A A A ?A ^A A A ?A _A A A H_A 3A GA `A ]A jA hbA A A A heA A [A A hhA A A A A hA A A $B $B A $B $B ӑA $B $B A $B $B A $B $B A A $B $B "A A $B $B :A IA A $B $B ZA A $B $B nA ?A $B $B A A $B $B A A $B $B A A $B $B A $B $B ̒A $B $B ߒA ?A $B $B A ~A P $B $B A 8iA A *A kA lA 7A mA :A IA PmA UA ZA mA nA cA nA kA oA kA rA nA }A oA }A A A A pA A A PrA A ēA ΓA A sA A A tA A A `uA 8wA A hwA #A ,A wA 6A QA yA zA cA {A oA A `}A oA uA A (~A A ܌A A $B $B A $B $B #A A $B $B A A $B $B )A A $B $B A $B $B :A A $B $B ǑA ~A $B $B A ?A $B $B ڑA ?A $B $B $A A $B $B ÌA A $B $B kA A $B $B A A $B $B ~A A $B $B A A $B $B A ~A $B $B wA $B $B hA ?A $B $B A $B $B 0.98.1 %s/ /dev/null Can't open /dev/null
dup2(%d, %d) failed
%s/daily.cvd %s/daily.cld ClamAV %s
ClamAV %s/%u/%s ERROR: --file-list: Can't open file %s
ERROR: This tool requires libclamav with functionality level %u or higher (current f-level: %u)
!cdiff_cmd_close: No database to close
!cdiff_cmd_close: Can't open file %s for reading
!cdiff_cmd_close: Can't generate temporary name
!cdiff_cmd_close: Can't open file %s for writing
!cdiff_cmd_close: Can't apply DEL at line %d of %s
!cdiff_cmd_close: Can't apply XCHG at line %d of %s
!cdiff_cmd_close: Can't write to %s
!cdiff_cmd_close: Not all DEL/XCHG have been executed
!cdiff_cmd_close: Can't unlink %s
!cdiff_cmd_close: Can't rename %s to %s
!cdiff_cmd_close: Can't open file %s for appending
!cdiff_apply: Problem parsing line
!cdiff_apply: Unknown command %s
!cdiff_apply: Not enough arguments for %s
!cdiff_apply: Can't execute command %s
!cdiff_apply: Can't duplicate descriptor %d
!cdiff_apply: Can't allocate memory for 'line'
!cdiff_apply: Can't allocate memory for 'lbuf'
!cdiff_apply: lseek(desc, %d, SEEK_END) failed
!cdiff_apply: Can't read %d bytes
!cdiff_apply: No digital signature in cdiff file
!cdiff_apply: Can't fstat file
!cdiff_apply: compressed data end offset < 0
!cdiff_apply: lseek(desc, 0, SEEK_SET) failed
14783905874077467090262228516557917570254599638376203532031989214105552847269687489771975792123442185817287694951949800908791527542017115600501303394778618535864845235700041590056318230102449612217458549016089313306591388590790796515819654102320725712300822356348724011232654837503241736177907784198700834440681124727060540035754699658105895050096576226753008596881698828185652424901921668758326578462003247906470982092298106789657211905488986281078346361469524484829559560886227198091995498440676639639830463593211386055065360288422394053998134458623712540683294034953818412458362198117811990006021989844180721010947 !cdiff_apply: Incorrect digital signature
!cdiff_apply: Incorrect file format
!cdiff_apply: Can't gzdopen descriptor %d
!cdiff_apply: Premature EOF at line %d
^cdiff_apply: Ignoring new buffer size request - invalid size %d
!cdiff_apply: Can't resize line buffer to %d bytes
!cdiff_apply: Error executing command at line %d
!cdiff_apply: fdopen() failed for descriptor %d
*cdiff_apply: File %s was not properly closed
*cdiff_apply: Parsed %d lines and executed %d commands
!cdiff_cmd_unlink: Database %s is still open
!cdiff_cmd_unlink: Can't get first argument
!cdiff_cmd_unlink: Forbidden characters found in database name
!cdiff_cmd_unlink: Can't unlink %s
!cdiff_cmd_move: Database %s is still open
!cdiff_cmd_move: Can't get third argument
!cdiff_cmd_move: Can't get fifth argument
!cdiff_cmd_move: end_line < start_line
!cdiff_cmd_move: Can't get fourth argument
!cdiff_cmd_move: Can't get sixth argument
!cdiff_cmd_move: Can't get first argument
!cdiff_cmd_move: Can't open %s for reading
!cdiff_cmd_move: Can't get second argument
!cdiff_cmd_move: Can't open %s for appending
!cdiff_cmd_move: Can't generate temporary name
!cdiff_cmd_move: Can't open file %s for writing
!cdiff_cmd_close: Can't apply MOVE due to conflict at line %d
!cdiff_cmd_move: Can't write to %s
!cdiff_cmd_move: No data was moved from %s to %s
!cdiff_cmd_move: Can't unlink %s
!cdiff_cmd_move: Can't rename %s to %s
!cdiff_cmd_xchg: Can't get first argument
!cdiff_cmd_xchg: Can't get second argument
!cdiff_cmd_xchg: Can't allocate memory for cdiff_node
!cdiff_cmd_del: Can't get first argument
!cdiff_cmd_del: Can't get second argument
!cdiff_cmd_del: Can't allocate memory for cdiff_node
!cdiff_cmd_add: Can't get first argument
!cdiff_cmd_add: Can't allocate memory for cdiff_node
!cdiff_cmd_open: Can't get first argument
!cdiff_cmd_open: %s not closed before opening %s
!cdiff_cmd_open: Forbidden characters found in database name
wb ab 100002053 ClamAV-Diff:%*u:%u: #LSIZE #LSIZE %u /\ OPEN ADD DEL XCHG CLOSE MOVE UNLINK A @ A P@ A 0@ A @ A u@ A @ A @ %o %06o ctx malloc failed engine malloc failed fmap malloc failed fmap failed .. %s/%s cli_gentemp() failed ERROR %s
!Can't open directory %s.
_vba_project %s/%s_%u powerpoint document worddocument -------------- start of code ------------------
%s
-------------- end of code ------------------
!ScanDir -> Can't open directory %s.
!hexdump: Can't write to stdout
!maxlinelen: Can't open file %s
!maxlinelen: Can't read file %s
!unpack: Couldn't find %s CLD/CVD database in %s
!unpack: Can't unpack file %s
!sha256file: Can't open file %s
!getdsig: Can't create socket
!getdsig: Can't connect to ClamAV Signing Service at %s
!getdsig: Can't write to socket
!getdsig: Error generating digital signature
!getdsig: Answer from remote server: %s
Signature received (length = %lu)
!getdsig: Communication error with remote server
!compare: Can't get MD5 checksum of %s
!compare: Can't allocate memory for 'obuff'
!compare: Can't allocate memory for 'nbuff'
!compare: Can't allocate memory for 'tbuff'
!compare: Can't open file %s for reading
!compare: New %s file contains lines terminated with CRLF or CR
!diffdirs: Can't open %s for writing
!diffdirs: Can't open directory %s
!listdb: Can't allocate memory for buffer
!listdb: Can't generate temporary name
!listdb: Can't create temporary directory %s
!listdb: Can't unpack CVD file %s
!listdb: Can't list directory %s
!listdb: Malformed pattern line %u (file %s)
!listdir: Can't open directory %s
!listdir: Can't allocate memory for dbfile
!listdb: Error listing database %s
!decodehexstr: Can't allocate memory for decoded
!decodehexstr: Unknown wildcard (0x%x@%u)
!decodehexspecial: strdup(hex) failed
!decodehexspecial: Can't allocate memory for buff
!decodehexspecial: Unexpected EOL
!decodehexspecial: Missing closing parethesis
!decodehexspecial: Empty block
{WILDCARD_ANY_STRING(LENGTH==%u)} {WILDCARD_ANY_STRING(LENGTH>=%u&&<=%u)} {WILDCARD_ANY_STRING(LENGTH>=%u)} {WILDCARD_ANY_STRING(LENGTH<=%u)} !Can't extract part %u of partial signature
!matchsig: Can't create new engine
!matchsig: cli_initroots() failed
!matchsig: Can't parse signature
!matchsig: Can't compile engine
!decodesig: Invalid or not supported signature format
!decodesig: Broken logical expression
!decodesig: Too many subsignatures
!decodesig: The number of subsignatures (==%u) doesn't match the IDs in the logical expression (==%u)
!decodesig: Invalid target type
decodesig: Not supported signature format
!--test-sigs requires two arguments
!testsigs: Can't open file %s
!dumpcerts: Can't create new engine
!dumpcerts: cli_initroots() failed
!dumpcerts: Can't parse signature
!dumpcerts: Can't compile engine
!dumpcerts: Can't open file %s!
!dumpcerts: fmap_need_off_once failed!
*dumpcerts: CL_CLEAN after cli_checkfp_pe()!
*dumpcerts: CL_VIRUS after cli_checkfp_pe()!
*dumpcerts: CL_BREAK after cli_checkfp_pe()!
!dumpcerts: Not a valid PE file!
!dumpcerts: Other error %d inside cli_checkfp_pe.
!verifydiff: Invalid diff name
!verifydiff: Incorrect info file %s
!verifydiff: Incorrect format of %s
!verifydiff: Can't generate SHA256 for %s
!verifydiff: %s has incorrect checksum
!hashsig: Can't access file %s
!hashsig: Can't generate hash for %s
!hashsig: Can't generate hash for input stream
--list-sigs: Can't get status of %s
--find-sigs: Can't compile regex
!verifydiff: Incorrect file name (no .cdiff/.script extension)
!verifydiff: Can't generate temporary name for tempdir
!verifydiff: Can't create directory %s
!verifydiff: Can't unpack CVD file %s
!verifydiff: Can't copy dir %s to %s
!verifydiff: Can't open diff file %s
!verifydiff: Can't chdir to %s
^verifydiff: Can't chdir to %s
Verification: %s correctly applies to %s
Verification: %s correctly applies to the previous version
Clam AntiVirus: Signature Tool (sigtool) %s
By The ClamAV Team: http://www.clamav.net/team (C) 2007-2009 Sourcefire, Inc. et al.
--help -h show help
--version -V print version number and exit
--quiet be quiet, output only error messages
--debug enable debug messages
--stdout write to stdout instead of stderr
--hex-dump convert data from stdin to a hex
string and print it on stdout
--md5 [FILES] generate MD5 checksum from stdin
or MD5 sigs for FILES
--sha1 [FILES] generate SHA1 checksum from stdin
or SHA1 sigs for FILES
--sha256 [FILES] generate SHA256 checksum from stdin
or SHA256 sigs for FILES
--mdb [FILES] generate .mdb sigs
--html-normalise=FILE create normalised parts of HTML file
--utf16-decode=FILE decode UTF16 encoded files
--info=FILE -i FILE print database information
--build=NAME [cvd] -b NAME build a CVD file
--max-bad-sigs=NUMBER Maximum number of mismatched signatures when building a CVD. Default: 3000
--flevel=FLEVEL Specify a custom flevel. Default: %u
--no-cdiff Don't generate .cdiff file
--unsigned Create unsigned database file (.cud)
--print-certs=FILE Print Authenticode details from a PE
--server=ADDR ClamAV Signing Service address
--datadir=DIR Use DIR as default database directory
--unpack=FILE -u FILE Unpack a CVD/CLD file
--unpack-current=SHORTNAME Unpack local CVD/CLD into cwd
--list-sigs[=FILE] -l[FILE] List signature names
--find-sigs=REGEX -fREGEX Find signatures matching REGEX
--decode-sigs Decode signatures from stdin
--test-sigs=DATABASE TARGET_FILE Test signatures from DATABASE against TARGET_FILE
--vba=FILE Extract VBA/Word6 macro code
--vba-hex=FILE Extract Word6 macro code with hex values
--diff=OLD NEW -d OLD NEW Create diff for OLD and NEW CVDs
--compare=OLD NEW -c OLD NEW Show diff between OLD and NEW files in cdiff format
--run-cdiff=FILE -r FILE Execute update script FILE in cwd
--verify-cdiff=DIFF CVD/CLD Verify DIFF against CVD/CLD
!makediff: --diff requires two arguments
!makediff: Can't read CVD header from %s
!makediff: The old CVD must be %u
!makediff: Can't generate temporary name for odir
!makediff: Can't create directory %s
!makediff: Can't unpack CVD file %s
!makediff: Can't generate temporary name for ndir
!Generated file is incorrect, removed !Generated file is incorrect, renamed to %s
!build: --server is required for --build
!build: COPYING file not found in current working directory.
!build: Can't initialize antivirus engine
!build: Can't load database: %s
!build: There are no signatures in database files
!build: Can't open current directory
!build: Memory allocation error
!build: dblist2 == NULL (no .cbc files?)
^build: Signatures in %s db files: %u, loaded by libclamav: %u
!Bad number of signatures in database files
!build: Not a CVD/CLD/CUD file
^build: CAN'T READ CVD HEADER OF CURRENT DATABASE %s (wait 3 s)
!build: Can't get builder name
!writeinfo: Can't create file %s
!writeinfo: Can't write to %s
!writeinfo: Can't generate SHA256 for %s
!writeinfo: Can't write to info file
!writeinfo: Can't get digital signature from remote server
!build: Can't generate info file
!build: Can't generate temporary name for tarfile
!build: Can't open file %s for writing
!build: Can't add COPYING to tar archive
!build: Can't open file %s for reading
!build: Can't generate MD5 checksum for %s
!build: Can't get digital signature from remote server
!build: Can't create final database %s
!build: Can't generate temporary name
!build: Can't create temporary directory %s
!build: Can't unpack CVD file %s
!script2diff: Can't stat file %s
!script2cdiff: Incorrect file name (no .script extension)
!script2cdiff: Incorrect file name syntax
!script2cdiff: Can't open %s for writing
!script2cdiff: Can't write to %s
!script2cdiff: Can't open file %s for reading
!script2cdiff: Can't open file %s for appending
!script2cdiff: Can't gzwrite to %s
!script2cdiff: Can't open %s for reading/writing
!script2cdiff: Can't get digital signature from remote server
!script2cdiff: Can't open %s for appending
!Can't initialize libclamav: %s
!Can't parse command line options
!htmlnorm: Can't open file %s
!utf16decode: Can't open file %s
!utf16decode: Can't allocate memory
!utf16decode: Can't create file %s
!utf16decode: Can't write to file %s
!cvdinfo: Can't read/parse CVD header of %s
Verification: Unsigned container
!vbadump: Can't generate temporary name
!vbadump: Can't create temporary directory %s
!makediff: --compare requires two arguments
!rundiff: Incorrect file name (no .cdiff/.script extension)
!--verify-cdiff requires two arguments
--verify-cdiff: Can't get status of %s
%s/%s.cvd %s/%s.cld %02x SIGNDPASS Password: !getdsig: tcgetattr() failed
!getdsig: tcsetattr() failed
%as !getdsig: Can't get password
socket() connect() ClamSign:%s:%s: ClamSignPSS:%s:%s: ClamSignPSS2:%s:%s: Signature: #LSIZE %u
OPEN %s
ADD %s
XCHG %u %s %s
DEL %u %s
CLOSE
UNLINK %s
!diffdirs: getcwd() failed
!diffdirs: Can't chdir to %s
^diffdirs: Can't chdir to %s
Generated diff file %s
!listdb: Can't open file %s
!listdb: fgets failed
ClamAV-VDB: !listdb: Invalid filename %s
.db [%s] %s
(Clam) .crb .hdu .mdb .mdu .hsb .hsu .msb .msu .ndb .ndu .ldb .ldu .sdb .zmd .rmd .cdb .cbc [%s BYTECODE] %s {WILDCARD_NIBBLE_HIGH:0x%x} {WILDCARD_NIBBLE_LOW:0x%x} !Decoding failed (1): %s
| !Decoding failed (2)
!Decoding failed
{WILDCARD_ANY_STRING} - * test match at offset matches at offsets /CHECK OFFSET MATCH: ** YES%s ** (%u %s: MATCH: ** NO **
!decodesig: Invalid input
VIRUS NAME: %s
.{ TDB: %s
LOGICAL EXPRESSION: %s
* BYTECODE SUBSIG
* SUBSIG ID %d
+-> OFFSET: %s
+-> OFFSET: ANY
+-> DECODED SUBSIGNATURE:
+-> TOKENS COUNT: %u
FUNCTIONALITY LEVEL: >=%s
FUNCTIONALITY LEVEL: %s..%s
TARGET TYPE: ANY FILE
PE
OLE2
HTML
MAIL
GRAPHICS
ELF
NORMALIZED ASCII TEXT
DISASM DATA
MACHO
DECODED SIGNATURE:
!dumpcerts: No filename!
deadbeef !verifydiff: strdup() failed
%s.info !verifydiff: Can't open %s
ClamAV-VDB DSIG hashsig %u:%s:%s
%s:%u:%s
.cdiff !verifydiff: getcwd() failed
!verifydiff: Can't apply %s
%s-%u.script %s.broken COPYING last.hdb %s.%s %s/%s.cud !build: scanf() failed
Total sigs: %u
New sigs: %u
C %d %b %Y %H-%M %z SIGNDUSER Builder name: :%u !writeinfo: Can't unlink %s
wb+ DSIG:%s
wb9f bytecode.info !build: Can't write to %s
^build: Can't unlink %s
Created %s
Skipping .cdiff creation
ClamAV-Diff:%u:%u: ab9f :%s Version number: !fmap failed
%s.ascii File: %s
Build time: %s
Version: %u
Signatures: %u
Functionality level: %u
Builder: %s
MD5: %s
Digital signature: %s
!cvdinfo: Verification: %s
Verification OK.
!vbadump: Can't open file %s
!rundiff: Can't open file %s
cfg ign ign2 ftm idb sfp gdb pdb wdb @ @ -@ @ @ @ `@ O@ >@ @ J&B 'B 'B 'B 'B ԁA %B !B !B !B 'A !B !B !B !B !B !B !B "B "B "B 'B 'B 'B 'B 'B 'B !B ;< F X p 0 p 0 p$` + + + , `, @.( /P `@ p@ @ @ A B PD@ `F` pFx F H J K PP( 0QP `R p[ \ c( eH fx f g i j k@ nx s t u u( PwH `xx p} @
H
Бx
УH 0 p0 @h @
@X
zR x $ Z BCHD B $ D ZQl 4 l BECB B(A0A8G m H7 D 4 p BEB FB(CA0A8BG , ] BCBB A(BF0C 4 $ ! BBB CB(A0A8CD \ ' t ' 'T ACACD (T ACACD P( MN0F $ * BFAA F 4 *< BCBB CE(CJ0A8CJ$ L ; d ; $ | ;^ BFA BG ; MN F < `H X= MI M ? k` $ @ < @; D T A7 bP$ t 8C MMI@L D AC 4 E BBB B(A0CA8CDp $ J BCA I 4 J) BCBB CD(CC0CA8DP 4 L K BGB B(CA0A8BGC , T BBA A(D0L 4 U1 BBCB B(A0CA8CD \. YD0 , ] BEGA CA(D0 < ^ AFCI , \ _ BGB A(CF0 4 _ BDCB CE(A0A8CIE aO N F a MS0 4 bm BBB B(CA0CA8G 4 < f] BDB B(A0A8G
] $ t (k BAA G@B 4 k BGBB B(A0A8G hl `l `C , n BBB A(CA0CGA4 < n BCBCB B(CA0A8CL $ t s M[O 4 `zE BCBB CG(A0A8G P 4 x}& BBCB B(A0CF8DP , p BBB CA(CA0 4 < P BBB B(A0A8CDP 4 t U BBB B(A0A8CD 4 0 BBCB B(A0A8Dp $ LMLO 4 Y BBB B(CA0A8BG D k AGG $ d BAA CG , = BGB A(A0GK 4 e BBB B(A0A8GA 4 8 BCBCB B(A0CA8GM $ ,
Х BCFCA BG $ T
c M`
F |
Ы D
ȭ MMD0 ,
BBB A(A0CD 4
BGB B(A0A8GP $ L^ D x $ \ p Q_@F & ? N -@
A `@ o @ @ p@
F Bb ( @ ( @ ` o @ o o F @ (@b -@ -@ -@ .@ .@ ..@ >.@ N.@ ^.@ n.@ ~.@ .@ .@ .@ .@ .@ .@ .@ .@ /@ /@ ./@ >/@ N/@ ^/@ n/@ ~/@ /@ /@ /@ /@ /@ /@ /@ /@ 0@ 0@ .0@ >0@ N0@ ^0@ n0@ ~0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 0@ 1@ 1@ .1@ >1@ N1@ ^1@ n1@ ~1@ 1@ 1@ 1@ 1@ 1@ 1@ 1@ 1@ 2@ 2@ .2@ >2@ N2@ ^2@ n2@ ~2@ 2@ 2@ 2@ 2@ 2@ 2@ 2@ 2@ 3@ 3@ .3@ >3@ N3@ ^3@ n3@ ~3@ 3@ 3@ 3@ 3@ 3@ 3@ 3@ 3@ 4@ 4@ .4@ >4@ N4@ ^4@ n4@ ~4@ 4@ 4@ 4@ 4@ 4@ 4@ 4@ 4@ 5@ 5@ .5@ >5@ N5@ ^5@ n5@ ~5@ 5@ 5@ 5@ 5@ 5@ 5@ 5@ 5@ 6@ 6@ .6@ >6@ N6@ ^6@ n6@ ~6@ 6@ 6@ 6@ 6@ 6@ 6@ 6@ 6@ 7@ 7@ .7@ >7@ d A sigtool .shstrtab .interp .note.ABI-tag .note.gnu.build-id .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .text .fini .rodata .eh_frame_hdr .eh_frame .ctors .dtors .jcr .dynamic .got .got.plt .data .bss .gnu_debuglink @ @ ! <@ < $ 8 `@ ` 4 o @ \ > p@ p F @ F N o F @ F L [ o @ j ( @ ( ` t @ (
~ -@ - y -@ - P7@ P7 A A 0*B 0* < p,B p, @b @ @b @ @b @ (@b (@ Bb B Bb B Fb F , Gb G G G