MOON
Server: Apache/2.2.34 (Unix) mod_ssl/2.2.34 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 FrontPage/5.0.2.2635
System: Linux server.asjudinet.com 2.6.32-042stab141.3 #1 SMP Fri Nov 15 22:45:34 MSK 2019 i686
User: asjudine (504)
PHP: 5.2.17
Disabled: NONE
$ pwd: /usr/local/bin/
Upload Files
File: //usr/local/bin/clamscan
ELF44 (444444<<<<'<'84PP'P'((HHH  Ptd||Qtd/lib/ld-linux.so.2GNU	v!vzBE
(|KfUaqX92zw4e|!E=J1RE,eC@<TOEwq_']

~2W9%W mDkv=<Mqx7)Bb4I!g=}-=k2RD+-C \%Db|0TfNB:*	5s3bE;Wo=Z8D+jWV>9'n$ "(LnV24t*f**Gp/h*T*,
;t*P*
d*I*libclamav.so.7_Jv_RegisterClasses__gmon_start__cl_engine_set_clcb_virus_foundcli_ctimecl_engine_set_strcl_engine_newcli_filecopycli_gentempcl_engine_set_clcb_post_scancli_chompcl_cleanup_cryptocli_regcompcl_cvdfreecl_engine_get_numcl_initcli_sigperf_events_destroycl_engine_set_clcb_pre_cachecl_strerrorcli_regexeccl_engine_set_clcb_stats_get_hostidcli_sigperf_printcl_debugcli_gettmpdircl_engine_freecli_pcre_perf_printcl_engine_set_numcl_cvdheadcl_retflevelcl_engine_compilecl_initialize_cryptocl_engine_stats_enablecl_always_gen_section_hashcl_loadcli_regfreecl_retdbdircli_pcre_perf_events_destroycl_engine_set_clcb_stats_submitcl_scanfile_callbackcl_engine_set_clcb_metacl_scandesc_callbacklibxml2.so.2_finilibbz2.so.1libstdc++.so.6libssl.so.6libcrypto.so.6libz.so.1libpcre.so.0libm.so.6libdl.so.2libpthread.so.0wait__errno_locationforksendfcntllibc.so.6_IO_stdin_usedsetuid__xpg_basenamefflushstrcpy__printf_chkexitreaddirfopenstrncmpoptindstrrchr__strdupperrorclosedirstrncpysigprocmask__stack_chk_failunlinkselectreallocstdinstrpbrkstrftimelocaltime_rfgetsgetpwnamcallocstrlensigemptyset__syslog_chkdup2__fprintf_chksigaddsetstdoutfputcfputsmemcpyfclose__strtol_internal__vsnprintf_chkmallocumaskstrcasecmp__lxstat64opendir__xstat64getenvoptargstderr__snprintf_chkoptoptsetrlimitfilenogetcwdfwritefreadgettimeofdayrenamegeteuidstrchr__strcpy_chksetsid__sprintf_chkgetrlimitaccessopterrsetgidstrcmp__libc_start_maincloselogsnprintf__strtoul_internal_edata__bss_start_end/usr/local/cpanel/3rdparty/libCLAMAV_PRIVATECLAMAV_PUBLICGLIBC_2.0GLIBC_2.1GLIBC_2.4GLIBC_2.2GLIBC_2.3.4		0EkӇ_zV ii
ii
	ii
ii
ii
ti	x(p*x*|*(((((((((	(
(((
((((((((((((((((()) )!)")#)$)%)& )'$)(()),)*0)+4),8)-<).@)/D)0H)1L)2P)3T)4X)5\)6`)7d)8h)9l):p);t)<x)=|)>)?)@)A)B)C)D)E)F)H)I)J)K)L)M)N)O)P)Q)R)S)T)U)V)W)X)Y)Z)[)\)])^)_*`*a*b*c*d*e*f*g *h$*i(*j,*k0*l4*m8*n<*o@*pD*qH*rL*sP*tT*uU/5(%(%(h%(h%(h%(h%(h %(h(%(h0%(h8p%(h@`%(hHP%(hP@%(hX0%(h` %(hh%(hp%(hx%(h%(h%(h%(h%(h%(h%(h%(hp%(h`%(hP%(h@%(h0%(h %(h%)h%)h%)h%)h%)h%)h%)h %)h(% )h0%$)h8p%()h@`%,)hHP%0)hP@%4)hX0%8)h` %<)hh%@)hp%D)hx%H)h%L)h%P)h%T)h%X)h%\)h%`)h%d)hp%h)h`%l)hP%p)h@%t)h0%x)h %|)h%)h%)h%)h%)h%)h%)h%)h %)h(%)h0%)h8p%)h@`%)hHP%)hP@%)hX0%)h` %)hh%)hp%)hx%)h%)h%)h%)h%)h%)h%)h%)hp%)h`%)hP%)h@%)h0%)h %)h%*h%*h%*h%*h%*h%*h%*h %*h(% *h0%$*h8p%(*h@`%,*hHP%0*hP@%4*hX0%8*h` %<*hh%@*hp%D*hx%H*h%L*h%P*h%T*h1^PTRhhQVh0sUS[ìtNX[ÐUS=*u?H'-D'X*9v&*D'*9w*[]Ít&'UL'tt	$L'ÐUVS` ut01` tt$$ud [^]Ã[^]UWVS<ueE1f=*tEe3<[^_]Ð*4$E(DžǃtE19v:<%u3<l<s<fy
9wƋ_DžDžED$t$D$D$\$<$xD<!<@t~f=*;*9$B$f=*tQGD$D$D$$Q\<^<*ts<~t}<$D$5*뢃H$-ljDžf=*D$G$$f=*f=*u*GD$D$D$$P[fUWVSueE1<$?<*U4$VDžǃ tL1&9s:<%u3<l<s<f
9rƋ DžED$t$D$D$|$$D*tO*~E$D$T$$t&5*TP9	&
*}*f=*f:*uЉ$ZD$ t$$v! t€*҃)D
t$D$D$$$<!0<^<*tG<$tB<#t><~t:*D$$;f=*%*D$$fu
*$f=^*t!:#tT$$6f=/w1Ue3[^_]Ë$1ӋB"$Nf=*낉<$G,$	<!.<^<*<$f<#<~D$D$D$$f=*f=*eD$D$D$*$69f=*u[*tIt$L$\$D$D$$*D$aD$$D$Lf**$$pD$$D$$lc*$D$3$;T$D$)؉t$$*t$**\$$$U4f=*!D$D$$D$*$?D$cá*$*$f=\**"TЃD$*D$D$$D$D$$D$44*D$D$;D$$D/vЃD$D$D$$*DžDžDžDžfDž$\\$D$$8_vuH$ 6*D$D$BD$$T
*D$, $D$wS$t&?*D$$D$bvŋ$$Uf=/u *t$*Ívى'UWVS\
]eE1U$DžƃtE19v:<;%u<l<s<f+
9wƋ=DžDžED$\$D$D$D$$D0w`Ue3;\
[^_]ÃB$b$됃$Dž9w1/UEU)D$T$UD$$y8`*1Dži8uً󫋅T$D$D$D$$| w	$UWVSL$!(+1E+
**d*}U<}<5*uBh*$M**<?>&t9uB
*EB<:
W*
d*]<jAd**S=d*9}}E:-uB<-+R-oU]ʋMMv;]8-uxt}EUd*|$D$$U9]؉
d*؋}]M܍|\]}MȋMP9E܉ӉU	Mԉʉ}}A;EuEUԋMmmm9M؉E뢀zEUM*D$T$$Ƌ]9d*~d*L[^_]ÍC?d**̋Ut$D$ !D$D$*$Ad*<;EȀ8My:C9E*d*h*}::ifEؾd* EM<:E€+t	-}:M:MP;]*Cd**Eؾ**d*w}܉=d*롋}*Cd*T]t$D$x!D$D$*$UWVS|}EEUUMEU$!g+1E+5d*E*u9BE4u>-[u؋uF<->/<-*t
ExR}E?-U҈U=]̋EE]EP҈UxM9]+]EE]܉E$9EEԋ^E@uу}|uԅ|
h*E?%v~EEd*u;5d*}5d*E|[^_]f+Et-vE]ȃE4v;]t8-uxt|$Ud*T$M$MUE9]ȉEb=d*Eu}D)߉E؉u}MPuU	9Mĉ|t&ʉ}}A9uEUċMm9MȉE<-]\$ut$}<$EWS93u2u<:uϋ}1<::ŋM1]	:ˆM+t	-}:]:]PE M̉Mf]1t&E܉D$U؉<$T$uEuЋ{u~*-}h*z}Eȉ|$Ud*D$:!D$*D$$E?d<;Eȋ}E=*d*H=izMEȉL$]d*D$X!D$|ML$]\$u4$EEEE}=EЋU{}tUЋESCEd*yEUMEUM|[^_]iE܉D$U؉$T$7MEM)]EEd*EЋMCu[h*uvE?nEȃ9Ed*J1}:L:h*MurE:[]f(u}D>*}*D$]D$!D$D$*$oYD$uD$!D$D$*$>]t&US]UEM]]E][]I'US]UEM]]E][]UVSÃt4tt$$rtCtt$$[t[(ũ[^]ÍvUVS]ut4tt$$ tCtt$$	t[(ũ[^]ÐUWVS}W,t(t$W,u$w$t8Ftd$F$F$^$4$xޅuȋ$hG$]G$R_(<$Gt	뎋v$댃[^_]Í&'UWVSUEEUE$0lø4$mMU$MCUE$,CCEUCSvDCEC$C(CCEC,C tPX(1[^_]Ãv뵍t&MKUCZCCdUC(1[^_]ËC$$$z'U(u֋U}ϋM]UM@t]HtC$T<$CEUCSsCt#C1]u}]ËS1tfCSw̃w1CD$0$t<$IFUMVډN‹B$ur$X*t$D$!D$$D*D$"D$$$"D$]*D$"D$$H"D$.*D$"D$$$"D$4$'UW1V1SLEEEt&t*Ut60l*C$U!u΋UtׅEtҋUuˉ|$C D$CSD$T$CUD$C$E
y*D$?D$$l"D$%E$L1[^_]ËCiMUE5@ 4@E5l*tEF$Et=Eu8EtD$D$#D$D$*$딍t&F%Eu;ErD$D$t#D$D$*$[BE카$D$USM*D$D#D$L$$EU*D$D$"T$D$$VtfF }ԉT$<$D$D$D$D$U<$T$<$FFuUEEUȋM̋E$L$MU9EL[^_]ËED$FD$#D$D$*$uD$U$tJM:u:At0D$E$xEEE3EEEEt:D$D$
D$U$EEȉMEE}tٍED$D$D$E$1Ƀ;"E<M7%C<KU*D$$D$T$$r(FD$T$D$D$*$IM*D$#D$L$$ *D$.D$$"D$EEEFE"M*D$$D$L$$1ɉUȉMEI<kt<m|t&w	EEE|?h

Ǎ&'UWVS|Eu UDžPeE1DžLtP11ƅZ:DžDž&t:tFO0l*C$U!uUtׅEtҋut$C D$CSD$T$CLD$C$P{*D$?D$$l"D$P$1ue35C|[^_]ËCFQD$Y4$
tDžDžDžeZD$$D$H$q1Ƀ9 	H$+m#[Ɖnɗ
ʗ'˗҈f=̗z	Ӌ9t/9t(9t
9t9fuÅ{<$Z1Ƀ;&	T 	$\Ȁ t	t	
uU/Džt4$1l&Pat&CtlC *{tCDŽ*DŽ*C*C2]Z{ƄZ:C CƄZ:DŽ(IEt7G
D$GD$&D$D$*$TD$EZDžT|$t$T$$1:vT(
*ɉ&P@ <@E=l*tXG$EtPEuKMD$D$#D$D$*$wG%E&E@t$D$t#D$D$*$x9Tˉe*D$)D$$$D$J	GttG uD$8$T$8D$D$D$t$$18$GdY$PL$Dž9}=*D$1D$$ %D$zӋ9S99uP$D$;*D$D#T$&GD$4$Et5:u:Ft4$1D$11Ʌ11	fp0>"t^D$"$vހ;KE"D$%t$D$*D$$tDžD$$_(*D$*D$$$D$D$4$'2~,1;1;\8;uÉD$D$T&*D$$Dž-Ƅ5ZDžDŽ(DŽ(DŽ(DŽ(D$%D$sv&Pd*;U)ED$$hG,PG,m5d*9u;ub+d*_,$P+d*G,u*D$D$$)D$$X1ft^4$1D$D$
D$*lD$ɗ4$i11HtՍH4$1D$D$D$EË8"
H<M<KA*D$$D$T$$EGD$GD$&D$D$*$)> GD$GD$'D$f|?v

8"tA1	غtډ1GD$$'D$D$*$ )T$*D$$D$$1뎡*D$D$$̗D$Dž0*D$3D$$ &D$dDžED$"T$t$MD$T%D$OGD$&D$D$*$t5D$#t$T$GD$#D$(GtUD$GD$P'D$<k<m1~9"GD$T$D$GD$'D$v|wED$%D$T$uGtLD$GD$8(D$D$*$CGD$'D$wGD$x(D$D$*$"*D$D$$(D$"VGt0D$GD$(D$D$*$
GD$UVSp]D$+$Up+tiD$$=PED$$*T$AuE%=@tK*$D$5p[^]Í&D$$$Pt:$vtP**$s1ң*p[^]D$)$1ҋ@t* w&US]$t\$$pz*[]É\$$][]Í&UWVS,$EE$E$*$‰ED$D$D$D$*$D$~K8uv\$ED$D$D$D$*D$$9t5D$D$$xE$V,[^_]ËE$A$7,[^_]ËE$䍶UVS uUxE4$D$tHt$$E*t$x$DEt$ [^]ËEt$$D$sɐUVS ]Ux[E$D$u5E\$$D$+4$Et$ [^]ËE$D$t,\$$E*t$y뫉$
t&x$_\$$D$gUC]ÍUE]8/
UWV1SeE1ED$Y$u41#Ɖ\$D$<$uډ$Ue3u[^_]t&UH]E]}ueU1҉D$\$<$t#Ue3]u}]Ít&$|/taD$$T$腾ED$D$D$\$<$轼<$pvD$HD$D$D$D$$|E葿'UWVS,D$$L'ED$$LED$$L}Etj}td1ۃt]t\$4$u߳D}ut[v,1[^_]Ð*1D$D$$VD$ݻDt$Lu,[^_]Ív$,v*\$1ۉt$D$lD$$蠿<$Dxt$þ
U][&U艻1҃Pw3}D$QD$D$D$*$ɉÍ&U8u}]`D$D$D$D$D$D$$h)D$Ɲ$PEu!4$־<$H؋u]}]ËX4$\$t̉$袺4$蘺D$lUBD$D$D$D$$xD$$ȸD$$谸$耽Et$D$D$D$$D$$aD$$I$E$UBU;BvEpU$U$$߻4$\UBD$D$D$D$$K$莻Ep돉t$D$D$D$$*D$.D$$D$X
UWVS,]Er$葸$f\$D$D$D$$xD$4$ȶ1\$D$D$D$4$:D$4$芶MtBE$臼\$|$D$$D$4$(,[^_]D$$D$蓵ы]uҋE$ʼn4$պiH9s@ωE$M4$觺x@$E輻ÉE|D$$D$;E$Xt&t&'U(*uu}}]D$4$Ë@tk5**D$$+D$/$+St+
t6
t1+V,**]Ћu}]ƀ+D$YC$*PCD$LD$D$*$gt16떐t&1덡*$1yU$f*@$XD$л$舸$|$謻$H蠻$蔻$舻$|$`p$d$X$DL$@$4$($$d$$$H$$Ժ$ Ⱥ$輺$谺$D褺$蘺$茺$8耺$t$h$(\$xP$D$8$,$d $$$P$$$0ع$̹$$(费$t訹$蜹$萹$H脹$x$l$d`$T$H$L<$0$$$$@$|$$$$hܸ$и$ĸ$0踸$謸$蠸$l蔸$舸$|$tp$d$ X$tL$@$(4$($$8$$$X$$Է$tȷ$4輷$谷Í&'L$qUM]u}9qWX$$D$E\$D$$m蘱D$D$D$D$t$|$$ u*$M]u}]aÍt&D$&$pptf*f*D$.$GHt	f*D$L$'Pt	f*D$$@D$$@D$ڙ$@t*D$1$@$$D$$@ED$$u@t	f/D$$U@t	f/D$$5xt	fp*D$$pt	f/D$z$H*$h"E//// /$/(/D$$K$D$$]P$虱$1軲&:EEED$$n!@*$$P$$K$cED$$PME}+})ȉL)NjL%@BD$p胶/$D$n$D$Y/$D$D/$D$//$D$ /]*;
*ɉH$/1RP,$
$<\$ĵ
(/tء$/1R1P,$RQ,$1\$RP,$
$\$p)k<T$Mb)L$DL|$$)ʉT$$D$$$#@u)HT$$0D$ʴD$$赴D$$蠴UEt
t@]1Ð&UEUt#@tUEE]If]Í&'U$@/貪$t	1Ðt&111@/-$uu؀=H/-uπ=M/-uƀ=R/-u1=W/-Ð&Uu}@/
18uuȋ}]U=`td$%ܩt5b58@5e8f@-3be@5-11@e3-b@f0b-@1803@7319@ 526c@$uȋ}]Ít&D$$u}]D$@/$ڲuE@/}]Yt&UWVSU1҃xMEt\1'U8L$$D$踨FE;EvW}8$1҅ۉtE!ˍC9EsEUDF;E[^_]É֍v'UEeU1҉uu]ttSuk1Ue3uU]u]ftC;CttċCuCC뵅uCC$}VfU8]ӉuΉ}蚧t!t$<$Z]u}]É$譩øttnfu>C$ץC$蔦u\t$<$t@$dE$)U1yƃh^$$CD$?D$*D$$谪뎋CD$$D$؉'UWVS<D$0eE1$Ë@t!C4$D$1t;[$uD$K<$Ë@tRC4$D$t>[$uf=/tEe3<[^_]Ét$$Z茯ӍD$t$$Tl/
h/	t511	u!f=/ut$$i'kf 	u#f=/It$$4ډЉ1(/tDžPDžTDžXDž\Dž`D$<$6@rt$$[D$4$xdD$EPdhD$$/D$D$lD$$胥Vf=/uf=p*$/`t%1ۍ&P$萦9`w䋅P$z$*4$1ҹuf=/ /\f=/C /F$aÉPr4$iDž`Y$it$$D$衬뀉t$$菬k<$D$:xtr`؍pP`lLXu˗BD$p\$L$|$D$$E tw//f=/)*$D$ˡ$踣t$$D$蠫zt$$薨lt$$D$gjXSlt$$D$BD$3-&'UWVSE|UxuptD$8$Ë@tC<$D$tA[$uD$Dx$gHÅtKC<$D$t7[$uf=/tĜ[^_]É|$$Z^Ĝ[^_]D$rx$9prD$x$@ED$ؘx$@E<$LEc/uU$詠0tPp9u:Ft9u:Fu:Ft<$4$D$֟J:uK:Gt$|$D$D$D$$ɟED$\$$tAD$ޟx$@uUtp3U3E	t?f=/F$贡U$yE$Ĝ[^_]ËE%=t~=,=@uf=/tptD$T$UT$E$x؋|kt$D$D$D$$賞}t)}t#f=/(\$$ЧED$\$$蘢E%=tQ=@u}u$f=/ft[ /\$$Zb$Q}SU؉$x|k|$$'듐UWVSEUe
M1ɉXE `XC󦋵X84$<Nj`$,|<$\L:`\t$D$PD$D$D$|$$C;CsD$$謡!CsCS\$1Me3
ļ[^_]Ã&M:F9N:F)O:F`\D$|$T$$(&S[D$;=fp\LPu˗\T$t$$VD$\$՝諝&U$EeU1҉]u}4DžD$$?@8v5$eDžDMe3
DuI]u}]Ë4D$ؘ$@Lv$DžDߜ4D$ 4$襻HDžH4D$Û$zPtH4D$4$V@t
H4D$ԛ<$/@tH4D$֚$@t
H $貜$$	D$DžDD$ 4$詺@<9u.<:Gu:Gu:G<ljDžH 89<:BvœDžH:BfW萝Pu$4	DžD4D$$豹@t&PD$D$D$$X4D$4$n@t&PD$D$D$<$4D$$+@tP$J4D$М$xt:4D$Ü4$PP@D$<$T$D$蓖4D$w$詸pt04D$w$茸Xljh4D$c4$\XHD$y4$:DžTHÅDžlC$lD8D$T$֛TCD$D$D$D$T$詖C$~|8Tl[$qH.TD:4D$$\PÅyT$	uP4$;T<$]DžD
މPD$$PD$$QT<$4D$$蟶@t&PD$D$D$
$F4D$$\@t:4D$4$?PP@D$<$T$D$4D$4$@t&PD$D$D$$謓4D$j$µ@t&PD$D$D$4$i4D$<$xt
H4D$$Xpt$P@D$T$PD$$4D$+$Xv4D$I$HÅt2KD$֚`$H	H[$u΋4D$<$襴PZ@D$
D$P$豕/$諔$
D$藜P$]DžDDžpC$pT$DD$TCD$D$D$D$Tp$輒C$葒pt0Tp[$gH.TD7TPD$D$$蓔$荓$	D$yT$oP4$1DžD$X	BP4$DžDi
މ@/5b58D/5e8fH/-3beL/5-11P/e3-bT/f0b-X/1803\/7319`/526cd/$X	蜚P<$bDžD$$$v?$sfPD$$褏P$DžDD$%\$$@/TI`D$4$!H@	dd18PL$\$D$$44D$$*xÅHPD$/t$|$C$ڒ[$uċP4$5$$4
D$4$蹐DžD{d18
d1811$w$dD$cP$)DžDPD$/T$ËH$D$近n$	$dD$$P$賏DžDu4D$<$zptBPD$$ёPD$0$諎PD$$Ռ4D$'4$XtPGp4D$$$HtPBp4D$x$îPtjPP@D$T$4$D$lt<$ʎ$X
D$趖4$肎DžDD$蛏q4D$<$<xtFP@D$T$D$P$t$C$
D$D$$ݎPD$D$$a9s$
ݕPD$D$4$-9s$評4D$<$SptTP@D$T$D$P$t&$Z$xD$$H:돋4D$$Xt]PP@D$T$4$D$苊t/$$D$Ք4$行DžDc4D$<$hHtFP@D$T$D$P$t$o$D$4D$ݤ$Pt]PP@D$T$4$D$讉t/$$(D$4$ċDžD4D$<$苫xtFP@D$T$D$P$4t$蒋$hD$4D$"$(pt]PP@D$T$4$D$шt/$/$D$4$DžD4D$D<$讪XtFP@D$T$D$P$Wt$赊$D$4D$d$KHt]PP@D$T$4$D$t/$R$ 
D$>4$
DžD4D$<$ѩPtFP@D$T$D$P$zt$؉$\
D$(4D$$nxt]PP@D$T$4$D$t/$u$
D$a4$-DžD4D$<$ptFP@D$T$D$P$蝆t$$
D$K4D$إ$葨Xt]PP@D$T$4$D$:t/$蘈$D$脐4$PDžD4D$<$HtFP@D$ T$D$P$t$$HD$n41D$$貧PtP D$P4$4D$<$z@t4D$$Z@t4D$¢$:@t4D$$@t4D$+4$@t4D$<$Ԧ@t@4D$N$账xt4D$$蔦pt 4D$$tHt 4D$4$TPt4D$<$4@t@4D$$@t@4D$У$@t4D$5$ѥ@t4D$С4$豥@t4D$4<$葥@t@4D$#$nxhxh/l/|$D$$Lt%ux|h/l/4P,&4D$<$פpG,:u:Bt4D$$薤Pt$Ì4|$$k$/xxL$\$$苅$H~ :/Du~
€:/@t싅%=l=@=@\$$@Dž<4H,4D$P$舣p&PHЃ	Ѓ		$臋DžDD$<$(X=D$<$
X$h4D$I$âË@t,sD$֚4$ބi[$uԋP$蔂/wDžD=$TD$$:Dž\X*D$ D$<$D$~X\$D$$D$-9w/\D$4$!Ԁt$$4$轂X$迄t$$葉4$荂e$sOX$tt$$PhP\\D$/(/DžDžL$|$D$$/D$4$tZu+f=/u$م4$4$轁f=/u$覀$D$蒈 /h u$D$g/f=/t*$D$E~s /Džwπh4D$|<$貟XtbP@D$T$D$P$[}t4$$D$	h돁h끋4D$R$3HPP@D$T$4$D$|$2$D$4$~DžDD$$跞@tE4~,$趀\$$(†Dž$D$$9}xT$\$$W|hxD$T$P$4D$|xh4T$PD$D$4$A$,Džh؋P$4rL8u#f=/\$$葅x|$\$$V%=tN=@u8t|x4D$T$hD$؉$PQLLh4P$"U]Ít&'UWVS^qyE)E}Ut+1ƍED$ED$E$9}u߃[^_]Ë$ÐUS<'<'tЋu[]US[
@Y[ERROR: %sWARNING: %sLog size = %zu, max = %zu
-%Y%m%d_%H%M%S%s -> LOG_AUTHLOG_AUTHPRIVLOG_CRONLOG_DAEMONLOG_FTPLOG_KERNLOG_LPRLOG_MAILLOG_NEWSLOG_SYSLOGLOG_USERLOG_UUCPLOG_LOCAL0LOG_LOCAL1LOG_LOCAL2LOG_LOCAL3LOG_LOCAL4LOG_LOCAL5LOG_LOCAL6LOG_LOCAL7WARNING: Log size limit met but log file rotation turned off. Forcing log file rotation anyways.
Need to rotate log file due to size but ran out of memory.
Need to rotate log file due to size but could not get local time.
ERROR: Can't open %s in append mode (check permissions!).
WARNING: File locking not supported (NFS?)ERROR: %s is locked by another process
 P)H2=XEN0V_8 h(s|@POSIXLY_CORRECT%s: illegal option -- %c
%s: unrecognized option `%s'
%s: option `%s' is ambiguous
%s: option requires an argument -- %c
%s: option `--%s' doesn't allow an argument
%s: option `--%s' requires an argument
ERROR: optaddarg: Unregistered option %s
ERROR: optaddarg: strdup() failed
ERROR: optaddarg: malloc() failed
ERROR: optparse: Can't register new option (not enough memory)
ERROR: Problem parsing options (name == NULL)
ERROR: Parse error at line %d: Unknown option %s
WARNING: Ignoring unsupported option %s at line %u
ERROR: Can't register argument for option %s
WARNING: Ignoring deprecated option %s at line %u
ERROR: optparse: Can't compile regular expression %s for option %s
ERROR: Incorrect argument format for option %s
ERROR: Can't parse numerical argument for option %s
ERROR: Can't register argument for option --%s
WARNING: Numerical value for option %s too high, resetting to 4G
ERROR: optparse: longopts[] is too small
ERROR: optparse: shortopts[] is too small
ERROR: optparse: (short|long)opts[] is too small
ERROR: Please edit the example config file %s
ERROR: Missing argument for option at line %d
ERROR: Missing closing parenthesis in option %s at line %d
ERROR: Empty argument for option %s at line %d
ERROR: Incomplete option passed (missing argument)
ERROR: optparse: No corresponding long name for option '-%c'
WARNING: Ignoring unsupported option --%s (-%c)
WARNING: Ignoring unsupported option --%s
WARNING: Ignoring deprecated option --%s (-%c)
WARNING: Ignoring deprecated option --%s
ERROR: Incorrect argument format for option --%s (-%c)
ERROR: Incorrect argument format for option --%s
ERROR: Option --%s (-%c) requires a non-empty string argument
ERROR: Option --%s requires a non-empty string argument
ERROR: Can't parse numerical argument for option --%s (-%c)
ERROR: Can't parse numerical argument for option --%s
WARNING: Numerical value for option --%s (-%c) too high, resetting to 4G
ERROR: optparse: calloc failed
ERROR: optparse: strdup failed
/usr/local/cpanel/3rdparty/etc/clamd.conf/usr/local/cpanel/3rdparty/etc/freshclam.conf/usr/local/cpanel/3rdparty/etc/clamav-milter.confDump authenticode certificate chain./usr/local/cpanel/3rdparty/share/clamavAlways generate MDB entries for PE sectionsMaximum number of mismatched signatures when building a CVD. Zero disables this limit.Feature level to put in the CVDVersion number of the CVD to build/usr/local/cpanel/3rdparty/etcForce using the interpreter instead of the JITTrust loaded bytecode (default yes)Load and print bytecode information without executingPrint IR of bytecode signatureInput file to run the bytecode nDon't show source line during tracingSave all reports to a log file.HostID in the form of an UUID to use when submitting statistical information. See the clamscan manpage for more information.Enable submission of statistical dataDisable submission of PE section statistical dataTimeout in seconds to timeout communication with the stats server.By default the log file is locked for writing and only a single
daemon process can write to it. This option disables the lock.Maximum size of the log file.
Value of 0 disables the limit.Log all clean files.
Useful in debugging but drastically increases the log size.Use the system logger (can work together with LogFile).Type of syslog messages.
Please refer to 'man syslog' for the facility names.Rotate log file. Requires LogFileMaxSize option set prior to this option.Log additional information about the infected file, such as its
size and hash, together with the virus name.Save the process ID to a file.This option allows you to change the default temporary directory.This option allows you to change the default database directory.
If you enable it, please make sure it points to the same directory in
both clamd and freshclam.Only load the official signatures published by the ClamAV project.By default, yara rules will be loaded. This option allows you to exclude yara rules when scanning and also to scan only using yara rules. Valid options are yes|no|onlyPath to a local socket file the daemon will listen on.Sets the group ownership on the unix socket.Sets the permissions on the unix socket to the specified mode.Remove a stale socket after unclean shutdownA TCP port number the daemon will listen on.By default clamd binds to INADDR_ANY.
This option allows you to restrict the TCP address and provide
some degree of protection from the outside world.Maximum length the queue of pending connections may grow to.Close the STREAM session when the data size limit is exceeded.
The value should match your MTA's limit for the maximum attachment size.The STREAM command uses an FTP-like protocol.
This option sets the lower boundary for the port range.This option sets the upper boundary for the port range.Maximum number of threads running at the same time.This option specifies the time (in seconds) after which clamd should
timeout if a client doesn't provide any data.This option specifies the time (in seconds) after which clamd should
timeout if a client doesn't provide any initial command after connecting.This option specifies how long to wait (in miliseconds) if the send buffer
is full. Keep this value low to prevent clamd hanging.Waiting for data from clamd will timeout after this time (seconds).Maximum number of queued items (including those being processed by MaxThreads
threads). It is recommended to have this value at least twice MaxThreads
if possible.
WARNING: you shouldn't increase this too much to avoid running out of file
 descriptors, the following condition should hold:
 MaxThreads*MaxRecursion + MaxQueue - MaxThreads  + 6 < RLIMIT_NOFILE
 (usual max for RLIMIT_NOFILE is 1024)
This option specifies how long (in seconds) the process should wait
for a new job.Don't scan files/directories whose names match the provided
regular expression. This option can be specified multiple times.Maximum depth the directories are scanned at.Follow symlinks to regular files.Scan files and directories on other filesystems.This option specifies the time intervals (in seconds) in which clamd
should perform a database check.This option allows you to disable clamd's caching feature.Execute a command when a virus is found. In the command string %v will be
replaced with the virus name. Additionally, two environment variables will
be defined: $CLAM_VIRUSEVENT_FILENAME and $CLAM_VIRUSEVENT_VIRUSNAME./usr/bin/mailx -s "ClamAV VIRUS ALERT: %v" alert < /dev/nullStop the daemon when libclamav reports an out of memory condition.Permit use of the ALLMATCHSCAN command.Enable debug messages in libclamav.Don't remove temporary files (for debugging purposes).Run the daemon as a specified user (the process must be started by root).Initialize a supplementary group access (the process must be started by root).With this option enabled ClamAV will load bytecode from the database. It is highly recommended you keep this option on, otherwise you'll miss detections for many new viruses.Set bytecode security level.
Possible values:
	TrustSigned - trust bytecode loaded from signed .c[lv]d files,
		 insert runtime safety checks for bytecode loaded from other sources
	Paranoid - don't trust any bytecode, insert runtime checks for all
Recommended: TrustSigned, because bytecode in .cvd files already has these checks.Set bytecode timeout in miliseconds.Allow loading bytecode from outside digitally signed .c[lv]d files.^(Auto|ForceJIT|ForceInterpreter|Test)$Set bytecode execution mode.
Possible values:
	Auto - automatically choose JIT if possible, fallback to interpreter
ForceJIT - always choose JIT, fail if not possible
ForceInterpreter - always choose interpreter
Test - run with both JIT and interpreter and compare results. Make all failures fatal.^(none|None|bytecode|Bytecode|pcre|PCRE)$Collect and print execution statistics.
Possible values:
	Bytecode - reports bytecode statistics
PCRE - reports PCRE execution statistics
None - reports no statisticsDetect Potentially Unwanted Applications.Exclude a specific PUA category. This directive can be used multiple times.
See http://www.clamav.net/doc/pua.html for the complete list of PUA
categories.Only include a specific PUA category. This directive can be used multiple
times.In some cases (eg. complex malware, exploits in graphic files, and others),
ClamAV uses special algorithms to provide accurate detection. This option
controls the algorithmic detection.PE stands for Portable Executable - it's an executable file format used
in all 32- and 64-bit versions of Windows operating systems. This option
allows ClamAV to perform a deeper analysis of executable files and it's also
required for decompression of popular executable packers such as UPX or FSG.
If you turn off this option, the original files will still be scanned, but
without additional processing.Executable and Linking Format is a standard format for UN*X executables.
This option allows you to control the scanning of ELF files.
If you turn off this option, the original files will still be scanned, but
without additional processing.With this option enabled clamav will try to detect broken executables
(both PE and ELF) and mark them as Broken.Executable.Enable the built in email scanner.
If you turn off this option, the original files will still be scanned, but
without parsing individual messages/attachments.Scan RFC1341 messages split over many emails. You will need to
periodically clean up $TemporaryDirectory/clamav-partial directory.
WARNING: This option may open your system to a DoS attack. Please don't use
this feature on highly loaded servers.With this option enabled ClamAV will try to detect phishing attempts by using
signatures.Scan URLs found in mails for phishing attempts using heuristics.Always block cloaked URLs, even if they're not in the database.
This feature can lead to false positives.PhishingAlwaysBlockSSLMismatchAlways block SSL mismatches in URLs, even if they're not in the database.
This feature can lead to false positives.Detect partition intersections in raw disk images using heuristics.Allow heuristic match to take precedence.
When enabled, if a heuristic scan (such as phishingScan) detects
a possible virus/phish it will stop scan immediately. Recommended, saves CPU
scan-time.
When disabled, virus/phish detected by heuristic scans will be reported only
at the end of a scan. If an archive contains both a heuristically detected
virus/phish, and a real malware, the real malware will be reported.
Keep this disabled if you intend to handle "*.Heuristics.*" viruses
differently from "real" malware.
If a non-heuristically-detected virus (signature-based) is found first,
the scan is interrupted immediately, regardless of this config option.Enable the Data Loss Prevention module.This option sets the lowest number of Credit Card numbers found in a file
to generate a detect.This option sets the lowest number of Social Security Numbers found
in a file to generate a detect.With this option enabled the DLP module will search for valid
SSNs formatted as xxx-yy-zzzz.With this option enabled the DLP module will search for valid
SSNs formatted as xxxyyzzzzPerform HTML/JavaScript/ScriptEncoder normalisation and decryption.
If you turn off this option, the original files will still be scanned, but
without additional processing.This option enables scanning of OLE2 files, such as Microsoft Office
documents and .msi files.
If you turn off this option, the original files will still be scanned, but
without additional processing.With this option enabled OLE2 files with VBA macros, which were not
detected by signatures will be marked as "Heuristics.OLE2.ContainsMacros".This option enables scanning within PDF files.
If you turn off this option, the original files will still be scanned, but
without decoding and additional processing.This option enables scanning within SWF files.
If you turn off this option, the original files will still be scanned, but
without decoding and additional processing.Scan within archives and compressed files.
If you turn off this option, the original files will still be scanned, but
without unpacking and additional processing.Mark encrypted archives as viruses (Encrypted.Zip, Encrypted.RAR).This option causes memory or nested map scans to dump the content to disk.
If you turn on this option, more data is written to disk and is available
when the leave-temps option is enabled at the cost of more disk writes.This option sets the maximum amount of data to be scanned for each input file.
Archives and other containers are recursively extracted and scanned up to this
value.
The value of 0 disables the limit.
WARNING: disabling this limit or setting it too high may result in severe
damage.Files/messages larger than this limit won't be scanned. Affects the input
file itself as well as files contained inside it (when the input file is
an archive, a document or some other kind of container).
The value of 0 disables the limit.
WARNING: disabling this limit or setting it too high may result in severe
damage to the system.Nested archives are scanned recursively, e.g. if a Zip archive contains a RAR
file, all files within it will also be scanned. This option specifies how
deeply the process should be continued.
The value of 0 disables the limit.
WARNING: disabling this limit or setting it too high may result in severe
damage to the system.Number of files to be scanned within an archive, a document, or any other
container file.
The value of 0 disables the limit.
WARNING: disabling this limit or setting it too high may result in severe
damage to the system.This option sets the maximum size of a file to check for embedded PE.
Files larger than this value will skip the additional analysis step.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum size of a HTML file to normalize.
HTML files larger than this value will not be normalized or scanned.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum size of a normalized HTML file to scan.
HTML files larger than this value after normalization will not be scanned.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum size of a script file to normalize.
Script content larger than this value will not be normalized or scanned.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum size of a ZIP file to reanalyze type recognition.
ZIP files larger than this value will skip the step to potentially reanalyze as PE.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum number of partitions of a raw disk image to be scanned.
Raw disk images with more partitions than this value will have up to the value number partitions scanned.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum number of icons within a PE to be scanned.
PE files with more icons than this value will have up to the value number icons scanned.
Negative values are not allowed.
WARNING: setting this limit too high may result in severe damage or impact performance.This clamscan option is currently for testing only. It sets the engine parameter CL_ENGINE_TIME_LIMIT. The value is in milliseconds.This option sets the maximum calls to the PCRE match function during an instance of regex matching.
Instances using more than this limit will be terminated and alert the user but the scan will continue.
For more information on match_limit, see the PCRE documentation.
Negative values are not allowed.
WARNING: setting this limit too high may severely impact performance.This option sets the maximum recursive calls to the PCRE match function during an instance of regex matching.
Instances using more than this limit will be terminated and alert the user but the scan will continue.
For more information on match_limit_recursion, see the PCRE documentation.
Negative values are not allowed and values > PCREMatchLimit are superfluous.
WARNING: setting this limit too high may severely impact performance.This option sets the maximum filesize for which PCRE subsigs will be executed.
Files exceeding this limit will not have PCRE subsigs executed unless a subsig is encompassed to a smaller buffer.
Negative values are not allowed.
Setting this value to zero disables the limit.
WARNING: setting this limit too high or disabling it may severely impact performance.This option enables on-access scanning (Linux only)This option specifies a directory or mount point which should be scanned on access. The mount point specified, or the mount point containing the specified directory will be watched, but only notifications will occur. If any directories are specified, this option will preempt the DDD system. It can also be used multiple times.This option specifies a directory (including all files and directories
inside it), which should be scanned on access. This option can
be used multiple times.This option allows excluding directories from on-access scanning. It can
be used multiple times. Only works with DDD system.With this option you can whitelist specific UIDs. Processes with these UIDs
will be able to access all files.
This option can be used multiple times (one per line).Files larger than this value will not be scanned in on access.This option toggles the dynamic directory determination system for on-access scanning (Linux only).This option changes fanotify behavior to prevent access attempts on malicious files instead of simply notifying the user (On Access scan only).Enables extra scanning and notification after catching certain inotify events. Only works with the DDD system enabled.When started by root freshclam will drop privileges and switch to the user
defined in this option.This option defined how many times daily freshclam should check for
a database update.Use DNS to verify the virus database version. Freshclam uses DNS TXT records
to verify the versions of the database and software itself. With this
directive you can change the database verification domain.
WARNING: Please don't change it unless you're configuring freshclam to use
your own database verification domain.DatabaseMirror specifies to which mirror(s) freshclam should connect.
You should have at least two entries: db.XY.clamav.net (or db.XY.ipv6.clamav.net
for IPv6) and database.clamav.net (in this order). Please replace XY with your
country code (see http://www.iana.org/cctld/cctld-whois.htm).
database.clamav.net is a round-robin record which points to our most reliable
mirrors. It's used as a fall back in case db.XY.clamav.net is not working.db.XY.clamav.net
database.clamav.netThis option allows you to easily point freshclam to private mirrors.
If PrivateMirror is set, freshclam does not attempt to use DNS
to determine whether its databases are out-of-date, instead it will
use the If-Modified-Since request or directly check the headers of the
remote database files. For each database, freshclam first attempts
to download the CLD file. If that fails, it tries to download the
CVD file. This option overrides DatabaseMirror, DNSDatabaseInfo
and Scripted Updates. It can be used multiple times to provide
fall-back mirrors.mirror1.mynetwork.com
mirror2.mynetwork.comThis option defines how many attempts freshclam should make before giving up.With this option you can control scripted updates. It's highly recommended to keep them enabled.With this option enabled, freshclam will attempt to load new
databases into memory to make sure they are properly handled
by libclamav before replacing the old ones.By default freshclam will keep the local databases (.cld) uncompressed to
make their handling faster. With this option you can enable the compression.
The change will take effect with the next database update.Download an additional 3rd party signature database distributed through
the ClamAV mirrors. This option can be used multiple times.
Here you can find a list of available databases:
http://www.clamav.net/download/cvd/3rdpartyWith this option you can provide custom sources (http:// or file://) for database files.
This option can be used multiple times.http://myserver.com/mysigs.ndb
file:///mnt/nfs/local.hdbIf you're behind a proxy, please enter its address here.A user name for the HTTP proxy authentication.A password for the HTTP proxy authentication.If your servers are behind a firewall/proxy which does a User-Agent
filtering you can use this option to force the use of a different
User-Agent header.Send the RELOAD command to clamd after a successful update.Run a command after a successful database update.Run a command when a database update error occurs.Run a command when freshclam reports an outdated version.
In the command string %v will be replaced with the new version number.With this option you can provide a client address for the database downlading.
Useful for multi-homed systems.Timeout in seconds when connecting to database server.Timeout in seconds when reading from database server.When enabled freshclam will submit statistics to the ClamAV Project about
the latest virus detections in your environment. The ClamAV maintainers
will then use this data to determine what types of malware are the most
detected in the field and in what geographic area they are.
Freshclam will connect to clamd in order to get recent statistics.Country of origin of malware/detection statistics (for statistical
purposes only). The statistics collector at ClamAV.net will look up
your IP address to determine the geographical origin of the malware
reported by your installation. If this installation is mainly used to
scan data which comes from a different location, please enable this
option and enter a two-letter code (see http://www.iana.org/domains/root/db/)
of the country of origin.This option enables support for our "Personal Statistics" service.
When this option is enabled, the information on malware detected by
your clamd installation is made available to you through our website.
To get your HostID, log on http://www.stats.clamav.net and add a new
host to your host list. Once you have the HostID, uncomment this option
and paste the HostID here. As soon as your freshclam starts submitting
information to our stats collecting service, you will be able to view
the statistics of this clamd installation by logging into
http://www.stats.clamav.net with the same credentials you used to
generate the HostID. For more information refer to:
http://www.clamav.net/doc/cctts.html
This feature requires SubmitDetectionStats to be enabled.This option enables support for Google Safe Browsing. When activated for
the first time, freshclam will download a new database file (safebrowsing.cvd)
which will be automatically loaded by clamd and clamscan during the next
reload, provided that the heuristic phishing detection is turned on. This
database includes information about websites that may be phishing sites or
possible sources of malware. When using this option, it's mandatory to run
freshclam at least every 30 minutes.
Freshclam uses the ClamAV's mirror infrastructure to distribute the
database and its updates but all the contents are provided under Google's
terms of use. See http://www.google.com/transparencyreport/safebrowsing
and http://www.clamav.net/doc/safebrowsing.html for more information.This option enables downloading of bytecode.cvd, which includes additional
detection mechanisms and improvements to the ClamAV engine.Disable authenticode certificate chain verification in PE files.Define the clamd socket to connect to for scanning.
This option is mandatory! Syntax:
  ClamdSocket unix:path
  ClamdSocket tcp:host:port
The first syntax specifies a local unix socket (needs an absolute path) e.g.:
  ClamdSocket unix:/var/run/clamd/clamd.socket
The second syntax specifies a tcp local or remote tcp socket: the
host can be a hostname or an ip address; the ":port" field is only required
for IPv6 addresses, otherwise it defaults to 3310
  ClamdSocket tcp:192.168.0.1
This option can be repeated several times with different sockets or even
with the same socket: clamd servers will be selected in a round-robin fashion.Define the interface through which we communicate with sendmail.
This option is mandatory! Possible formats are:
[[unix|local]:]/path/to/file - to specify a unix domain socket;
inet:port@[hostname|ip-address] - to specify an ipv4 socket;
inet6:port@[hostname|ip-address] - to specify an ipv6 socket./tmp/clamav-milter.socket
inet:7357Define the group ownership for the (unix) milter socket.Sets the permissions on the (unix) milter socket to the specified mode.Messages originating from these hosts/networks will not be scanned
This option takes a host(name)/mask pair in CIRD notation and can be
repeated several times. If "/mask" is omitted, a host is assumed.
To specify a locally orignated, non-smtp, email use the keyword "local".local
192.168.0.0/24
1111:2222:3333::/48^(Accept|Reject|Defer|Blackhole|Quarantine)$Action to be performed on clean messages (mostly useful for testing).
The following actions are available:
Accept: the message is accepted for delievery
Reject: immediately refuse delievery (a 5xx error is returned to the peer)
Defer: return a temporary failure message (4xx) to the peer
Blackhole: like Accept but the message is sent to oblivion
Quarantine: like Accept but message is quarantined instead of being deliveredAction to be performed on error conditions (this includes failure to
allocate data structures, no scanners available, network timeouts, unknown
scanner replies and the like.
The following actions are available:
Accept: the message is accepted for delievery;
Reject: immediately refuse delievery (a 5xx error is returned to the peer);
Defer: return a temporary failure message (4xx) to the peer.This option allows you to set a specific rejection reason for infected messages
and it's therefore only useful together with "OnInfected Reject"
The string "%v", if present, will be replaced with the virus name.If this option is set to "Replace" (or "Yes"), an "X-Virus-Scanned" and an
"X-Virus-Status" headers will be attached to each processed message, possibly
replacing existing headers.
If it is set to Add, the X-Virus headers are added possibly on top of the
existing ones.
Note that while "Replace" can potentially break DKIM signatures, "Add" may
confuse procmail and similar filters.When AddHeader is in use, this option allows you to set the reported
hostname. This may be desirable in order to avoid leaking internal names.
If unset the real machine name is used.Execute a command when an infected message is processed.
The following parameters are passed to the invoked program in this order:
virus name, queue id, sender, destination, subject, message id, message date.
Note #1: this requires MTA macroes to be available (see LogInfected below)
Note #2: the process is invoked in the context of clamav-milter
Note #3: clamav-milter will wait for the process to exit. Be quick or fork to
avoid unnecessary delays in email delievery/usr/local/bin/my_infected_message_handlerChroot to the specified directory.
Chrooting is performed just after reading the config file and before
dropping privileges.This option specifies a file which contains a list of basic POSIX regular
expressions. Addresses (sent to or from - see below) matching these regexes
will not be scanned.  Optionally each line can start with the string "From:"
or "To:" (note: no whitespace after the colon) indicating if it is,
respectively, the sender or recipient that is to be whitelisted.
If the field is missing, "To:" is assumed.
Lines starting with #, : or ! are ignored.Messages from authenticated SMTP users matching this extended POSIX
regular expression (egrep-like) will not be scanned.
As an alternative, a file containing a plain (not regex) list of names (one
per line) can be specified using the prefix "file:".
e.g. SkipAuthenticated file:/etc/good_guys

Note: this is the AUTH login name!SkipAuthenticated ^(tom|dick|henry)$This option allows you to tune what is logged when a message is infected.
Possible values are Off (the default - nothing is logged),
Basic (minimal info logged), Full (verbose info logged)
Note:
For this to work properly in sendmail, make sure the msg_id, mail_addr,
rcpt_addr and i macroes are available in eom. In other words add a line like:
Milter.macros.eom={msg_id}, {mail_addr}, {rcpt_addr}, i
to your .cf file. Alternatively use the macro:
define(`confMILTER_MACROS_EOM', `{msg_id}, {mail_addr}, {rcpt_addr}, i')
Postfix should be working fine with the default settings.This option allows you to tune what is logged when no threat is found in a scanned message.
See LogInfected for possible values and caveats.
Useful in debugging but drastically increases the log size.This option affects the behaviour of LogInfected, LogClean and VirusAction
when a message with multiple recipients is scanned:
If SupportMultipleRecipients is off (the default)
then one single log entry is generated for the message and, in case the
message is determined to be malicious, the command indicated by VirusAction
is executed just once. In both cases only the last recipient is reported.
If SupportMultipleRecipients is on:
then one line is logged for each recipient and the command indicated
by VirusAction is also executed once for each recipient.

Note: although it's probably a good idea to enable this option, the default value
is currently set to off for legacy reasons.fooyestrueExample 	ERROR: Unknown option passed
help^(yes|true|1|no|false|0)$config-filedebuggen-jsondumpcertsquietleave-tempsno-warningsstdoutdaemonno-dnslist-mirrorsupdate-dbreloadmultiscanfdpassstreamallmatchdatabaserecursivegen-mdbfollow-dir-symlinks^[0-9]+$follow-file-symlinksbellno-summaryfile-listinfectedsuppress-ok-resultscopyremoveexcludeexclude-dirinclude-dirstructured-ssn-formathex-dumpmd5sha1sha256print-certshtml-normaliseascii-normaliseutf16-decodebuildmax-bad-sigs3000flevelcvd-versionno-cdiffserverunpackunpack-currentinfolist-sigsfind-sigsdecode-sigstest-sigsvbavba-hexcomparerun-cdiffverify-cdiffdefaultcolorsconfig-dirnon-defaultgenerate-configforce-interpretertrust-bytecodeprintsrcPrint source code of bytecodeprintbcirinputtracebytecode trace levelno-trace-showsourcearchive-verbosebytecode-trust-allhttp-proxyproxy-userlog-verboseforcedisable-summarydisable-archiveno-archiveno-peno-elfno-ole2no-pdfno-htmlno-mailno-phishing-sigsno-phishing-scan-urlsno-algorithmicno-phishing-restrictedscanmax-ratiomax-space^[0-9]+[KM]?$block-maxunzipunrararjunzoolhajartartgzdeb/tmp/clamav.logstats-host-idStatsEnabledenable-statsStatsPEDisableddisable-pe-statsnoStatsTimeoutstats-timeoutLogFileUnlockLogFileMaxSizeLogTimeLog time with each message.LogCleanLogSyslogLogFacilityLogVerboseEnable verbose logging.LogRotatelog-rotateExtendedDetectionInfoPidFile/var/run/clam.pidTemporaryDirectorytempdir/tmpDatabaseDirectorydatadir/var/lib/clamavOfficialDatabaseOnlyofficial-db-onlyYaraRulesyara-rulesLocalSocket/tmp/clamd.socketLocalSocketGroupvirusgroupLocalSocketMode660FixStaleSocketTCPSocket3310TCPAddr127.0.0.1MaxConnectionQueueLength30StreamMaxLength25MStreamMinPort1024StreamMaxPort2048MaxThreads120CommandReadTimeoutSendBufTimeout200300MaxQueueIdleTimeout^/proc/
^/sys/MaxDirectoryRecursionmax-dir-recursion15FollowDirectorySymlinksFollow directory symlinks.FollowFileSymlinksCrossFilesystemscross-fsSelfCheck600DisableCachedisable-cacheVirusEventExitOnOOMAllowAllMatchScanForegroundDon't fork into background.DebugLeaveTemporaryFilesUserAllowSupplementaryGroupsBytecodeBytecodeSecurity^(TrustSigned|Paranoid)$TrustSignedBytecodeTimeoutbytecode-timeout5000BytecodeUnsignedbytecode-unsignedBytecodeModebytecode-modeAutoStatisticsstatisticsNoneDetectPUAdetect-puaExcludePUAexclude-puaNetTool
PWToolIncludePUAinclude-puaSpy
Scanner
RATAlgorithmicDetectionalgorithmic-detectionScanPEscan-peScanELFscan-elfDetectBrokenExecutablesdetect-brokenScanMailscan-mailScanPartialMessagesPhishingSignaturesPhishingScanURLsPhishingAlwaysBlockCloakphishing-cloakphishing-sslPartitionIntersectionpartition-intersectionHeuristicScanPrecedenceheuristic-scan-precedenceStructuredDataDetectiondetect-structuredStructuredMinCreditCardCountstructured-cc-countStructuredMinSSNCountstructured-ssn-countStructuredSSNFormatNormalStructuredSSNFormatStrippedScanHTMLscan-htmlScanOLE2scan-ole2OLE2BlockMacrosScanPDFscan-pdfScanSWFscan-swfScanArchivescan-archiveArchiveBlockEncryptedblock-encryptedForceToDiskforce-to-diskmax-scansize100Mmax-recursion16max-files10000MaxEmbeddedPEmax-embeddedpe10MMaxHTMLNormalizemax-htmlnormalizeMaxHTMLNoTagsmax-htmlnotags2MMaxScriptNormalizemax-scriptnormalizeMaxZipTypeRcgmax-ziptypercg1MMaxPartitionsmax-partitions128MaxIconsPEmax-iconspe100TimeLimittimelimitPCREMatchLimitpcre-match-limitPCRERecMatchLimitpcre-recmatch-limitPCREMaxFileSizepcre-max-filesizeOnAccessMountPath/
/home/userOnAccessIncludePathon-access-include/home
/studentsOnAccessExcludePath/home/bofh
/rootOnAccessExcludeUIDOnAccessMaxFileSizeOnAccessDisableDDDdisable-dddOnAccessPreventionOnAccessExtraScanningDevACOnlydev-ac-onlyDevACDepthdev-ac-depthDevPerformancedev-performanceDevLiblogdev-liblogUpdateLogFile/var/log/freshclam.logDatabaseOwnerCheckschecksDNSDatabaseInfocurrent.cvd.clamav.netDatabaseMirrorPrivateMirrorMaxAttemptsScriptedUpdatesTestDatabasesCompressLocalDatabaseExtraDatabasedbname1
dbname2DatabaseCustomURLHTTPProxyServeryour-proxyHTTPProxyPortHTTP proxy's port8080HTTPProxyUsernameusernameHTTPProxyPasswordHTTPUserAgentNotifyClamddaemon-notifyOnUpdateExecuteon-update-executecommandOnErrorExecuteon-error-executeOnOutdatedExecuteon-outdated-executeLocalIPAddresslocal-addressaaa.bbb.ccc.dddConnectTimeoutReceiveTimeoutSubmitDetectionStats/path/to/clamd.confDetectionStatsCountrycountry-codeDetectionStatsHostIDunique-idSafeBrowsingDisableCertChecknocertsMailMaxRecursionArchiveMaxScanSizeArchiveMaxRecursionArchiveMaxFilesArchiveMaxCompressionRatioArchiveBlockMaxArchiveLimitMemoryUsageMailFollowURLsmail-follow-urlsClamukoScanOnAccessClamukoScannerCountClamukoScanOnOpenClamukoScanOnCloseClamukoScanOnExecClamukoIncludePathClamukoExcludePathClamukoExcludeUIDClamukoMaxFileSizeClamdSockettcp:scanner.mydomain:7357MilterSocketMilterSocketGroupMilterSocketModeLocalNetOnCleanAcceptOnInfectedQuarantineOnFail^(Accept|Reject|Defer)$DeferRejectMsgMTA specificAddHeader^(No|Replace|Yes|Add)$ReplaceReportHostnamemy.mail.server.nameVirusActionChroot/newrootWhitelist/etc/whitelisted_addressesSkipAuthenticatedLogInfectedBasicSupportMultipleRecipientsh˗˗	c<)˗˗	h)˗˗	c)˗˗ڙV˗˗+˗˗)˗˗&v:˗˗$)˗.:˗˗4˗˗@˗˗L:˗˗Sd˗˗Z˗˗a˗˗n˗˗x˗˗m˗˗˗˗˗˗z˗˗d)˗˗r˗˗*˗Ϙ˗˗ؘϘ˗˗˗˗˗˗f˗˗i˗˗o˗˗+˗˗$˗˗)˗˗0˗˗8˗˗K˗˗D˗˗PϘ˗˗f ˗˗o ˗˗s ˗˗x ˗˗ ˗˗ ˗˗ ˗˗ ˗˗ ˗˗b ˗˗Ϙ H*ʙϙϘQ *˗֙Ϙ *˗ ˗˗ ˗˗ ˗˗u ˗˗ ˗˗i ˗˗
l) ˗˗f) ˗˗! ˗˗- ˗˗7 ˗˗; ˗˗Pd ˗˗Cc ˗˗Kr ˗˗U ˗˗bd˗˗pc*@˗˗{n@˗˗g@˗˗f+˗t4+˗iX+˗p˗ߚc+˗r+˗TϘ˗
s+˗a˗˗.t˗˗A˗˗L˗˗W˗˗c˗˗i˗˗y˗˗˗˗˗˗˗˗˗˗˗˗˗˗˗˗˗˗ћ˗˗˗˗˗˗Ϙ˗˗%˗˗3˗˗=˗˗C˗˗I˗˗M˗˗S˗˗W˗˗[˗˗_˗˗c˗˗_zl+gw,,	,ÜМϘ,ޜ<-%-֞-(P.2.V>Iak.v$/p/-/Ɲ؝)#/	0 0+17I1Ze1uy02Ϙ`22Ϙ(3žŞ%h3՞ٞϘ3ϘX4Ϙ
4Ϙx4
Ϙ85!Ϙ50ϘxL648Ϙd60AϘ 8vSt8M\rϘ	8$9͟ޟ	H9ϘX|9	9 ::<;%;7B^;d;x<}P<֚	<ɠP=ɠՠϘ	>	>+?9	0?9>I\@@TYc	0Any	\A	AС	LB	C	D	E,5	F?FSÛ	Gfԛ	Hw	DHH	H˗¢	DI٢	I#	L5RϘ	DLf|Ϙ	LMhMǣУ	Mڣ	tN@O	O	xP+	 Q8N	Q^j	RGx%@	R%
T՞ZϘ	TUnϘ'	V%	xWȤ̤ݤ%	|XȤ% 	|Y"%P	Z֞6D%	[SVdϘ2	\swϘd	]Ϙ^%'	_ƥإϘ	`Ϙ	b՞dHd -AeSc0fwϘf%PXg֞¦gΦgh	˗˗
Ϙ	˗˗%4	˗˗DN˗˗Yzl+g~RuicϘhiiklЧloާϘ<ooop˗lq,<PrrNs^iϘwLs|ssɨը<)Htt
t-?tSbapupϘužϘvžPvǩwݩly	d|h'	/˗˗@˗˗S˗˗g˗˗w˗˗˗˗˗˗ɪ	˗˗ڪ˗˗Ϙ˗˗˗˗˗˗'˗˗9˗˗L˗˗_Ϙ˗˗q%P˗˗4Zɫ@uګȅȅ''-07DNem|<@Ѭ̑88˗˗Ɲ˗˗^˗˗˗˗d˗˗+˗˗˗˗G%˗˗nϘ˗˗ZϘ˗˗S˗˗˗˗ǣ˗˗,˗˗ڣ˗˗˗˗Ş%˗˗˗˗Ϙ˗˗˗˗!Can't remove file '%s'.
~%s: Removed.
%s/%s%s/%s.%03u!Can't copy file '%s'
~%s: copied to '%s'
!Can't move file %s
!Can't unlink '%s': %s
~%s: moved to '%s'
!'%s' doesn't exist or is not a directory
0.99%s//dev/nullCan't open /dev/null
dup2(%d, %d) failed
%s/daily.cvd%s/daily.cldClamAV %s
ClamAV %s/%u/%sERROR: This tool requires libclamav with functionality level %u or higher (current f-level: %u)
Unable to allocate memory for db directory...
ERROR: --file-list: Can't open file %s
(*) Default scan settings
setrlimitKnown viruses: %u
Engine version: %s
Scanned directories: %u
Scanned files: %u
Infected files: %u
Total errors: %u
Not removed: %u
movedcopiedNot %s: %u
Data scanned: %2.2lf MB
                       Clam AntiVirus Scanner %s
           By The ClamAV Team: http://www.clamav.net/about.html#credits           (C) 2007-2015 Cisco Systems, Inc.
    --help                -h             Print this help screen
    --version             -V             Print version number
    --verbose             -v             Be verbose
    --archive-verbose     -a             Show filenames inside scanned archives
    --debug                              Enable libclamav's debug messages
    --quiet                              Only output error messages
    --stdout                             Write to stdout instead of stderr
    --no-summary                         Disable summary at end of scanning
    --infected            -i             Only print infected files
    --suppress-ok-results -o             Skip printing OK files
    --bell                               Sound bell on virus detection
    --tempdir=DIRECTORY                  Create temporary files in DIRECTORY
    --leave-temps[=yes/no(*)]            Do not remove temporary files
    --database=FILE/DIR   -d FILE/DIR    Load virus database from FILE or load
                                         all supported db files from DIR
    --official-db-only[=yes/no(*)]       Only load official signatures
    --log=FILE            -l FILE        Save scan report to FILE
    --recursive[=yes/no(*)]  -r          Scan subdirectories recursively
    --allmatch[=yes/no(*)]   -z          Continue scanning within file after finding a match
    --cross-fs[=yes(*)/no]               Scan files and directories on other filesystems
    --follow-dir-symlinks[=0/1(*)/2]     Follow directory symlinks (0 = never, 1 = direct, 2 = always)
    --follow-file-symlinks[=0/1(*)/2]    Follow file symlinks (0 = never, 1 = direct, 2 = always)
    --file-list=FILE      -f FILE        Scan files from FILE
    --remove[=yes/no(*)]                 Remove infected files. Be careful!
    --move=DIRECTORY                     Move infected files into DIRECTORY
    --copy=DIRECTORY                     Copy infected files into DIRECTORY
    --exclude=REGEX                      Don't scan file names matching REGEX
    --exclude-dir=REGEX                  Don't scan directories matching REGEX
    --include=REGEX                      Only scan file names matching REGEX
    --include-dir=REGEX                  Only scan directories matching REGEX
    --bytecode[=yes(*)/no]               Load bytecode from the database
    --bytecode-unsigned[=yes/no(*)]      Load unsigned bytecode
    --bytecode-timeout=N                 Set bytecode timeout (in milliseconds)
    --statistics[=none(*)/bytecode/pcre] Collect and print execution statistics
    --detect-pua[=yes/no(*)]             Detect Possibly Unwanted Applications
    --exclude-pua=CAT                    Skip PUA sigs of category CAT
    --include-pua=CAT                    Load PUA sigs of category CAT
    --detect-structured[=yes/no(*)]      Detect structured data (SSN, Credit Card)
    --structured-ssn-format=X            SSN format (0=normal,1=stripped,2=both)
    --structured-ssn-count=N             Min SSN count to generate a detect
    --structured-cc-count=N              Min CC count to generate a detect
    --scan-mail[=yes(*)/no]              Scan mail files
    --phishing-sigs[=yes(*)/no]          Signature-based phishing detection
    --phishing-scan-urls[=yes(*)/no]     URL-based phishing detection
    --heuristic-scan-precedence[=yes/no(*)] Stop scanning as soon as a heuristic match is found
    --phishing-ssl[=yes/no(*)]           Always block SSL mismatches in URLs (phishing module)
    --phishing-cloak[=yes/no(*)]         Always block cloaked URLs (phishing module)
    --partition-intersection[=yes/no(*)] Detect partition intersections in raw disk images using heuristics.
    --algorithmic-detection[=yes(*)/no]  Algorithmic detection
    --scan-pe[=yes(*)/no]                Scan PE files
    --scan-elf[=yes(*)/no]               Scan ELF files
    --scan-ole2[=yes(*)/no]              Scan OLE2 containers
    --scan-pdf[=yes(*)/no]               Scan PDF files
    --scan-swf[=yes(*)/no]               Scan SWF files
    --scan-html[=yes(*)/no]              Scan HTML files
    --scan-archive[=yes(*)/no]           Scan archive files (supported by libclamav)
    --detect-broken[=yes/no(*)]          Try to detect broken executable files
    --block-encrypted[=yes/no(*)]        Block encrypted archives
    --nocerts                            Disable authenticode certificate chain verification in PE files
    --dumpcerts                          Dump authenticode certificate chain in PE files
    --max-filesize=#n                    Files larger than this will be skipped and assumed clean
    --max-scansize=#n                    The maximum amount of data to scan for each container file (**)
    --max-files=#n                       The maximum number of files to scan for each container file (**)
    --max-recursion=#n                   Maximum archive recursion level for container file (**)
    --max-dir-recursion=#n               Maximum directory recursion level
    --max-embeddedpe=#n                  Maximum size file to check for embedded PE
    --max-htmlnormalize=#n               Maximum size of HTML file to normalize
    --max-htmlnotags=#n                  Maximum size of normalized HTML file to scan
    --max-scriptnormalize=#n             Maximum size of script file to normalize
    --max-ziptypercg=#n                  Maximum size zip to type reanalyze
    --max-partitions=#n                  Maximum number of partitions in disk image to be scanned
    --max-iconspe=#n                     Maximum number of icons in PE file to be scanned
    --pcre-match-limit=#n                Maximum calls to the PCRE match function.
    --pcre-recmatch-limit=#n             Maximum recursive calls to the PCRE match function.
    --pcre-max-filesize=#n               Maximum size file to perform PCRE subsig matching.
    --enable-stats                       Enable statistical reporting of malware
    --disable-pe-stats                   Disable submission of individual PE sections in stats submissions
    --stats-timeout=#n                   Number of seconds to wait for waiting a response back from the stats server
    --stats-host-id=UUID                 Set the Host ID used when submitting statistical info.
(**) Certain files (e.g. documents, archives, etc.) may in turn contain other
   files inside. The above options ensure safe processing of this kind of data.

!Can't parse command line options
#
-------------------------------------------------------------------------------

!Problem with internal logger.

----------- SCAN SUMMARY -----------
Data read: %2.2lf MB (ratio %.2f:1)
Time: %u.%3.3u sec (%u m %u s)
P?(filename not set)~%s: %s FOUND
noneHostID is valid: %s
ERROR: setgid(%d) failed.
ERROR: setuid(%d) failed.
~%s: Excluded
~%s: Excluded (/proc)
~%s: Empty file
~%s: Access denied
*Scanning %s
^Can't open file %s: %s
...~%s%s!(%u)%s: %s FOUND
~%s!(%u): %s FOUND
~%s: OK
~%s: %s ERROR
%s: Symbolic link
~%s: Can't open directory.
CL_TYPE_ANY%s:%s*Scanning %s%s!%s
anonymous!Invalid HostID
.%sForceJITForceInterpreterTestpcre/proc-wb!Can't open %s for writing
!Can't write to %s
*Checking %s
stdinstdin: %s FOUND
stdin: OK
stdin: %s ERROR
^%s: Can't access file
^%s: Not supported file type
5b585e8f-3be5-11e3-bf0b-18037319526c!scandirs: Memory allocation failed for fname
!--follow-dir-symlinks: Invalid argument
!--follow-file-symlinks: Invalid argument
!Can't initialize libclamav: %s
!Can't initialize antivirus engine
!Can't allocate memory for pua_cats
!--exclude-pua and --include-pua cannot be used at the same time
!cli_engine_set_str(CL_ENGINE_PUA_CATEGORIES) failed: %s
!cli_engine_set_str(CL_ENGINE_TMPDIR) failed: %s
!Database initialization error: %s
!cli_engine_set_num(CL_ENGINE_MAX_SCANSIZE) failed: %s
!cli_engine_set_num(CL_ENGINE_MAX_FILESIZE) failed: %s
^System limit for file size is lower than engine->maxfilesize
^System limit for file size is lower than engine->maxscansize
^Cannot obtain resource limits for file size
!cli_engine_set_num(CL_ENGINE_MAX_FILES) failed: %s
!cli_engine_set_num(CL_ENGINE_MAX_RECURSION) failed: %s
!cli_engine_set_num(CL_ENGINE_MAX_EMBEDDEDPE) failed: %s
!cli_engine_set_num(CL_ENGINE_MAX_HTMLNORMALIZE) failed: %s
!cli_engine_set_num(CL_ENGINE_MAX_HTMLNOTAGS) failed: %s
!cli_engine_set_num(CL_ENGINE_MAX_SCRIPTNORMALIZE) failed: %s
!cli_engine_set_num(CL_ENGINE_MAX_ZIPTYPERCG) failed: %s
!cli_engine_set_num(CL_ENGINE_MAX_PARTITIONS) failed: %s
!cli_engine_set_num(CL_ENGINE_MAX_ICONSPE) failed: %s
!cli_engine_set_num(CL_ENGINE_TIME_LIMIT) failed: %s
!cli_engine_set_num(CL_ENGINE_PCRE_MATCH_LIMIT) failed: %s
!cli_engine_set_num(CL_ENGINE_PCRE_RECMATCH_LIMIT) failed: %s
!cli_engine_set_num(CL_ENGINE_PCRE_MAX_FILESIZE) failed: %s
!Invalid argument for --structured-ssn-format
!cli_engine_set_num(CL_ENGINE_MIN_SSN_COUNT) failed: %s
!cli_engine_set_num(CL_ENGINE_MIN_CC_COUNT) failed: %s
!Can't get absolute pathname of current working directory
!Can't write to temporary directory
!Can't generate tempfile name
^Only scanning files from --file-list (files passed at cmdline are ignored)
;x.Ў0p(@HШh0Щ $Hl pP0(@@`Xx ,P0h0PP<p`
|PAB
E8ОAB
IXjAB
Ix07AB
pAB
I@AB
F@AB
Fи'AB
A'AB
A(0MAB
ACHOAB
EhйAB
F sAB
ACF  AB
FHH AB
ACFAB
I	AB
E4 IAB
DPpDAB
AGpAB
EPAB
E0
AG
@AB
`AB
BI #AB
III$ qAB
FD	AB
\IAB
tAB
LAB
F HAB
KFFRAB
(0D	FAB
R0AB
4P2AB
LhAB
dAG
JAB
BFAB
XF PAB
FEE p"AB
ACIAB
AJ,IAB
ILAB
^zR|AB
8iAB
C*4AKVL,
ohȁ
|(l oooP'Zjzʖږ
*:JZjzʗڗ
*:JZjzʘژ
*:JZjzʙڙ
*:JZjzʚښ
*:JZjzʛڛ
*:JZjzʜڜ
*:JZjzd GCC: (GNU) 4.1.2 20080704 (Red Hat 4.1.2-54)GCC: (GNU) 4.1.2 20080704 (Red Hat 4.1.2-54)GCC: (GNU) 4.1.2 20080704 (Red Hat 4.1.2-54)GCC: (GNU) 4.1.2 20080704 (Red Hat 4.1.2-54)GCC: (GNU) 4.1.2 20080704 (Red Hat 4.1.2-54)GCC: (GNU) 4.1.2 20080704 (Red Hat 4.1.2-54)GCC: (GNU) 4.1.2 20080704 (Red Hat 4.1.2-54)GCC: (GNU) 4.1.2 20080704 (Red Hat 4.1.2-54)GCC: (GNU) 4.1.2 20080704 (Red Hat 4.1.2-54)GCC: (GNU) 4.1.2 20080704 (Red Hat 4.1.2-54)GCC: (GNU) 4.1.2 20080704 (Red Hat 4.1.2-54)GCC: (GNU) 4.1.2 20080704 (Red Hat 4.1.2-54).symtab.strtab.shstrtab.interp.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.dynamic.got.got.plt.data.bss.comment44#HH 1ohh`;ȁ0C	KoXog	ll p	y,,tDDP@ |||<'<D'DL'LP'P(x(x|(|X*X*t t(E	ĝ<'D'-L':*H*WmPy@'8L'p` *@0Ms *P*# I1pD9*C*L+W0[P2sPp"I<'<'P'<'<'<'<'"|(4Hhȁl	,
D
|<'D'L'P'x(|(X**8Rzb*o4e**E	='C0
OHX1jt*h**X* #2D,eew q@*<T*0 P::EWhqy_H''Oи']
3@R@/%Yk29***%
+h/3%E UDv=<0MVdM{qx)*	`*	d*"	4	4a	Ir				g		=			*	R	*
*
-,
=D
2[
ir
R
/
D
/
+
C
,

*
#
/ *$\*.O_ОgD}bX*hp/'	jT%N9P*_ol*/It***

52
T
id


*
/
p

E/CTPb;vй~Wo=D++j@R^*bW|9`**p* +"=@G(r@07*n2call_gmon_start__CTOR_LIST____DTOR_LIST____JCR_LIST__dtor_idx.5793completed.5791__do_global_dtors_auxframe_dummy__CTOR_END____FRAME_END____JCR_END____do_global_ctors_auxfacilitymapcharind.3503_getopt_internaloptget_ioptaddoptaddargactargetaction_copyaction_movetarglenaction_removegetdestcnt.20073fs.20075buff.20072preclamscan_virus_found_cbprint_chainpostcheckaccessscanfilescandirsmeta__fini_array_start__fini_array_end_DYNAMIC__init_array_end__preinit_array_start__preinit_array_end__init_array_start_GLOBAL_OFFSET_TABLE___printf_chk@@GLIBC_2.3.4open@@GLIBC_2.0logg_verbosefread@@GLIBC_2.0fileno@@GLIBC_2.0setgid@@GLIBC_2.0mprintf_nowarnfork@@GLIBC_2.0cl_debug@@CLAMAV_PUBLICmprintf_verbose__strtoul_internal@@GLIBC_2.0access@@GLIBC_2.0scanmanagercli_regfree@@CLAMAV_PRIVATEget_versionfilelistsetsid@@GLIBC_2.0cli_ctime@@CLAMAV_PRIVATEcl_engine_set_clcb_stats_submit@@CLAMAV_PUBLIC_edatacl_engine_set_clcb_post_scan@@CLAMAV_PUBLICopterrlogg_timecl_engine_get_num@@CLAMAV_PUBLICdata_start_IO_stdin_usedselect@@GLIBC_2.0cl_engine_set_num@@CLAMAV_PUBLICsetuid@@GLIBC_2.0daemonizecli_regexec@@CLAMAV_PRIVATElogg_filecalloc@@GLIBC_2.0cl_engine_compile@@CLAMAV_PUBLIC_fp_hwoptoptoptadditemmain__clam_optionscl_engine_set_clcb_stats_get_hostid@@CLAMAV_PUBLIC__strtol_internal@@GLIBC_2.0fputc@@GLIBC_2.0fgets@@GLIBC_2.0fwrite@@GLIBC_2.0__DTOR_END__memcpy@@GLIBC_2.0geteuid@@GLIBC_2.0optgetmy_getopt_long_onlyumask@@GLIBC_2.0cli_regcomp@@CLAMAV_PRIVATEmalloc@@GLIBC_2.0cl_retflevel@@CLAMAV_PUBLIC__dso_handlestrlen@@GLIBC_2.0hostidgetcwd@@GLIBC_2.0__sprintf_chk@@GLIBC_2.3.4__snprintf_chk@@GLIBC_2.3.4readdir@@GLIBC_2.0stdout@@GLIBC_2.0cl_scanfile_callback@@CLAMAV_PUBLICcli_pcre_perf_print@@CLAMAV_PRIVATEnotmovedlogg_noflush_finiprocdevstrcmp@@GLIBC_2.0time@@GLIBC_2.0cl_engine_set_clcb_pre_cache@@CLAMAV_PUBLICsetrlimit@@GLIBC_2.2__errno_location@@GLIBC_2.0strncpy@@GLIBC_2.0send@@GLIBC_2.0cl_initialize_crypto@@CLAMAV_PRIVATEfflush@@GLIBC_2.0cl_scandesc_callback@@CLAMAV_PUBLIC__vsnprintf_chk@@GLIBC_2.3.4optparseprint_versionsigemptyset@@GLIBC_2.0__xpg_basename@@GLIBC_2.0cl_engine_free@@CLAMAV_PUBLIC__strcpy_chk@@GLIBC_2.3.4strrchr@@GLIBC_2.0cl_strerror@@CLAMAV_PUBLICnotremovedmprintf_send_timeoutoptindgetenv@@GLIBC_2.0cli_pcre_perf_events_destroy@@CLAMAV_PRIVATEfputs@@GLIBC_2.0sigprocmask@@GLIBC_2.0actsetupstrchr@@GLIBC_2.0freshdbdirrename@@GLIBC_2.0__libc_start_main@@GLIBC_2.0_startmprintf_disabledhelplogg_rotatestdin@@GLIBC_2.0getpwnam@@GLIBC_2.0gettimeofday@@GLIBC_2.0localtime_r@@GLIBC_2.0__i686.get_pc_thunk.bxcli_gettmpdir@@CLAMAV_PRIVATEinfogetrlimit@@GLIBC_2.2bell__syslog_chk@@GLIBC_2.4__stack_chk_fail@@GLIBC_2.4_initoptargmatch_regexlogg_syslog_Jv_RegisterClasseslogg_fplogg_lockcl_engine_set_str@@CLAMAV_PUBLICfree@@GLIBC_2.0mprintf__lxstat64@@GLIBC_2.2strncmp@@GLIBC_2.0strcasecmp@@GLIBC_2.0__data_startcli_filecopy@@CLAMAV_PRIVATEis_valid_hostid_endmy_getopt_longfilecopyloggopendir@@GLIBC_2.0wait@@GLIBC_2.0closedir@@GLIBC_2.0cl_init@@CLAMAV_PUBLICmprintf_stdoutexit@@GLIBC_2.0cl_load@@CLAMAV_PUBLICclam_optionsstrerror@@GLIBC_2.0printinfectedcheck_flevel__bss_startcli_gentemp@@CLAMAV_PRIVATEputs@@GLIBC_2.0logg_nowarnperror@@GLIBC_2.0cl_cvdhead@@CLAMAV_PUBLICcli_sigperf_print@@CLAMAV_PRIVATE__libc_csu_initcl_cleanup_crypto@@CLAMAV_PRIVATEget_hostidactionrecursionmdprintfcl_engine_set_clcb_virus_found@@CLAMAV_PUBLICcl_engine_set_clcb_meta@@CLAMAV_PUBLIC__fprintf_chk@@GLIBC_2.3.4strftime@@GLIBC_2.0closelog@@GLIBC_2.0fcntl@@GLIBC_2.0logg_facilitysnprintf@@GLIBC_2.0optfree__strdup@@GLIBC_2.0close@@GLIBC_2.0dup2@@GLIBC_2.0cli_chomp@@CLAMAV_PRIVATEstrpbrk@@GLIBC_2.0__xstat64@@GLIBC_2.2__libc_csu_finicl_engine_stats_enable@@CLAMAV_PUBLICsigaddset@@GLIBC_2.0fclose@@GLIBC_2.1logg_foregroundcl_cvdfree@@CLAMAV_PUBLICctime@@GLIBC_2.0unlink@@GLIBC_2.0countlinescl_always_gen_section_hash@@CLAMAV_PUBLICcl_engine_new@@CLAMAV_PUBLICstderr@@GLIBC_2.0mprintf_quietprintclean__gmon_start__strcpy@@GLIBC_2.0my_getoptcli_sigperf_events_destroy@@CLAMAV_PRIVATEcli_is_abspathlogg_closelogg_sizerealloc@@GLIBC_2.0cl_retdbdir@@CLAMAV_PUBLICfopen@@GLIBC_2.1
@ Telegram