JFIFxxC      C  " }!1AQa"q2#BR$3br %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz w!1AQaq"2B #3RbrELF>@1@8 @@@@HH((rjm ( ( (  88800hhhDDStd88800PtdQtdRtdPjPj/lib64/ld-linux-x86-64.so.2 GNUGNU@~mX58y߼]#vGNUem( 82ev~> 6 gQxHPzc=Q1Vw iy[Z iPC:tT} t%qWAk(; </lw"S)6Wi5a\*i px9Lj@2+)F "`@00s`0000__libc_start_main__cxa_finalize__cxa_atexitstrcmpmallocpthread_mutex_lockpthread_mutex_unlockstrdupcallocstderr__fprintf_chkfwritegetenvoptindoptargoptoptopterrmemmovestrncpypthread_oncepthread_getspecificgettimeofdaypthread_key_createstrlen__snprintf_chk__stack_chk_fail__errno_location__strcat_chkstrncmpfclosecloselogstdout__vsnprintf_chkfputsfflushfopen64fgetsstrpbrkstrrchrstrchr__isoc23_strtoll__isoc23_strtolstrcasecmpsend__fdelt_chkselect__syslog_chkfdopenfilenofcntl64localtime_r__strcpy_chkstrftimerename__printf_chk__sprintf_chkstrstrvforkwaitpidexecle_exitreallocstrndupbindconnectlistenumaskmkdirpthread_cond_waitacceptshutdownreadpthread_mutex_destroygetaddrinfosetsockoptfreeaddrinfogai_strerrorpthread_setspecificpthread_cond_signalpthread_cond_timedwaitpthread_cond_broadcastpthread_createpthread_mutex_initpthread_cond_initpthread_cond_destroygetrlimit64getpidsigfillsetsigdelsetsigprocmasksigemptysetsigaddsetsigactionpipepthread_attr_initpthread_attr_setdetachstatememchrpthread_attr_destroypthread_joingeteuidgetpwnaminitgroupslchownsetgidsetuidsetlocaleputcharsetrlimit64accessopenlogsetsidgetpwuidperrorgetgrnamchmoddup2killchdirgetpeernamefstat64inet_ntoapthread_sigmaskftruncate64pollrecvmsg_ITM_deregisterTMCloneTable__gmon_start___ITM_registerTMCloneTablecl_engine_set_clcb_virus_foundcl_engine_settings_copycli_ctimecli_strerrorcli_regfreecl_scandesc_callbackcl_retdbdircl_engine_freecl_engine_set_numcli_chompcli_regexeccl_statinidircl_debugcli_writencl_engine_get_numcl_cvdheadcli_unlinkcl_statfreecl_retvercli_realpathcl_cvdfreecli_get_filepath_from_filedesccl_cvdgetagecl_engine_settings_applycl_engine_compilecli_gentempfdcl_retflevelcl_strerrorcl_scanfile_callbackcl_engine_addrefcl_engine_set_clcb_hashcl_statchkdircl_set_clcb_msgcli_regcompmpool_getstatscli_ftwcl_engine_set_strcl_initcl_loadcl_engine_settings_freecl_engine_newsd_is_socketsd_listen_fdslibclamav.so.12libc.so.6libsystemd.so.0LIBSYSTEMD_209CLAMAV_1.1.0CLAMAV_PRIVATECLAMAV_PUBLICGLIBC_2.33GLIBC_2.15GLIBC_2.38GLIBC_2.3.2GLIBC_2.4GLIBC_2.34GLIBC_2.3.4GLIBC_2.32GLIBC_2.28GLIBC_2.2.5           ' b 7 @`sFESӇ_ b p { ri ii ti ui peЉЉ0@ЉHЉXxЉЉ ЉЉ Љ Љ0~@`ЉhЉxЉЉhЉЉ8 @ЉP&`ЉЉ,ЉЉ8ЉЉ(D8XЉ`ЉpRЉЉYЉЉ`0Љ8ЉHgXxЉЉtЉЉ~ЉЉ 0PЉXЉhxЉЉЉЉ(Љ0Љ@Pp xЉЉЉЉЉž(H PЉ`ʞpޞЉЉޞЉЉ Љ(Љ8HhЉpЉ ЉЉЉЉ@ЉHЉX$hЉЉ)ЉЉDЉ Љ0=`ЉhЉxBЉЉIЉЉQ8Љ@ЉP]ЉЉeЉЉqޞЉЉ(8XЉ`ЉpЉЉЉЉ0Љ8ЉHƞXxЉЉЉЉЉЉ PЉXЉhЉЉɟЉЉٟ(Љ0Љ@pЉxЉޞ(ޞЉ(ޞHPЉ`pЉЉЉЉ Љ(Љ8!hЉpЉ(ЉЉ7ЉЉ<0@ЉHЉXFxЉЉPЉЉ\Љ Љ0f`ЉhЉxjЉЉЉЉr8Љ@ЉPzЉЉЉЉЉ(8XЉ`ЉpЉЉЉЉɠ0Љ8ЉH٠XxЉ0Љ7XЉ 0PXЉh!xЉ+Љ1ޞ(70Љ@LPpxЉ`ЉЉpЉЉHЉPЉ`ЉЉЉЉ Љ(Љ8HhЉpЉЉЉˡЉЉ֡ @ЉHЉXܡhЉЉЉЉЉ Љ0@`ЉhЉxЉЉЉЉ8Љ@ЉP)`ЉЉ8ЉЉSޞЉЉ(]8gXЉ`Љpv|ЉЉ|ЉЉ |0Љ8ЉHh|xЉЉ|ЉЉ|ЉЉ @|PЉXЉh|ЉЉ|ЉЉ(Љ0Љ8@ݙPޞpxƢբЉ(Љ QHXPXpx&g !(0Hh8px=H5 @QHP@Xihh t(0`hpx@iޞ80@ţHȣPң:@ݣx FX`hr،ޞ0H8@Xޞx g ޞϙ0ޞPX`vxޞH%ޞ$ޞ(08JPޞpx(ޞ,ޞX(9(ޞHPX@0?ޞQ T(0Hhpx$oʔޞPxB @HP|XhƊ0" (m@`x"hpx"~8"@H`#8$$ 8¤H˚X8%`˚hpۤޞ&&& 0 '8@H"XP(x(-2()=X)I( XP*Xd`htxX*|+(,08Pp-xx..ː(H /PX `p/#x2;̥ޞ 2(R0i8Hޞh3pRxh33 @(4HPXh4f 5}H6 (o0)@`6hpXx907~L7d88@HPx`08ד8Љē09 (8X9`h>pʦ9sӦ:ܦ00;8@!HXx;Y<=<  0P=X`Fhx`>.?m<ޞ(`@0I8@PPgpAx]FgBbޞDp"s(ޞHPEPXy`}pg0Fg8Gg 8H(08HghHIpȧx̧gPJۧǏާޞpKՏ ޞ@LHPXhޞM ӛޞ0O!(ޞP <(0A@g``RhpSSerU8U@H`0VҨޞV&W 8gXhX`hX*Y= 0 Y8 @ SX ޞx Z g n ޞ Z   ޞ  \  0 P \X h  Љ Љ  Љ Љ I é ( Љ0 Љ8 p@ ϩP ޞp Љx Љ ܩ   Љ Љ    Љ Љ  QH XP X +`   ]  9 @ ޞ @^  G W ^( W0 nh _p }x  X` b  ޞ bR @cHPhhcɪdЉߪe (`fhp `ff(g/:ޞ8H@ZH_hgqzgg (HXhh`hpīh֫ޫi֫0Pi8֫@$H3xiAQޞHj`ޞj0PjX`hoxXkwkޞ(Xl0I8N@PplxlMЉЉ(H@mPX`pmHnƬ 08(0Y8ӬHhnpxЉЉЉЉ@ЉHЉPЉЉ+ЉЉFЉ Љ(V@`ЉhЉpnx}ЉЉo8Љ@ЉHXoڭqs(s Xhs`h stt(u"t -0(u8-@8X?hWxvW]`xgt~8yPzX`p{H}̮x}Ӯܮ(}08p}x0%HxP%X+pHYЉЉ Љ(Љ0HhЉpЉxNЉЉ~Љ Љ :@ ЉH ЉP nh  Љ Љ  g Љ Љ " ޞ!Љ !Љ(!@!ޞ`!Љh!Љp!!!Љ!Љ!!!Љ!Љ""8"Љ@"ЉH"`""Љ"Љ"""Љ"Љ""#Љ#Љ # 8#gX#Љ`#Љh##Љ#Љ#،#ޞ#Љ#Љ#0$Љ8$Љ$$E$J%Q %֜@%V`%f%n%r%ߜ%& &{@&N`&&&&&&&'Ư'ί 'ׯ0'H@'߯P'`'p''''''&'1'<'=(G00/ //7//@0`0X*`*h*p*x***** * * * *********++++ +(+0+8+@+H+ P+!X+"`+#h+$p+%x+&+'+(+)+*+++,+-+.+/+0+1+2+3+4+5+6,8,9,:,; ,<(,=0,>8,?@,@H,AP,BX,C`,Dh,Ep,Fx,G,H,I,J,K,L,M,N,O,P,Q,R,S,T,U,V,W-X-Y-Z-[ -\(-]0-^8-_@-`H-aP-bX-c`-dh-ep-fx-g-h-i-j-k-l-m-n-o-p-q-r-s-t-u-v-w.x.y.z.{ .|(.}0.~8.@.H.P.X.`.h.p.x.................//// /(/0/8/@/H/P/X/`/h/p/x///////////HHoHtH5"j%$j@hfhfhfhfhfhfhfhrfhbfh Rfh Bfh 2fh "fh fhfhfhfhfhfhfhfhfhfhrfhbfhRfhBfh2fh"fhfhfhfh fh!fh"fh#fh$fh%fh&fh'rfh(bfh)Rfh*Bfh+2fh,"fh-fh.fh/fh0fh1fh2fh3fh4fh5fh6fh7rfh8bfh9Rfh:Bfh;2fh<"fh=fh>fh?fh@fhAfhBfhCfhDfhEfhFfhGrfhHbfhIRfhJBfhK2fhL"fhMfhNfhOfhPfhQfhRfhSfhTfhUfhVfhWrfhXbfhYRfhZBfh[2fh\"fh]fh^fh_fh`fhafhbfhcfhdfhefhffhgrfhhbfhiRfhjBfhk2fhl"fhmfhnfhofhpfhqfhrfhsfhtfhufhvfhwrfhxbfhyRfhzBfh{2fh|"fh}fh~fhfhfhfhfhfhfhfhfhrfhbfhRfhBfh2fh"fhfhfhfhfhfhfhfhfhfhfhrfhbfhRfhBfh2fh"fhfhfhfhfhfhfhfhfhfhfhrfhbfhRfhBfh2fh"fhfhf%dfD%_fD%_fD%_fD%_fD%^fD%^fD%^fD%^fD%^fD%^fD%^fD%^fD%^fD%^fD%^fD%^fD%^fD%^fD%^fD%^fD%~^fD%v^fD%n^fD%f^fD%^^fD%V^fD%N^fD%F^fD%>^fD%6^fD%.^fD%&^fD%^fD%^fD%^fD%^fD%]fD%]fD%]fD%]fD%]fD%]fD%]fD%]fD%]fD%]fD%]fD%]fD%]fD%]fD%]fD%]fD%~]fD%v]fD%n]fD%f]fD%^]fD%V]fD%N]fD%F]fD%>]fD%6]fD%.]fD%&]fD%]fD%]fD%]fD%]fD%\fD%\fD%\fD%\fD%\fD%\fD%\fD%\fD%\fD%\fD%\fD%\fD%\fD%\fD%\fD%\fD%~\fD%v\fD%n\fD%f\fD%^\fD%V\fD%N\fD%F\fD%>\fD%6\fD%.\fD%&\fD%\fD%\fD%\fD%\fD%[fD%[fD%[fD%[fD%[fD%[fD%[fD%[fD%[fD%[fD%[fD%[fD%[fD%[fD%[fD%[fD%~[fD%v[fD%n[fD%f[fD%^[fD%V[fD%N[fD%F[fD%>[fD%6[fD%.[fD%&[fD%[fD%[fD%[fD%[fD%ZfD%ZfD%ZfD%ZfD%ZfD%ZfD%ZfD%ZfD%ZfD%ZfD%ZfD%ZfD%ZfD%ZfD%ZfD%ZfD%~ZfD%vZfD%nZfD%fZfD%^ZfD%VZfD%NZfD%FZfD%>ZfD%6ZfD%.ZfD%&ZfD%ZfD%ZfD%ZfD%ZfD%YfD%YfD%YfD%YfD%YfD%YfD%YfD%YfD%YfD%YfD%YfDUHAWAVAUAATSHHHdH%(HE1DžHDžDž=HL1HL1HDžHL1ҿ L%1LHE1A1HD9H[IHxH5KH"Dp E*H5HL"x EE~aH--foregrH@f:-FtAHE9t:HH9 uzounduE9~$H='[H5C"x frX1L5ZH5AL"HXHfIH-HMA1ҹ18HZHHLE1bH5H!x tLhH5H!x kH5H!H5H߃x fWa!H5Hߋ@ fZH!H5Hߋ@ fZ/!H5}HLpL5Y!@ fYfYMH5^H H5HH@fW x E1L vYVffHMYH=vHoYjH;Y.  L01&LH81LH H0b MtHLV HULE1LXH=XH5Ax Htx_H{H5aHtHHD1HLLIH5XLH=XH5վ!x J1DžH5)H1KEAHj0H=WDHEdH+%(YHH[A\A]A^A_]ÿ ]H{H5$1H=$WH=$K !H=ļ5 H=$H= %H=T%H=%H=%H=&H=D&H=&H=& H=' H=pVE1DH=SAH"1mfvH) fUH=SL1H&LDž;H@8/HU}HL0H LHH5%H1=IH S,H=&wH5̻Hd@ fUZH5>"1.AH51z.*L5RHLHXHHLh LIH1IHL1MH L~L E1L1MH LJLmHcEHgDHMIH5U1gLH=TCH=S2[H=SH5x L-SH5Lx LH5HGE1DIH@HILItAAI?HuDHH5d%1AFEvIcDHTtH=TfR1HH=RH=߹?tH0uHHRHRH5̬HHH51Dp DDH5$Dh 16FE D H5$1FADAH4H5ӻ1EE1HBH=QH5`HxHH5Y11|EHխH5շ1HH5*$1>EH_QHH5?$1EEL-IQH5KLOH57LLp<H@ADA9Ɖu =H5 $1DH=PH5x fNH=6N1LHH3@A9s O0AHNLHH0HDpH"hE1A111H=Ij-IHWLH#x ItH@LHH4LTLI MLxLh LIHL1SH{Pp;g8HSH5!H1CH L#H=t >L1ADH5BE3HfNfL3L/IH=K[8?H5=H19BH5m!1!BH NIH H=5NH5SQx  H=NH5A4x  H=MH5PH5H@HH1AHMH5Hx H5Hx Ie H5޴1E1DA11DMIILI\H/IH8IWH5:1@L9MGK<.IBH z1HL)IDlDC.M0MoH5-1DLv@HH5 H=LA.Ax I/ M^H5 1 @LAH I.H=UHNH5N1fHSH5#1??HLIIDHHIHqLHHǾ1H zLLLHHHL1MH OL;L&LfHHLHHH9HsMnHHLsH531[>1҉H=JH5.x H=gJH5H=,Jx ItVHP Džt H5{H1=L0I}LlH=IH56H=IH5HH=IH5x H=IH5x H=IH5tx L-qIH5cLx VLH5Pqx IteLpH5HL5H5=LnH5?<H=H¾Dž8 H=HH5x ? H=HH5߰x tlLhH5ְL2 H5ȰL H5°LEH=HH=(HH5Dx S H= HH5'x H=GH5qx H=GH5{x I;H=GH5x t5HHLhDžIiŀQH; HHH5 GDž=FH5FGHQDžkH=GH5$x H51:H=FH5 x$tH=FHP DžH=FH5 H=_Fx$tHP!KH=DFDž*EEdWDHAAvHHHH=EN4HvLDAH=EH5 x tfLhH LIH8tLHnDpH=nEH5 DHxL5DEL-˝LLZ x HxH[H:?%H5yLA DHxcf=2Bf=Db 9L-11LL0A1L41A81ۃL0E,DEHHuE1C<IIu鋽HH5M17H5 1q7WH5jH1Q7MFHL1H KH=/C AHPL H5HF x I<DžwH5p16LMnH516IH51l6'H=pBaH=UBFHH=4B%=@WIUH515HML1H ALH5i15H55H5AE11y51DM1MHI~QLLlLaIHAIVH5l15I9LMFHBI<1H H)I~\AMv0MqH5a1MDH4HA.AM1H=@L@DžQH5zH1K4LC&HPH=C@ 9AU1H54DžqH5/130H513 H=?LSHH5#H¿1|3H=?VIUH5&H1L3/H5@1*3DžDžDžH5H12NLH5V2H=>#H5\HLLH5PHP1j2cLH5y1E2>Hq>H5L-*Hx IuNhI^HtEHLH 2>HHHDHQMv0MuDHEu EAvIHHmH==N4H>DAJDLFr1LH5+1EH8DNLC8HSH5H10H8HSH5H1HHHPoHPH=<H F:1H=M @=LH5DH5wHP10 LH5m1/oH51D/3H5|1D/H=;H=y9DA1HIE1CH=$HtH$HH]DfUHAWAVAAUATISHH0H8L@LHt))P)`)p)])e)m)u)}dH%(H1HELL=#HH DžDž0HIHPH1۹DHH9sWA<%uHAHOHH輿HHH&fD/wHHfDHHFH@HH5L=!L1HPzL舽H8HIHtfHCHfL訿sL= L1HyL >f="0 cHDžLUHAWAVAUATSHH $HE1L5EMHEHdH%(HE1ƅ`:LHDž Dž(+DA#F4tMHAIHIHuI~u΋IH7H5H=H H/1ҋ(DžMHL`HL4LDž4HAăc: Hc4HLM L%HLH HcP,H5HL4AF5M" DLH LZHLiL1Ƀ2H@ t@ u I9|LAL8(HvA}#tLH=RwDP H5?wL9H| L`Lѻ1ҍpLH t u I9|L蝻=HATJv 'HჽS H t H 莻HE1LINHC((Hc(HHH=AF0uA~t I~(ɃA~HHDŽ((HcA~=`HGHOƄ`:AF0I~(HcɉƄ `:o@AF0HHIF HIF(HIFH$IH'HH(HH艶LIHHHLZLICH HHL*LICH HfE{,AC$HWI{HAC0CH IC@AC AC(tqH L LX8f.AN/fDIC1pIC-H@DHL LIC8f(9L=/Hc(Hc11Ƅ=`1HH HHfLL u A~IvHtlAF0EH@H(H׉‰}H(E111L藾H(赹nA~AFHHcH>HAA<$"XMt$"LHA|$}M&LHuH1H 9D9"uHHLH MMHEdH+%(HH[A\A]A^A_]豻I1AL(M 1H8LL(A8"H8 tdG&HHHOH@@H HHEHH9>HE1Hu%HMHMTHHLLH=TMLH1ų1MtL 1E1跹HH5pL蔸tH5_L衸E1dH 0@H )H=辺{LH ?H=1蔺HQ*EFINH=VEHv1ʲHHc9DD)߃HcطIHL`@MLA9OIMHLH=f=+ Nf= H=HL*H=莦f= LH5`1Mf= t;Ld{L1H`辦fDL谣MtLC1HdH+%(H[A\A]A^A_]fd=dID`/wmHp`H9HH賤HI@`/w`IkHhfDHhHAHh@HhUHhlHHYIHHIL~of.HLH膦H LLʣH=LH_Ƅ1H=LH^B2CHLˢH=|/f=VLХL1Hm^腤f=:DH=HtA1{Aǃ\H5sHHf=WfH) L f )0VL15H=|XfHL)HLI9f=9u]HHtEH]1haH H=Ъ˧HL=Hf L財HHHHHHOHH1HHH HHHHHL腤H)HHH\H|HH) HHtH,L=HHL[H连f.HLH6HL ¤LzLLƄH5?\1 H[1譞H=Nf=[snL1HK[cL1H[7z 8_H=EHHHBH=%x辤H8H1HHoH50ۤL裝MtL6dH8H辥Hٿ1HH5聤DLAMuHHvHٿ1HH5>9LH=՞1HMEHHH_H;H=EAALfHHrYHtHH cYHHDу@tGt tRHH5Y1@HH5Y1f.HH5Y11DHH5Y1fUHAWAVAUATSHLb8MtzID$8 tpIHthL*HNYHMMLDAD$ ID$ PHp8Lx蜅L{MuCHLL1[H5GYA\1A]A^A_]H[A\A]A^A_]fI|$HH5X/@ tMLCLLH5X11fUHAWAVAUATSHHHxHuH5XdH%(HE1P u#HEdH+%(AHx[A\A]A^A_]ÐH=XIHxHH~٘E1HAHHEL`L'HEHILHHL-XH ?X1J\MeL}L诛HXHӟHEHHHHMLWH W1萢J\ID$I^E1HDŠL-WHf.HxILHuHE1L=W @HxIL踛HuHMiH}IHHpKD/LIL腞HEHE1E1Mu!5%HMIBII^IEB+L9rHEBH=UÅ}H=襘11ڞu p8tHxtH}HtHEHtHHEHtHHEHHܗtvtWf~HMIB%IM9*E11fDH5$V1xHHuH}LILh%HpLhIfH}LIH5L`L`IaڗLHxH}HMHMH=gUE11LMHTUH5nff.HQU1HAUIATE1S1HbD9tBDoH4H qHoHJoP R oX0Z0o`@b@H@PHBPAIUCHH9s6H IUHHH‹HyH8HtIUCHH9rDH9tpH9s.I}DHfH4HpDAHH9rI]H51DHI}H4CH薔EtHtIEH[A\A]]DIEH[A\A]]Dff.@UH{HATLcSHHG HGHG(HG0HG8HG@HGPGH?uHtGEu0HCH1[A\]Ht趔HCHEtH{H9LcHHC 讚HHuH5eUHAWAVAUATSHAHwAAIHO11HuDZHH9s5HHCHmLH5FH1dA>tlDVLH5x117H5>1"HH5H1D'H51|8输H5/H1k~LLH5rMHP1L脎7A?gHH5HZA?MHH5CH@ff. tWEt`-=t'UH5UKH}Hu7]Dtf.@@H5 M1]@UHAUATSHdH%(HE1EHHWHHH?tzH5L11J%IHiH3H讖vKH{HUL# L賓AąUH5&111E1AH5ٝH;HtNjH{Ht詌H行EH1H9HL-Ќ=t*H5IԓHtH5K1;HEdH+%(H1[A\A]]MtL{E1kH5H1AH5!1AfA蓒H5$H1H5o_f.IH5BH1C[ fUHAWAVAUATL%9SHH8dH%(HE1HG(HH?脋HCPHf1ҾHqwH{sE1fKLkM1i_IEADIEA0Lx}0L}uA,=˄HHtWL%L}HS HtHC(HB(HC(HtHP I;@H|=1$~L|L|HEdH+%(HH1[A\A]A^A_]A A0LE|uEH EzEyI~(I@=|H5<_HHEHT8HEfUHAWAVIAUATASHH(HUdH%(HE1HHL-|CXHLH1KXPH{Mt:L{A L}{L-NHt+H{CXHLH1KXH>{1HUdH+%(+H([A\A]A^A_]f.HtLS{hH5;1nIPEHEML-{;8@H5Q;1ELL*}L1+IP@A(Et 9}IXBA,A+09}L}M IHHHE1I|$ID$m|I?HuHFL FLfEHuIXFIP@BA;0~7A$A9,}'IvXH}LHpA,I~(}Lyu 5H5W:1IXMHutfHEfInfl+H591niyfUHAWAVAUATASHHHPM0HXdH%(HE1AFHDžxHDžpLHtOHpHI苀I~ L臰H1H5VH5r1IF 11HlxGyHu~8IF E1LxXMtLKxLEohwL=L0xD -LwE(AFAH[JcH>H8wHpN@HXH5ҍ1Hw1HUdH+%(HĘ[A\A]A^A_]LXI~ LELH5N1AFHvHXH571H~vsfHXI9F(HXH571EH=v2HXHH5I1 AFHvfDH51IF LhXMtLxvAEhLvEHHHPHtH;rHPHx0vLL%ګH=_L v=M }HtHIN@MF8IV0LMHxHH]HELu}H=L扅lu=|HtHIF L`XMtLxuLEl$huLcuD -LuEl<ff=HetlVLB?H591-pHtdHPDHXI9F(IF L5HًPHp8x _DHs1H5lfDH51uch!yIH_@AFI\$AD$IF A$@8AD$8AoF0AoN@fmAD$IFXI~@ID$XS{lIF@L-PLID$(sH$LID$0/sIvXI~PL H54I~@|HrLrIF HXL C/L3PHp8x]LxMIF8uAF t dIVHLHAF jIF LxHًPHp8x]\I~HH534p LeLxMtI~HH5/ H LHH5/11IF L M.L]3HًPHp8x\HڿH5K3H?qHH5;1$DžlAFwIV L -HIDRHr8zD[tlwHH521H1OMnHH52L x uSLLH"H5A21|HtpLlpgHH5211TH511?MnHLxH5k11"TMLELHH5*.11pH5׆if.UpHSHuHtsfoU1HH@h@Xxqu41H{(quUHH511HH]fDH51]HUo1HH]f.H51-HenH1ofUHAWAVAUATASHHHXDoDw8L(t546L#H SHcH>f.H SHcH>@hHUtHUHIKdoCD LoKoS$HUo[4ocDHdokT@HP$X4`DhTwvHUȅAD$AE-H RSHcH>@HIHnH/nAD1H50Jf.H[A\A]A^A_]f.H{ H5/HSHsHxquH{ H5/軚H@C`HCP1HYHmH4mjf.+HCXHuMWHAH57/1DhH{XSHEƅQH ~/H5/D1)@WHH5.D1 Ds8bpH .HHIqA΅MH .L|DWL%PD1H5.M$ 觿L5R)I$LD1I 苿M9uUH5<D1rDWHH5..D1TDs8ALDpWSHL s(1DLbD:VD1H5qtHCXDH*.D1H5GOվHiIEH;IuX1HI}@LcH5,1I}(ZtLj2DDH5-1AH5-D1;CIuX1AECHhIuX1]CuAUHAu81L 7'A}L,UCCAEGf.DELH5R1D訽;H5+1LiEH5IH51fUHATASH^jKXHڿH5$1CdEAKXtkKXuGHiHڿ1H5QHhH{( jH8i[A\]fD1HڿH5W~{Xt4Hdi[1A\]DC`qC\aH{(?mff.fUffHAWAVL AUATSHHHLH5p+HXL`dH%(HE1H)HH`))`)pHDžHDžHDžHDžHDžHDžH1HLf))fo MHDžHDžHDžHDžHDžDž))ĔD`$EtHPH߾ZjDž@HX1ҾMkHHxH5Z1H`H5{G[X$tHXHP1iDž~HX11jHHH5]11H`H5 *DX$EtHXHPiDž+HX1Ҿ~jHHH511BLLhHXH1Ҿ,jH9XHXH11 jH9mH`L=cFL-DP$EtHXHPhDž7HX1ҾiH H511wH`H5 FĒx$tHXHPYhDžHX1ҾLiH H5B11LfiH`H5'Ix$tHXHPgDžHX1ҾHh1H5H1蛾H`H5'x$tHPH߾gDž5HX1ҾHqh1H5H1>H`H5H'苑x$tHPH߾$gDžFHX1ҾHh1H5H1H`H5&.x$tHPH߾fDžHX1ҾHg1H5ƁH1脽H`H5&ѐx$tHPH߾jfDž5HX1ҾHZg1H5H1'H`H5`&tx$tHPH߾ fDž[5HX1ҾHf1H5H1ʼH`H5&x$tHPH߾eDž5HX1ҾHf1H5H1mH`H5%躏x$tHPH߾SeDž4HX1ҾHCf1H5H11Ҿ H!f1H5H11Ҿ!He1H5H1̻H`H5)%x$tHPH߾"dDž HX1Ҿ"e1H5H1rH`H5$迎x 9 H5$11EH`H5$蒎x  H5с11H`H5$[x oH511H`H5$$x t*H51螺H`H5u$x t'}H511^H`H5D$衍x t$_H5ǃ11@H`H5$dx =H`H5@Gx H51ʹH`H5#x NH5ׄ1蓹H`L%$L݌x H5D11cH`H#H裌x H5#11)LL`Lpx uHL_x tHH`H5#HCx uH5#H.x tH511踸H`H5#x H`H5#Hދx 1H5#1dH5#H߃@讋x ^0H`H5#H莋x x1H5#1H5#H߁[x H5#HBx H`H5#%x H5z#11諷H`H5#x H5{#11wH`H5#轊x hH5}#11CH`H5#膊x H5#11 H`H5#Rx H5#11ضH`H5#x H5#11褶H`H5#x zH`H5#Hljx uH5#H貉x tH5112H`H5#x H`H5#H_x #H5#H߁HHAƅsHHE1HtHNHDhxNH=1ND =H=YNE= DtEHHH`EtC1Pt+H5H1蠧HDžP@LI~HRHcpIFHHHHDHPt8 H5u11H511/H511H5,11ۦH511ƦQH511豦H5K11蜦H511臦>H5m11rH5fr11]H`H5yx H511+H`H5>syx t;H5p11.H5Zo11~H5p11¥H5&o11譥H511莥mRH5fgH}YRH5fHiERH5dHU1RH5BeHARH56hH- RH5gHH5q11 H5?q11 Ԥ;H5n1輤H5m1褤H`HwH`LDh$wD@HEBL D)AϋA9.EDE9LG,$E9EOA9aDH5s1DCH`H5 HMwx H5p11̣H`H5pHwx t[H5p11虣H5q11}ccPH5iHsH5Hvx H5wHvx U9E95A9EuDADH5/r1HHDH5q1EƢOH5@fHOH5fHH5Gq1D|D/LH5s1LxSLxM̋E1H1H5sE1'fE[HHH<H5s1~KHH@HDžH-DL1ۋ8PAB,HHAJ(IBPH@IB8t A;B0TtHIRH9IB1H5L!PLuu,AB(HDžAzLH.@1H5@轠ADžta@DxEt EhEExE1L @HH HHHHH)HHH;JHHHH:ƅ DžxfDƅ HHH5qHP@H01袟PXH5}q1聟LDE`fHHH;IHHHHH`H5vrDX EVH="EH=GE/LH5`o1̞E1L tLH5詞LH5Mo1葞LLI:LL)J4?DLIRL)IRH5 1L4PLAB(IRHH5p1LLHLH5 IIBI1輝LwH5 o1LH虝LDžtPAB(8AB,HHIBPH@IB8t A;B0<t8LD(u+EH Ho 1H5&莖LLH G 1H5* fLXHڿ1LHH5l譜8D(LEH lLM1H5 LDžtLHHAR(Az,IrPIJ8A;B0LHH5,n1LB8D(LFE1LH nH5 3DPLEKHLDžPH5llHHAB(1@LH5# 1E1E1LL=0  LIzHELHcpDIBHMIBpL)J4/HH5 1I]AT$4觚AD$4AT$0AT$(I|$PAD$0AD$(L1ZHh1ID$@.AŅ1H5  A}DžAD$4IL$8H9!H)H57 1IL$8HۙAT$4ID$I<$A1M,I9rIƉII)D)AL$4H4A|$0LGHtCHLH5l1|ID$L9#AT$4I<$L녋8D(tAEH @lL1H5o諒H5Dl1DždH Hk1H5"mAD$ZH H i1LH5"5L6H`H5kP eH=?H=n>>ARH5 l1L.LAzALAz9>LOH51LLMbPABM(LLh>LAD$h>LIzPHH1H IHiLH5L!DPLEyD8t5H5O1!H=:=H=._=HS=H= =S H=-=\ L%LR=D=cLEHHCHXHtHAHHH`H5 eHx)7HCH8 =ML5. 1LLH{>Dž HXs H`H5eex LL7H`L=L.ex wHHHL?L;0H`Ldx TL81H5HLAB(1BLI<$IT$DLH)H46L1HI)ZAB,H5f1H5 h1ϐLw7E1LD 7L]7E1LD06'H5oe1胐H51nf:E1H1L H52aE1E1:H5d11%L%~L6Lњd6H5Hd11HXQ?H5ug1ɏH5_1L誏H=ÚN6H=5H5H= 6H=o5H5H15HcH3H54 4=~19d1 HIL1LH5 1d&UHAWAVIAUE1ATSHHHHHdH%(HE1=)H߾(H߾(H߾ (H߾(H߾|(H߾o(H1ҿ %LEvHF(H^XLf HHFo) @0HtH%HDkhE%HH%D -߉H'%EH7[HHHHHW%=l,Ht HHP0H@1 HL HHHDDLxfHnLGH~GXHGXfl)`HHHHG@HA\Hw HcH>H5Ab1}HxH0ZHHHE1AHH?$=T+HtH@0HHxHtR#H51?}Eu 1E@HHxXHtLWuCHHx(s,HEdH+%([ HHH[A\A]A^A_]"HH5c1S|{F&{""H5c1}|H51E17XDž DžH5RL牅HOH5SLLxOH EtH5GLeOP tH5LHO@ EL hXDDHLH HxDs)AǃHt DPDTLEEDA)EE9u E9E)A<AH!H3~!AH51VDžE1Dž 1H5VHHxXtPHH5#D1ItHH=Dx8Q!Hj1HtH@HuH5 D1tL<MX E1HE11HDžDžHLDMM*MA HBt H<tH&H,HEIzL%%DLH H5\IE1BsE8D1E$A0H5^A,sIXIPDH5RP1r1H"IPHDHxIXHDHw1H5DrM@LMeHLHHLMIDH[(HKfH fHSHH+CH5WDH*HH+CHH*IDHHY9HDиX^$qHK0HzMt-1fHL9tI;LuI9OILHJHH HHH$HLHHHH$LH[(HHHHHfLLE1MAH5D1LpLMRMt E MLDLLM'H5x\D1~pDAH51ipH=E1E1'0H5$1RH11fLDžHHs)HHCDLuDP1EDHH51RHLLHAGAƃtsE1H1xLAAGIOH5LIp =H51rQHxH0fH~"#uH%=@LI~@I~@D4D$AFA9e,EDH5Y1uHL LYHHPHp8xK1H5TPHxRHE1LLHAƃti)E1LH51AWptA H5D1E1LAmLHH0Hx!9H0H&H5LTGDH ELE1LM fI*Hf(YHfH*Y‹H5=YDmH5Y1`sHL 'LYHHPHp8xHL\HHPHp8xRE1HL`XMLLAD$h94)H5!1N֨HIHDžDž7L2AEXL91I}(LLHDžHHAEXHD54}H|EtAEXEEE`HEe\AMXEudDLFL1H5}XqLDLDI}@ZI}@4DE+AE1#E1ePHp8L <1ɋxL{VH517qBLH5Dx ZE1ALH5@,1pLLDHfHƒHH H*X%LLfHH H*XHL`XMnL.LAD$hPHL`XMtLLAD$hE1AH5LCD@ EtE1A}Džff(bHHXXHHAChH#,E1ALLMAE1;`HLDƅuHH5J1hDEH50IH1hMHLD΅t)Ht\UH5HHAQIHщ1hZYHtIH5L1hELH51lh@IȉL1H5RhfMHDƅtHtOEM1H5!hHtLH5z1 hf.DLH5`1g@LH501gDUHAVAUAATI1SLH@dH%(HE1$u@HEdH+%(H@D1[H?H5A\A]A^]Wg1L AHu H}HEHIAMDDH1DH5nfHEdH+%(u H@[A\A]A^]fDUHAWE1AVAAUATLcSHHdH%(HE1h|HSHH HCH JHȃt@ HXH9tfD@ H@H9uHKEHL{IMtTHC1H IHHXL9s/HP(HtH9|I9HINMHEHHXIL9rMtvA)EML9{ ut@DHEdH+%(2HD[A\A]A^A_]fL{MHE15@ML9{ _AH{Ht L{J<MHCHL{ E~EiMt6HC5HPHCHJ< HpHXHH9uA+DA AEO8FLkH;DIcHt KHcH{DH;AHtxE~E1H{ DY@DxAA8t2HCA0B H51njHCBD IL;k ;KDMdEHCIBT xHCN L;yH5:1j@1H5LiALA:LsMI>AF !IFI9F|AV$t2H51LiA~$AF$LfHHDž )))IVIA~LHH0IFHDžHDžH)1H8H0HH@HLHI DҨ kHHLMHLIHLMHt\HHڃHHLHI4;H)H9H)H9HHHHHuL9CuAV$t*H51LgA~$ LSH51LAV$gHLI3MHLMVAtMEHCH5B1YgH5]1AgLf.AHC11HB<Lt%/L8AAD8t'H@SH5H1fAs@DH51jfL{ML9{ ALk MALHt$DH5I1 fLH5b1eLH5e? H=o1HHERROR: optaddarg: Unregistered option %s ERROR: optaddarg: strdup() failed ERROR: optaddarg: malloc() failed %s: option requires an argument -- %c %s: option `--%s' doesn't allow an argument %s: option `--%s' requires an argument ERROR: optparse: Can't register new option (not enough memory) ERROR: optparse: longopts[] is too small ERROR: optparse: shortopts[] is too small ERROR: optparse: (short|long)opts[] is too small ERROR: Please edit the example config file %s ERROR: Missing argument for option at %s:%d ERROR: Missing closing parenthesis in option %s at %s:%d ERROR: Empty argument for option %s at %s:%d ERROR: Incomplete option passed (missing argument) ERROR: optparse: No corresponding long name for option '-%c' ERROR: Parse error at %s:%d: Unknown option %s WARNING: Ignoring deprecated option %s at %s:%d WARNING: Ignoring deprecated option --%s (-%c) WARNING: Ignoring deprecated option --%s ERROR: optparse: Can't compile regular expression %s for option %s ERROR: Incorrect argument format for option %s ERROR: Incorrect argument format for option --%s (-%c) ERROR: Incorrect argument format for option --%s ERROR: Option --%s (-%c) requires a non-empty string argument ERROR: Option --%s requires a non-empty string argument ERROR: Can't parse numerical argument for option %s ERROR: Can't parse numerical argument for option --%s (-%c) ERROR: Can't parse numerical argument for option --%s WARNING: Numerical value for option %s too high, resetting to %lld WARNING: Numerical value for option --%s (-%c) too high, resetting to %lld ERROR: Can't register argument for option %s ERROR: Can't register argument for option --%s ERROR: optparse: calloc failed ERROR: optparse: strdup failed min_wait: %.6f max_wait: %.6f avg_wait: %.6fWARNING: Log size limit met but log file rotation turned off. Forcing log file rotation anyways. Need to rotate log file due to size but ran out of memory. Need to rotate log file due to size but could not get local time. ERROR: Failed to open log file %s: %s ERROR: Failed to convert the open log file descriptor for %s to a FILE* handle: %s WARNING: File locking not supported (NFS?)ERROR: Failed to lock the log file %s: %s The filename format character has been disabled due to security concerns, use the 'CLAM_VIRUSEVENT_FILENAME' environment variable instead.Number of file descriptors polled: %u fds add_fd: Memory allocation failed for command buffer add_fd: invalid fd passed to add_fd add_fd: Memory allocation failed for fd_buf LOCAL: Received more than two file descriptors from systemd. LOCAL: No local AF_UNIX SOCK_STREAM socket received from systemd. LOCAL: Received AF_UNIX SOCK_STREAM socket from systemd. LOCAL: Could not create socket directory: %s: %s LOCAL: Ensure parent directory exists. Localserver: Creating socket directory: %s LOCAL: Socket allocation error: %s LOCAL: Socket file %s is in use by another process. LOCAL: Removing stale socket file %s LOCAL: Socket file %s could not be removed: %s LOCAL: Socket file %s could not be bound: %s (unlink tried) LOCAL: Socket file %s exists. Either remove it, or configure a different one. LOCAL: Socket file %s could not be bound: %s LOCAL: Setting connection queue length to %d reload_th: Invalid arguments, unable to load signature databases. reload_th: Can't initialize antivirus engine reload_th: Failed to apply previous engine settings: %s reload_th: Database load failed: %s reload_th: Database initialization error: can't compile engine: %s Database correctly reloaded (%u signatures) Failed to poll sockets, fatal Can't set socket to nonblocking mode, errno %d Can't get socket flags, errno %d TCP: Received more than two file descriptors from systemd. TCP: Received AF_INET SOCK_STREAM socket from systemd. TCP: Received AF_INET6 SOCK_STREAM socket from systemd. TCP: No tcp AF_INET/AF_INET6 SOCK_STREAM socket received from systemd. TCP: setsocktopt(SO_REUSEADDR) error: %s TCP: setsocktopt(IPV6_V6ONLY) error: %s TCP: Cannot bind to [%s]:%s: %s TCP: Setting connection queue length to %d TCP: Cannot listen on [%s]:%s: %s THRMGR: queue (single) crossed low threshold -> signaling THRMGR: queue (bulk) crossed low threshold -> signaling THRMGR: active jobs for %p: %d File path check failure for: %s Quarantine of the file may fail if file path contains symlinks. Client disconnected while command was active! Client disconnected while scanjob was active Memory allocation failed during cli_ftw() on %s Memory allocation failed during cli_ftw() File path check failure on: %s Directory recursion limit reached, skipping %s Can't allocate memory for client_conn %s: reported CL_VIRUS but no virname returned! You have to compile with libprelude using ./configure --enable-prelude Failed to initialize group mutexFailed to initialize group condCommand invalid inside IDSESSION.SESSION: command is not valid inside IDSESSION: %d ENGINE VERSION MISMATCH: %s != %s. ERROR%cFailed to allocate memory for filename THRMGR: group_finished: %p, %d THRMGR: group_finished: freeing %p cl_engine_set_num(CL_ENGINE_MAX_SCANTIME) failed: %s Limits: Global time limit set to %llu milliseconds. Limits: Global time limit protection disabled. cl_engine_set_num(CL_ENGINE_MAX_SCANSIZE) failed: %s Limits: Global size limit set to %llu bytes. Limits: Global size limit protection disabled. cl_engine_set_num(CL_ENGINE_MAX_FILESIZE) failed: %s Limits: File size limit set to %llu bytes. Limits: File size limit protection disabled. System limit for file size is lower than engine->maxfilesize System limit for file size is lower than engine->maxscansize Cannot obtain resource limits for file size cl_engine_set_num(CL_ENGINE_MAX_RECURSION) failed: %s Limits: Recursion level limit set to %u. Limits: Recursion level limit protection disabled. cl_engine_set_num(CL_ENGINE_MAX_FILES) failed: %s Limits: Files limit set to %u. Limits: Files limit protection disabled. Limits: Core-dump limit is %lu. cli_engine_set_num(CL_ENGINE_MAX_EMBEDDEDPE) failed: %s Limits: MaxEmbeddedPE limit set to %llu bytes. cli_engine_set_num(CL_ENGINE_MAX_HTMLNORMALIZE) failed: %s Limits: MaxHTMLNormalize limit set to %llu bytes. cli_engine_set_num(CL_ENGINE_MAX_HTMLNOTAGS) failed: %s Limits: MaxHTMLNoTags limit set to %llu bytes. cli_engine_set_num(CL_ENGINE_MAX_SCRIPTNORMALIZE) failed: %s Limits: MaxScriptNormalize limit set to %llu bytes. cli_engine_set_num(CL_ENGINE_MAX_ZIPTYPERCG) failed: %s Limits: MaxZipTypeRcg limit set to %llu bytes. cli_engine_set_num(MaxPartitions) failed: %s Limits: MaxPartitions limit set to %llu. cli_engine_set_num(MaxIconsPE) failed: %s Limits: MaxIconsPE limit set to %llu. cli_engine_set_num(MaxRecHWP3) failed: %s Limits: MaxRecHWP3 limit set to %llu. Limits: PCREMatchLimit limit set to %llu. Limits: PCRERecMatchLimit limit set to %llu. cli_engine_set_num(PCREMaxFileSize) failed: %s Limits: PCREMaxFileSize limit set to %llu. Image (graphics) scanning support enabled. Image (graphics) scanning support disabled. Detection using image fuzzy hash enabled. Detection using image fuzzy hash disabled. Using deprecated option "ArchiveBlockEncrypted" to alert on encrypted archives _and_ documents. Please update your configuration to use replacement options "AlertEncrypted", or "AlertEncryptedArchive" and/or "AlertEncryptedDoc". Using deprecated option "ArchiveBlockEncrypted" to alert on encrypted documents. Please update your configuration to use replacement options "AlertEncrypted", or "AlertEncryptedArchive" and/or "AlertEncryptedDoc". Alerting of encrypted archives _and_ documents enabled. Alerting of encrypted documents enabled. Alerting of encrypted archives enabled. Encrypted archive alerting requested, but archive support is disabled! Using deprecated option "BlockMax" to enable heuristic alerts when scans exceed set maximums. Please update your configuration to use replacement option "AlertExceedsMax". Heuristic alerting enabled for scans that exceed set maximums. AlertExceedsMax heuristic detection disabled. Using deprecated option "AlgorithmicDetection" to disable heuristic alerts. Please update your configuration to use replacement option "HeuristicAlerts". Portable Executable support enabled. Portable Executable support disabled. Alerting on broken executables enabled. Media (Graphics) Format Validation enabled Mail: RFC1341 handling enabled. OLE2: Alerting on all VBA macros. Phishing: Always checking for cloaked urls PhishingAlwaysBlockSSLMismatchPhishing: Always checking for ssl mismatches Raw DMG: Alert on partitions intersections Heuristic: precedence enabled cl_engine_set_num(CL_ENGINE_MIN_CC_COUNT) failed: %s Structured: Minimum Credit Card Number Count set to %u cl_engine_set_num(CL_ENGINE_MIN_SSN_COUNT) failed: %s Structured: Minimum Social Security Number Count set to %u Self checking every %u seconds. MaxQueue value too low, increasing to: %d MaxThreads * MaxRecursion is too high: %d, open file descriptor limit is: %lu MaxQueue value too high, lowering to: %d MaxQueue is lower than twice MaxThreads, increasing to: %d Unable to add threadpool to list All recv() descriptors gone: fatal client read error or EOF on read Received oldstyle command inside IDSESSION: %s Only nCMDS\n and zCMDS\0 are accepted inside IDSESSION.Command %s has trailing garbage! Command sent as old-style when not supported: %s got command %s (%u, %u), argument: %s RECVTH: mode -> MODE_WAITANCILL RECVTH: FILDES command complete Receive thread: have to terminate group Receive thread: closing conn (FD %d), group finished Receive thread: INSTREAM: %s fd %u Breaking command loop, mode is no longer MODE_COMMAND Unclaimed file descriptor received, closing: %d PROTOCOL ERROR: ancillary data sent without FILDES.Client sent garbage after last command: %lu bytes INSTREAM: Size limit reached, (requested: %lu, max: %lu) Error writing to temporary fileINSTREAM: Can't write to temporary file. Processed %llu bytes of chunkdata, pos %llu Skipping shutdown of bad socket after error (FD %d) Shutting down socket after error (FD %d) Socket not shut down due to active tasks SIGHUP caught: re-opening log file. No stats for Database check - forcing reload SelfCheck: Database modification detected. Forcing reload. SelfCheck: Database status OK. reload_db: Invalid arguments, unable to load signature databases. Failed to allocate reload context Can't make a copy of the current engine settings Can't duplicate the database directory path Failed to init reload thread attributes Failed to release reload thread attributes Failed to spawn reload thread A deadlock was detected when waiting for the database reload thread. Failed to find database reload thread. The database reload thread is not a joinable thread. An unknown error occurred when waiting for the database reload thread: %d Database reload setup failed, keeping the previous instance Activating the newly loaded database... Database reload failed, keeping the previous instance Waiting for all threads to finish Shutting down the main socket%s. Can't get information about user %s. ERROR: Can't get information about user %s. ERROR: lchown to user '%s' failed on lchown to user '%s' failed on log file '%s'. Error was '%s' ERROR: This tool requires libclamav with functionality level %u or higher (current f-level: %u) Can't parse command line options Clam AntiVirus: Daemon %s By The ClamAV Team: https://www.clamav.net/about.html#credits (C) 2024 Cisco Systems, Inc. --help -h Show this help --version -V Show version number --foreground -F Run in foreground; do not daemonize --debug Enable debug mode --log=FILE -l FILE Log into FILE --config-file=FILE -c FILE Read configuration from FILE --fail-if-cvd-older-than=days Return with a nonzero error code if virus database outdated --datadir=DIRECTORY Load signatures from DIRECTORY --pid=FILE -p FILE Write the daemon's pid to FILEPass in - as the filename for stdin.ERROR: Unable to allocate memory for config file ERROR: Can't open/parse the config file %s Unable to allocate memory for db directory... ERROR: LogFile requires full path. ERROR: Can't initialize the internal logger Can't save PID to file %s: %s Can't change ownership of PID file %s '%s' Can't initialize libclamav: %s LogFacility: %s: No such facility. Received %d file descriptor(s) from systemd. Please define server type (local and/or TCP). clamd daemon %s (OS: Linux, ARCH: x86_64, CPU: x86_64) Log file size limited to %lld bytes. Log file size limit disabled. Invalid StreamMinPort/StreamMaxPort: %d, %d Can't initialize antivirus engine Can't allocate memory for pua_cats ExcludePUA and IncludePUA cannot be used at the same time cli_engine_set_str(CL_ENGINE_PUA_CATEGORIES) failed: %s Only loading official signatures. cli_engine_set_str(CL_ENGINE_TMPDIR) failed: %s Current configuration of TemporaryDirectory: %s does not exist, or is not valid Not loading phishing signatures. Bytecode: Security mode set to "TrustSigned". Bytecode: Security mode set to "Paranoid". Unable to parse bytecode security setting:%s Invalid bytecode security setting %s: %s Bytecode: Enabled support for unsigned bytecode. Disabling URL based phishing detection. Virus database is older than %lld days! cli_engine_set_num(PCREMatchLimit) failed: %s cli_engine_set_num(PCRERecMatchLimit) failed: %s Database initialization error: %s Failed to change socket ownership to group %s Cannot set socket permission for %s to %3o Can't change current working directory to root Not listening on any interfaces Can't unlink the socket file %s %s: Not a regular file. ERROR %s: Unable to determine the filepath given the file descriptor. Client disconnected while command was active Not enough threads for multiscan. Max: %d, Alive: %d, Multiscan: %d+1 Not enough threads for multiscan. Increase MaxThreads.FILDES: didn't receive file descriptor.THREADS: live %u idle %u max %u idle-timeout %u ERROR: error encountered while formatting statistics MEMSTATS: heap N/A mmap N/A used N/A free N/A releasable N/A pools %u pools_used %.3fM pools_total %.3fM Rejecting ALLMATCHSCAN command. ALLMATCHSCAN command disabled by clamd configuration.Invalid command dispatched: %d THRMGR: group finished freeing %p Scanthread: connection shut down (FD %d) /etc/clamav/clamav-milter.confDump authenticode certificate chain.Perform HTML, script, and text normalizationAlways generate MDB entries for PE sectionsMaximum number of mismatched signatures when building a CVD. Zero disables this limit.Feature level to put in the CVDVersion number of the CVD to buildCreate a hybrid (standard and bytecode) database fileForce using the interpreter instead of the JITTrust loaded bytecode (default yes)Load and print bytecode information without executingPrint IR of bytecode signatureInput file to run the bytecode nDon't show source line during tracingNumber of entries the cache can store.Name of the analyzer as seen in prewikkaSave all reports to a log file.By default the log file is locked for writing and only a single daemon process can write to it. This option disables the lock.Maximum size of the log file. Value of 0 disables the limit.Log all clean files. Useful in debugging but drastically increases the log size.Use the system logger (can work together with LogFile).Type of syslog messages. Please refer to 'man syslog' for the facility names.Rotate log file. Requires LogFileMaxSize option set prior to this option.Log additional information about the infected file, such as its size and hash, together with the virus name.Save the process ID to a file.This option allows you to change the default temporary directory.This option allows you to change the default database directory. If you enable it, please make sure it points to the same directory in both clamd and freshclam.Only load the official signatures published by the ClamAV project.Return with a nonzero error code if the virus database is older than the specified number of days.By default, yara rules will be loaded. This option allows you to exclude yara rules when scanning and also to scan only using yara rules. Valid options are yes|no|onlyPath to a local socket file the daemon will listen on.Sets the group ownership on the unix socket.Sets the permissions on the unix socket to the specified mode.Remove a stale socket after unclean shutdownA TCP port number the daemon will listen on.By default clamd binds to INADDR_ANY. This option allows you to restrict the TCP address and provide some degree of protection from the outside world.Maximum length the queue of pending connections may grow to.Close the STREAM session when the data size limit is exceeded. The value should match your MTA's limit for the maximum attachment size.The STREAM command uses an FTP-like protocol. This option sets the lower boundary for the port range.This option sets the upper boundary for the port range.Maximum number of threads running at the same time.This option specifies the time (in seconds) after which clamd should timeout if a client doesn't provide any data.This option specifies the time (in seconds) after which clamd should timeout if a client doesn't provide any initial command after connecting.This option specifies how long to wait (in milliseconds) if the send buffer is full. Keep this value low to prevent clamd hanging.Waiting for data from clamd will timeout after this time (seconds).Maximum number of queued items (including those being processed by MaxThreads threads). It is recommended to have this value at least twice MaxThreads if possible. WARNING: you shouldn't increase this too much to avoid running out of file descriptors, the following condition should hold: MaxThreads*MaxRecursion + MaxQueue - MaxThreads + 6 < RLIMIT_NOFILE (usual max for RLIMIT_NOFILE is 1024) This option specifies how long (in seconds) the process should wait for a new job.Don't scan files/directories whose names match the provided regular expression. This option can be specified multiple times.Maximum depth the directories are scanned at.Follow symlinks to regular files.Scan files and directories on other filesystems.This option specifies the time intervals (in seconds) in which clamd should perform a database check.Enable non-blocking (multi-threaded/concurrent) database reloads. This feature will temporarily load a second scanning engine while scanning continues using the first engine. Once loaded, the new engine takes over. The old engine is removed as soon as all scans using the old engine have completed. This feature requires more RAM, so this option is provided in case users are willing to block scans during reload in exchange for lower RAM requirements.This option allows you to disable clamd's caching feature.Execute a command when virus is found. Use the following environment variables to identify the file and virus names: - $CLAM_VIRUSEVENT_FILENAME - $CLAM_VIRUSEVENT_VIRUSNAME In the command string, '%v' will also be replaced with the virus name. Note: The '%f' filename format character has been disabled and will no longer be replaced with the file name, due to command injection security concerns. Use the 'CLAM_VIRUSEVENT_FILENAME' environment variable instead. For the same reason, you should NOT use the environment variables in the command directly, but should use it carefully from your executed script.Stop the daemon when libclamav reports an out of memory condition.Permit use of the ALLMATCHSCAN command.Enable debug messages in libclamav.Don't remove temporary files (for debugging purposes).Record metadata about the file being scanned. Scan metadata is useful for file analysis purposes and for debugging scan behavior. The JSON metadata will be printed after the scan is complete if Debug is enabled. A metadata.json file will be written to the scan temp directory if LeaveTemporaryFiles is enabled.Run the daemon as a specified user (the process must be started by root).With this option enabled ClamAV will load bytecode from the database. It is highly recommended you keep this option on, otherwise you'll miss detections for many new viruses.Set bytecode security level. Possible values: TrustSigned - trust bytecode loaded from signed .c[lv]d files, insert runtime safety checks for bytecode loaded from other sources Paranoid - don't trust any bytecode, insert runtime checks for all Recommended: TrustSigned, because bytecode in .cvd files already has these checks.Set bytecode timeout in milliseconds.Allow loading bytecode from outside digitally signed .c[lv]d files.^(Auto|ForceJIT|ForceInterpreter|Test)$Set bytecode execution mode. Possible values: Auto - automatically choose JIT if possible, fallback to interpreter ForceJIT - always choose JIT, fail if not possible ForceInterpreter - always choose interpreter Test - run with both JIT and interpreter and compare results. Make all failures fatal.^(none|None|bytecode|Bytecode|pcre|PCRE)$Collect and print execution statistics. Possible values: Bytecode - reports bytecode statistics PCRE - reports PCRE execution statistics None - reports no statisticsDetect Potentially Unwanted Applications.Exclude a specific PUA category. This directive can be used multiple times. See https://docs.clamav.net/faq/faq-pua.html for the complete list of PUA categories.Only include a specific PUA category. This directive can be used multiple times.PE stands for Portable Executable - it's an executable file format used in all 32- and 64-bit versions of Windows operating systems. This option allows ClamAV to perform a deeper analysis of executable files and it's also required for decompression of popular executable packers such as UPX or FSG. If you turn off this option, the original files will still be scanned, but without additional processing.Executable and Linking Format is a standard format for UN*X executables. This option allows you to control the scanning of ELF files. If you turn off this option, the original files will still be scanned, but without additional processing.Enable the built in email scanner. If you turn off this option, the original files will still be scanned, but without parsing individual messages/attachments.Scan RFC1341 messages split over many emails. You will need to periodically clean up $TemporaryDirectory/clamav-partial directory. WARNING: This option may open your system to a DoS attack. Please don't use this feature on highly loaded servers.With this option enabled ClamAV will try to detect phishing attempts by using signatures.Scan URLs found in mails for phishing attempts using heuristics.In some cases (eg. complex malware, exploits in graphic files, and others), ClamAV uses special algorithms to provide accurate detection. This option controls the algorithmic detection.Allow heuristic match to take precedence. When enabled, if a heuristic scan (such as phishingScan) detects a possible virus/phish it will stop scan immediately. Recommended, saves CPU scan-time. When disabled, virus/phish detected by heuristic scans will be reported only at the end of a scan. If an archive contains both a heuristically detected virus/phish, and a real malware, the real malware will be reported. Keep this disabled if you intend to handle "Heuristics.*" viruses differently from "real" malware. If a non-heuristically-detected virus (signature-based) is found first, the scan is interrupted immediately, regardless of this config option.Enable the Data Loss Prevention module.This option sets the lowest number of Credit Card numbers found in a file to generate a detect.This option sets the lowest number of Social Security Numbers found in a file to generate a detect.With this option enabled the DLP module will search for valid SSNs formatted as xxx-yy-zzzz.With this option enabled the DLP module will search for valid SSNs formatted as xxxyyzzzzPerform HTML/JavaScript/ScriptEncoder normalisation and decryption. If you turn off this option, the original files will still be scanned, but without additional processing.This option enables scanning of OLE2 files, such as Microsoft Office documents and .msi files. If you turn off this option, the original files will still be scanned, but without additional processing.With this option enabled clamav will try to detect broken executables (PE, ELF, & Mach-O) and alert on them with a Broken.Executable heuristic signature.With this option enabled clamav will try to detect broken media files (JPEG, TIFF, PNG, GIF) and alert on them with a Broken.Media heuristic signature.Alert on encrypted archives and documents (encrypted .zip, .7zip, .rar, .pdf).With this option enabled the DLP module will search for valid Credit Card numbers only. Debit and Private Label cards will not be searched.Alert on encrypted archives (encrypted .zip, .7zip, .rar).Alert on encrypted documents (encrypted .pdf).With this option enabled OLE2 files with VBA macros, which were not detected by signatures will be marked as "Heuristics.OLE2.ContainsMacros".Alert on SSL mismatches in URLs, even if they're not in the database. This feature can lead to false positives.Alert on cloaked URLs, even if they're not in the database. This feature can lead to false positives.Alert on raw DMG image files containing partition intersections.This option enables scanning within PDF files. If you turn off this option, the original files will still be scanned, but without decoding and additional processing.This option enables scanning within SWF files. If you turn off this option, the original files will still be scanned, but without decoding and additional processing.This option enables scanning xml-based document files supported by libclamav. If you turn off this option, the original files will still be scanned, but without additional processing.This option enables scanning HWP3 files. If you turn off this option, the original files will still be scanned, but without additional processing.This option enables scanning OneNote files. If you turn off this option, the original files will still be scanned, but without additional processing.Scan within archives and compressed files. If you turn off this option, the original files will still be scanned, but without unpacking and additional processing.This option enables scanning of image (graphics). If you turn off this option, the original files will still be scanned, but without additional processing.This option enables detection by calculating a fuzzy hash of image (graphics) files Signatures using image fuzzy hashes typically match files and documents by identifying images embedded or attached to those files. If you turn off this option, then some files may no longer be detected.This option causes memory or nested map scans to dump the content to disk. If you turn on this option, more data is written to disk and is available when the leave-temps option is enabled at the cost of more disk writes.This option sets the maximum amount of time a scan may take to complete. The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result allow scanning of certain files to lock up the scanning process/threads resulting in a Denial of Service. The value is in milliseconds.This option sets the maximum amount of data to be scanned for each input file. Archives and other containers are recursively extracted and scanned up to this value. The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result in severe damage.Files/messages larger than this limit won't be scanned. Affects the input file itself as well as files contained inside it (when the input file is an archive, a document or some other kind of container). The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result in severe damage to the system.Nested archives are scanned recursively, e.g. if a Zip archive contains a RAR file, all files within it will also be scanned. This option specifies how deeply the process should be continued. The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result in severe damage to the system.Number of files to be scanned within an archive, a document, or any other container file. The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result in severe damage to the system.This option sets the maximum size of a file to check for embedded PE. Files larger than this value will skip the additional analysis step. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum size of a HTML file to normalize. HTML files larger than this value will not be normalized or scanned. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum size of a normalized HTML file to scan. HTML files larger than this value after normalization will not be scanned. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum size of a script file to normalize. Script content larger than this value will not be normalized or scanned. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum size of a ZIP file to reanalyze type recognition. ZIP files larger than this value will skip the step to potentially reanalyze as PE. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum number of partitions of a raw disk image to be scanned. Raw disk images with more partitions than this value will have up to the value number partitions scanned. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum number of icons within a PE to be scanned. PE files with more icons than this value will have up to the value number icons scanned. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum recursive calls to HWP3 parsing function. HWP3 files using more than this limit will be terminated and alert the user. Scans will be unable to scan any HWP3 attachments if the recursive limit is reached. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum calls to the PCRE match function during an instance of regex matching. Instances using more than this limit will be terminated and alert the user but the scan will continue. For more information on match_limit, see the PCRE documentation. Negative values are not allowed. WARNING: setting this limit too high may severely impact performance.This option sets the maximum recursive calls to the PCRE match function during an instance of regex matching. Instances using more than this limit will be terminated and alert the user but the scan will continue. For more information on match_limit_recursion, see the PCRE documentation. Negative values are not allowed and values > PCREMatchLimit are superfluous. WARNING: setting this limit too high may severely impact performance.This option sets the maximum filesize for which PCRE subsigs will be executed. Files exceeding this limit will not have PCRE subsigs executed unless a subsig is encompassed to a smaller buffer. Negative values are not allowed. Setting this value to zero disables the limit. WARNING: setting this limit too high or disabling it may severely impact performance.This option specifies a directory or mount point which should be scanned on access. The mount point specified, or the mount point containing the specified directory will be watched, but only notifications will occur. If any directories are specified, this option will preempt the DDD system. It can also be used multiple times.This option specifies a directory (including all files and directories inside it), which should be scanned on access. This option can be used multiple times.This option allows excluding directories from on-access scanning. It can be used multiple times. Only works with DDD system.Use this option to exclude the root UID (0) and allow any processes run under root to access all watched files without triggering scans.With this option you can exclude specific UIDs. Processes with these UIDs will be able to access all files. This option can be used multiple times (one per line). Using a value of 0 on any line will disable this option entirely. To exclude the root UID please enable the OnAccessExcludeRootUID option.This option allows exclusions via user names when using the on-access scanning client. It can be used multiple times.Files larger than this value will not be scanned in on access.This option toggles the dynamic directory determination system for on-access scanning (Linux only).This option changes fanotify behavior to prevent access attempts on malicious files instead of simply notifying the user (On Access scan only).Enables extra scanning and notification after catching certain inotify events. Only works with the DDD system enabled.Max amount of time (in milliseconds) that the OnAccess client should spend for every connect, send, and receive attempt when communicating with clamd via curl (5s default)Max number of scanning threads to allocate to the OnAccess thread pool at startup--these threads are the ones responsible for creating a connection with the daemon and kicking off scanning after an event has been processed. To prevent clamonacc from consuming all clamd's resources keep this lower than clamd's max threads. Default is 5Number of times the OnAccess client will retry a failed scan due to connection problems (or other issues). Defaults to no retries.When using prevention, if this option is turned on, any errors that occur during scanning will result in the event attempt being denied. This could potentially lead to unwanted system behaviour with certain configurations, so the client defaults to off and allowing access events in case of error.When started by root freshclam will drop privileges and switch to the user defined in this option.This option defined how many times daily freshclam should check for a database update.Use DNS to verify the virus database version. FreshClam uses DNS TXT records to verify the versions of the database and software itself. With this directive you can change the database verification domain. WARNING: Please don't change it unless you're configuring freshclam to use your own database verification domain.DatabaseMirror specifies to which mirror(s) freshclam should connect. You should have at least one entry: database.clamav.net.This option allows you to easily point freshclam to private mirrors. If PrivateMirror is set, freshclam does not attempt to use DNS to determine whether its databases are out-of-date, instead it will use the If-Modified-Since request or directly check the headers of the remote database files. For each database, freshclam first attempts to download the CLD file. If that fails, it tries to download the CVD file. This option overrides DatabaseMirror, DNSDatabaseInfo and Scripted Updates. It can be used multiple times to provide fall-back mirrors.mirror1.mynetwork.com mirror2.mynetwork.comThis option defines how many attempts freshclam should make before giving up.With this option you can control scripted updates. It's highly recommended to keep them enabled.With this option enabled, freshclam will attempt to load new databases into memory to make sure they are properly handled by libclamav before replacing the old ones. Tip: This feature uses a lot of RAM. If your system has limited RAM and you are actively running ClamD or ClamScan during the update, then you may need to set `TestDatabases no`.By default freshclam will keep the local databases (.cld) uncompressed to make their handling faster. With this option you can enable the compression. The change will take effect with the next database update.Include an optional signature databases (opt-in). This option can be used multiple times.Exclude a standard signature database (opt-out). This option can be used multiple times.With this option you can provide custom sources (http:// or file://) for database files. This option can be used multiple times.http://myserver.com/mysigs.ndb file:///mnt/nfs/local.hdbIf you're behind a proxy, please enter its address here.A user name for the HTTP proxy authentication.A password for the HTTP proxy authentication.If your servers are behind a firewall/proxy which does a User-Agent filtering you can use this option to force the use of a different User-Agent header.Send the RELOAD command to clamd after a successful update.Run a command after a successful database update. Use EXIT_1 to return 1 after successful database update.Run a command when a database update error occurs.Run a command when freshclam reports an outdated version. In the command string %v will be replaced with the new version number.With this option you can provide a client address for the database downloading. Useful for multi-homed systems.Timeout in seconds when connecting to database server.Timeout in seconds when reading from database server. 0 means no timeout.This option enables downloading of bytecode.cvd, which includes additional detection mechanisms and improvements to the ClamAV engine.Disable authenticode certificate chain verification in PE files.Deprecated option to download signatures derived from the Google Safe Browsing API. See https://blog.clamav.net/2020/06/the-future-of-clamav-safebrowsing.html for more details.Deprecated option to set the max-scantime. The value is in milliseconds.Deprecated option to alert on broken PE and ELF executable files.Deprecated option to enable heuristic alerts (e.g. "Heuristics.")Deprecated option to alert on SSL mismatches in URLs, even if they're not in the database. This feature can lead to false positives.Deprecated option to alert on cloaked URLs, even if they're not in the database. This feature can lead to false positives.Deprecated option to alert on raw DMG image files containing partition intersections.Deprecated option to alert on encrypted archives and documents (encrypted .zip, .7zip, .rar, .pdf).Initialize a supplementary group access (the process must be started by root).Define the clamd socket to connect to for scanning. This option is mandatory! Syntax: ClamdSocket unix:path ClamdSocket tcp:host:port The first syntax specifies a local unix socket (needs an absolute path) e.g.: ClamdSocket unix:/run/clamav/clamd.sock The second syntax specifies a tcp local or remote tcp socket: the host can be a hostname or an ip address; the ":port" field is only required for IPv6 addresses, otherwise it defaults to 3310 ClamdSocket tcp:192.168.0.1 This option can be repeated several times with different sockets or even with the same socket: clamd servers will be selected in a round-robin fashion.Define the interface through which we communicate with sendmail. This option is mandatory! Possible formats are: [[unix|local]:]/path/to/file - to specify a unix domain socket; inet:port@[hostname|ip-address] - to specify an ipv4 socket; inet6:port@[hostname|ip-address] - to specify an ipv6 socket./tmp/clamav-milter.sock inet:7357Define the group ownership for the (unix) milter socket.Sets the permissions on the (unix) milter socket to the specified mode.Messages originating from these hosts/networks will not be scanned This option takes a host(name)/mask pair in CIRD notation and can be repeated several times. If "/mask" is omitted, a host is assumed. To specify a locally originated, non-smtp, email use the keyword "local".local 192.168.0.0/24 1111:2222:3333::/48^(Accept|Reject|Defer|Blackhole|Quarantine)$Action to be performed on clean messages (mostly useful for testing). The following actions are available: Accept: the message is accepted for delivery Reject: immediately refuse delivery (a 5xx error is returned to the peer) Defer: return a temporary failure message (4xx) to the peer Blackhole: like Accept but the message is sent to oblivion Quarantine: like Accept but message is quarantined instead of being deliveredAction to be performed on error conditions (this includes failure to allocate data structures, no scanners available, network timeouts, unknown scanner replies and the like. The following actions are available: Accept: the message is accepted for delivery; Reject: immediately refuse delivery (a 5xx error is returned to the peer); Defer: return a temporary failure message (4xx) to the peer.This option allows you to set a specific rejection reason for infected messages and it's therefore only useful together with "OnInfected Reject" The string "%v", if present, will be replaced with the virus name.If this option is set to "Replace" (or "Yes"), an "X-Virus-Scanned" and an "X-Virus-Status" headers will be attached to each processed message, possibly replacing existing headers. If it is set to Add, the X-Virus headers are added possibly on top of the existing ones. Note that while "Replace" can potentially break DKIM signatures, "Add" may confuse procmail and similar filters.When AddHeader is in use, this option allows you to set the reported hostname. This may be desirable in order to avoid leaking internal names. If unset the real machine name is used.Execute a command when an infected message is processed. The following parameters are passed to the invoked program in this order: virus name, queue id, sender, destination, subject, message id, message date. Note #1: this requires MTA macroes to be available (see LogInfected below) Note #2: the process is invoked in the context of clamav-milter Note #3: clamav-milter will wait for the process to exit. Be quick or fork to avoid unnecessary delays in email delivery/usr/local/bin/my_infected_message_handlerChroot to the specified directory. Chrooting is performed just after reading the config file and before dropping privileges.This option specifies a file which contains a list of basic POSIX regular expressions. Addresses (sent to or from - see below) matching these regexes will not be scanned. Optionally each line can start with the string "From:" or "To:" (note: no whitespace after the colon) indicating if it is, respectively, the sender or recipient that is to be allowed. If the field is missing, "To:" is assumed. Lines starting with #, : or ! are ignored.Messages from authenticated SMTP users matching this extended POSIX regular expression (egrep-like) will not be scanned. As an alternative, a file containing a plain (not regex) list of names (one per line) can be specified using the prefix "file:". e.g. SkipAuthenticated file:/etc/good_guys Note: this is the AUTH login name!SkipAuthenticated ^(tom|dick|henry)$This option allows you to tune what is logged when a message is infected. Possible values are Off (the default - nothing is logged), Basic (minimal info logged), Full (verbose info logged) Note: For this to work properly in sendmail, make sure the msg_id, mail_addr, rcpt_addr and i macroes are available in eom. In other words add a line like: Milter.macros.eom={msg_id}, {mail_addr}, {rcpt_addr}, i to your .cf file. Alternatively use the macro: define(`confMILTER_MACROS_EOM', `{msg_id}, {mail_addr}, {rcpt_addr}, i') Postfix should be working fine with the default settings.This option allows you to tune what is logged when no threat is found in a scanned message. See LogInfected for possible values and caveats. Useful in debugging but drastically increases the log size.This option affects the behaviour of LogInfected, LogClean and VirusAction when a message with multiple recipients is scanned: If SupportMultipleRecipients is off (the default) then one single log entry is generated for the message and, in case the message is determined to be malicious, the command indicated by VirusAction is executed just once. In both cases only the last recipient is reported. If SupportMultipleRecipients is on: then one line is logged for each recipient and the command indicated by VirusAction is also executed once for each recipient. Note: although it's probably a good idea to enable this option, the default value is currently set to off for legacy reasons.fds_poll_recv: timeout after %d seconds realloc_polldata: Memory allocation failed for poll_data Received POLLIN|POLLHUP on fd %d Message truncated at %d bytes Control message truncated at %d bytes, %d data read Control message truncated, no control data received, %d bytes read(Is SELinux/AppArmor enabled, and blocking file descriptor passing?) Unclaimed file descriptor received. closing: %d Received a file descriptor: %d poll_recv_fds: poll failed: %s POSIXLY_CORRECT%s: illegal option -- %c IDLE%s/ExcludedCrossFilesystemsExcluded (another filesystem). ERRORFile path check failure:%s: unrecognized option `%s' %s: option `%s' is ambiguous ERROR: %sWARNING: %sExample ERROR: Unknown option passed yestrue (INVALID timestamps: %u) (ERROR: %u != %u)Log size = %lld, max = %lld -%Y%m%d_%H%M%S.log%s -> %s -> %s[LibClamAV] %s: %s(filename not set)ExtendedDetectionInfo%s: %s(%s:%llu) FOUND %s: %s FOUND VirusEventPATHCLAM_VIRUSEVENT_FILENAME%s=%sCLAM_VIRUSEVENT_VIRUSNAME%v%f-c/bin/shVirusEvent: fork failed. LocalSocketLocalSocketModeInvalid LocalSocketMode %s FixStaleSocketLOCAL: Unix socket file %s MaxConnectionQueueLengthLOCAL: listen() error: %s Failed to write to syncpipe Reading databases from %s Main socket gone: fatal Syncpipe read failed Acceptloop closed FD: %d Got new connection, FD %d fds_add failed write syncpipe failed accept() failed: %s Shutdown: closed fd %d Syncpipe write failed TCPSocket%lldTCP: getaddrinfo failed: %s TCP: socket() error: %s %uTCP: Bound to [%s]:%s Fatal: mutex lock failed Fatal: mutex unlock failed Mutex lock failed THRMGR: contended, sleeping THRMGR: contended, woken pthread_create failed Mutex unlock failed Skipping symlink: %s Not supported file typeNot supported file type: %s Empty filecl_engine_addref() failed thread dispatch failed Access denied.Access denied: %s PreludeEnable%s: %s ERROR %s: OK THRMGR: new group: %p RELOADING%c%u: PONG%c%u: 1.4.3 COMMANDS:TemporaryDirectoryStreamMaxLengthNo file descriptor received.Invalid command dispatch: %d UNKNOWN COMMAND%u: %s%cMaxScanTimeMaxEmbeddedPEMaxHTMLNormalizeMaxHTMLNoTagsMaxScriptNormalizeMaxZipTypeRcgMaxPartitionsMaxIconsPEMaxRecHWP3PCREMaxFileSizeScanArchiveArchive support enabled. Archive support disabled. ScanImageScanImageFuzzyHashArchiveBlockEncryptedAlertEncryptedAlertEncryptedArchiveAlertEncryptedDocAlertExceedsMaxAlgorithmicDetectionHeuristicAlertsHeuristic alerts disabled. Heuristic alerts enabled. ScanPEScanELFELF support enabled. ELF support disabled. DetectBrokenExecutablesAlertBrokenExecutablesAlertBrokenMediaScanMailMail files support enabled. ScanPartialMessagesMail files support disabled. ScanOLE2OLE2 support enabled. OLE2BlockMacrosAlertOLE2MacrosOLE2 support disabled. ScanPDFPDF support enabled. PDF support disabled. ScanSWFSWF support enabled. SWF support disabled. ScanHTMLHTML support enabled. HTML support disabled. ScanXMLDOCSXMLDOCS support enabled. XMLDOCS support disabled. ScanHWP3HWP3 support enabled. HWP3 support disabled. ScanOneNoteOneNote support enabled. OneNote support disabled. PhishingScanURLsPhishingAlwaysBlockCloakAlertPhishingCloakAlertPhishingSSLMismatchAlertPartitionIntersectionHeuristicScanPrecedenceStructuredDataDetectionStructuredMinCreditCardCountStructuredCCOnlyStructuredMinSSNCountStructuredSSNFormatNormalStructuredSSNFormatStrippedGenerateMetadataJsonSelfCheckSelf checking disabled. Listening daemon: PID: %u MaxQueueCommandReadTimeoutMaxQueue set to: %d IdleTimeoutfailed to add pipe fd thrmgr_new failed mode -> MODE_COMMAND mode WAIT_REPLY -> closed Client read timed out COMMAND READ TIMED OUT %u: %s %s%cCommand %s missing argument! Command dispatch failed ExitOnOOMmode -> MODE_WAITREPLY Moved partial command: %lu Consumed entire command Garbage: %s mode == MODE_STREAM Got chunksize: %u Chunks complete INSTREAM size limit exceeded.Quota Remaining: %lu Error processing command.Shutdown closed fd %d DatabaseDirectorycl_statinidir() failed: %s ConcurrentDatabaseReloadDatabase reload completed. Write to syncpipe failed PidFileCan't unlink the pid file %s Pid file removed. --- Stopped at %sERROR: initgroups() failed. log file '%s'. Error was '%s' ERROR: setgid(%d) failed. ERROR: setuid(%d) failed. Failed to set locale help clamd [options]debugsetrlimit--foregroundForegroundconfig-fileUser/etc/clamav/freshclam.conf%s/daily.cvd%s/daily.cldClamAV %s ClamAV %s/%u/%sLogFileUnlockLogTimeLogCleanLogFileMaxSizeLogVerboseLogRotateSendBufTimeout+++ Started at %ssigactiondaemonize() failed: %s wDevLiblogDebugLogSyslogLogFacilityclamd/procStreamMinPortStreamMaxPortcache-sizedisable-cacheDetectPUAExcludePUAExcluded PUA categories:.%sIncludePUAIncluded PUA categories:Not loading PUA signatures. OfficialDatabaseOnlyLeaveTemporaryFilesForceToDiskPhishingSignaturesBytecodeBytecodeSecurityTrustSignedParanoidBytecodeUnsignedBytecodeModeForceJITForceInterpreterTestBytecodeTimeoutBytecode support disabled. DevACOnlyOnly using the A-C matcher. DevACDepthMax A-C depth set to %u fail-if-cvd-older-thanDisableCertCheckLoaded %u signatures. PCREMatchLimitPCRERecMatchLimitTCPAddrLocalSocketGroupUnknown group %s /dev/nullCan't open /dev/null dup2(%d, %d) failed Socket file removed. Closing the main socket%s. streaminstream(%s@%u)fd[%d]Not a regular fileOKINVALIDEXIT??PRIMARYN/ACONTSCANMULTISCANMULTISCANFILEFILDESClosed fd %d POOLS: %u NULL STATE: %s %s QUEUE: %u items %s %f %s END%cINSTREAMftruncate failed: %d AllowAllMatchScanALLMATCHSCANMaxDirectoryRecursionFollowDirectorySymlinksFollowFileSymlinksFinished scanthread ^(yes|true|1|no|false|0)$/etc/clamav/clamd.confgen-jsondumpcertsquietleave-tempsno-warningsshow-progressstdoutdaemonno-dnslist-mirrorsupdate-dbreloadmultiscanfdpassallmatchdatabase/var/lib/clamavrecursivegen-mdbfollow-dir-symlinks^[0-9]+$follow-file-symlinksbellno-summaryfile-listinfectedpingwaitsuppress-ok-resultscopyremoveexcludeexclude-dirincludeinclude-dirstructured-ssn-formathex-dumpmd5sha1sha256impfuzzy-imgprint-certshtml-normaliseascii-normaliseutf16-decodebuildmax-bad-sigs3000flevelcvd-versionno-cdiffserverunpackunpack-currentinfolist-sigsfind-sigsdecode-sigstest-sigsvbavba-hexcomparerun-cdiffverify-cdiffhybriddefaultcolorsconfig-dir/etc/clamavnon-defaultgenerate-configforce-interpretertrust-bytecodeprintsrcPrint source code of bytecodeprintbcirinputtracebytecode trace levelno-trace-showsourcearchive-verbosebytecode-trust-allhttp-proxyproxy-userlog-verboseforcedisable-summarydisable-archiveno-archiveno-peno-elfno-ole2no-pdfno-htmlno-mailno-phishing-sigsno-phishing-scan-urlsno-algorithmicno-phishing-restrictedscanmax-ratiomax-space^[0-9]+[KMG]?$unzipfoounrararjunzoolhajartartgzdebalert-exceeds-maxCacheSize65536prelude-enableEnable preludePreludeAnalyzerNameprelude-analyzer-name/tmp/clamav.log5MLog time with each message.LOG_LOCAL6LOG_MAILEnable verbose logging.log-rotate/run/clamav/clam.pidtempdir/tmpdatadirofficial-db-onlynoFailIfCvdOlderThan-1YaraRulesyara-rules/run/clamav/clamd.sockvirusgroup6603310localhost30100M10242048120200300^/proc/ ^/sys/max-dir-recursion15Follow directory symlinks.cross-fs600DisableCache/opt/send_virus_alert_sms.shDon't fork into background.^(TrustSigned|Paranoid)$bytecode-timeout10000bytecode-unsignedbytecode-modeAutoStatisticsstatisticsNonedetect-puaexclude-puaNetTool PWToolinclude-puaSpy Scanner RATscan-pescan-elfscan-mailheuristic-alertsheuristic-scan-precedencedetect-structuredstructured-cc-countstructured-ssn-countscan-htmlscan-ole2alert-brokenalert-broken-mediaalert-encryptedstructured-cc-modealert-encrypted-archivealert-encrypted-docalert-macrosalert-phishing-sslalert-phishing-cloakalert-partition-intersectionscan-pdfscan-swfscan-xmldocsscan-hwp3scan-onenotescan-archivescan-imagescan-image-fuzzy-hashforce-to-diskmax-scantime120000max-scansize400Mmax-recursion17max-filesmax-embeddedpe40Mmax-htmlnormalizemax-htmlnotags8Mmax-scriptnormalize20Mmax-ziptypercg1Mmax-partitions128max-iconspe100max-rechwp316pcre-match-limit100000pcre-recmatch-limit5000pcre-max-filesizeOnAccessMountPath/ /home/userOnAccessIncludePath/home /studentsOnAccessExcludePath/home/bofh /rootOnAccessExcludeRootUIDOnAccessExcludeUIDOnAccessExcludeUnameclamuserOnAccessMaxFileSizeOnAccessDisableDDDOnAccessPreventionOnAccessExtraScanningOnAccessCurlTimeout10000LOnAccessMaxThreadsOnAccessRetryAttemptsOnAccessDenyOnErrorwatch-listexclude-listdev-ac-onlydev-ac-depthDevPerformancedev-performancedev-liblogUpdateLogFile/var/log/freshclam.logDatabaseOwnerCheckschecksDNSDatabaseInfocurrent.cvd.clamav.netDatabaseMirrordatabase.clamav.netPrivateMirrorMaxAttemptsScriptedUpdatesTestDatabasesCompressLocalDatabaseExtraDatabasedbname1 dbname2ExcludeDatabaseDatabaseCustomURLHTTPProxyServeryour-proxyHTTPProxyPortHTTP proxy's port8080HTTPProxyUsernameusernameHTTPProxyPasswordHTTPUserAgentNotifyClamddaemon-notifyOnUpdateExecuteon-update-executecommandOnErrorExecuteon-error-executeOnOutdatedExecuteon-outdated-executeLocalIPAddresslocal-addressaaa.bbb.ccc.dddConnectTimeoutReceiveTimeoutnocertsSafeBrowsingTimeLimittimelimitdetect-brokenalgorithmic-detectionblock-maxblock-macrosblock-encryptedMailMaxRecursionArchiveMaxScanSizeArchiveMaxRecursionArchiveMaxFilesArchiveMaxCompressionRatioArchiveBlockMaxArchiveLimitMemoryUsageMailFollowURLsmail-follow-urlsAllowSupplementaryGroupsScanOnAccessClamdSockettcp:scanner.mydomain:7357MilterSocketMilterSocketGroupMilterSocketModeLocalNetOnCleanAcceptOnInfectedQuarantineOnFail^(Accept|Reject|Defer)$DeferRejectMsgMTA specificAddHeader^(No|Replace|Yes|Add)$ReplaceReportHostnamemy.mail.server.nameVirusActionChroot/newrootAllowList/etc/allowed_addressesWhitelistSkipAuthenticatedLogInfectedBasicSupportMultipleRecipientsQUITRELOADPINGVERSIONCOMMANDSVERSIONENDSHUTDOWNIDSESSIONDETSTATSCLEARDETSTATSLOG_AUTHLOG_AUTHPRIVLOG_CRONLOG_DAEMONLOG_FTPLOG_KERNLOG_LPRLOG_NEWSLOG_SYSLOGLOG_USERLOG_UUCPLOG_LOCAL0LOG_LOCAL1LOG_LOCAL2LOG_LOCAL3LOG_LOCAL4LOG_LOCAL5LOG_LOCAL7%u: %s: %s FOUND%c%u: %s: %s %s%c%u: %s: %s%cClamAV %s/%u/%s%cClamAV %s%cpoll_recv_fds FD mismatch Closing unclaimed FD: %d Client disconnected (FD %d) Error condition on fd %d ng$hfAhfN,4PPh088h8h9hhhhHH8hhlԯlԯl0%ԯԯԯԯԯԯl].A>instream(local);6 0#, 0E FH`Fh@GGHH@HHDJt`OO P`PP(`RXS0YYp]pm8rhs}P~@@@t@,X00PHЪt   \  P    < p zRx PC&D$4 FJ w?9*3$"\`tX C1QC F V(CJC BJ A DRAC CJ  DRAC CJ  EEE <E$AH Z (\ EAC BD M D ,EAC BEEDa K ,GAC DGK C KAJR AY J( KkAC BKA N J 8$L9AJ Al XDL,lPLEC BQ, I (NAC DKy A ,tN%AC BNED J tTWAC E} J ,TAC DGK D ,L`XAC \ A ,|0h>EC HK} A 0@m%AC FD A S M ,ʦ 9sӦ :ܦ 0;! ;Y < =<  =F `>. ?m<ޞ `@IPg A]Fg@ Bbޞ Dp"sޞ' PEy}g 0Fg 8Gg 8Hg@ HIȧ̧g PJۧǏާޞ2 pKՏޞd Lޞ M ӛޞ 0O!(ޞ P<Ag@ `RSSerUU0VҨޞV&WgPhXX*Y=YSޞZgnޞZޞ \\WЉЉeЉЉIé ЉЉpϩޞ ЉЉܩ ЉЉЉЉQlX+u]9@cޞ @^GW^Wn_}X`bޞbRchcɪdЉߪef `ff(g/:ޞHZ_hgqzgghhīh֫ޫi֫Pi֫$3aiAQޞHj`ޞ<jjo XkwkޞXlIN l lM ЉЉ @m m HnƬ 08YӬ nЉЉЉЉЉЉЉЉ+ЉЉFЉЉVЉЉn} ЉЉoЉЉXoڭqs(shs stt(u"t-(u-8?WvW]`xgt~8yzp{H}̮x}Ӯܮ}}0%x%+HYЉЉЉЉЉЉNЉЉ~ЉЉ:ЉЉnЉЉgЉЉ"ޞЉЉޞЉЉЉЉЉЉЉЉЉЉЉЉЉЉ gЉЉЉЉ،ޞЉЉЉЉEJQ֜V fnrߜ   { N    PHƯXίׯ0H߯8 (@&1<=G ' ox ' @*h(! oo ooov (0@P`p 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p0d/usr/lib/debug/.dwz/x86_64-linux-gnu/clamav-daemon.debugy V؞ @b47e83b76d58353879dfbcb35dd4ea23b276ca.debug.shstrtab.interp.note.gnu.property.note.gnu.build-id.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.plt.got.plt.sec.text.fini.rodata.eh_frame_hdr.eh_frame.init_array.fini_array.data.rel.ro.dynamic.data.bss.gnu_debugaltlink.gnu_debuglink 880&hh$9 Go@Q Yxx' aovno  }(!(!Bh  00   ```b  ( ( @*@*00" @0"0 "0M p040/