PNG  IHDR;IDATxܻn0K )(pA 7LeG{ §㻢|ذaÆ 6lذaÆ 6lذaÆ 6lom$^yذag5bÆ 6lذaÆ 6lذa{ 6lذaÆ `}HFkm,mӪôô! x|'ܢ˟;E:9&ᶒ}{v]n&6 h_tڠ͵-ҫZ;Z$.Pkž)!o>}leQfJTu іچ\X=8Rن4`Vwl>nG^is"ms$ui?wbs[m6K4O.4%/bC%t Mז -lG6mrz2s%9s@-k9=)kB5\+͂Zsٲ Rn~GRC wIcIn7jJhۛNCS|j08yiHKֶۛkɈ+;SzL/F*\Ԕ#"5m2[S=gnaPeғL lذaÆ 6l^ḵaÆ 6lذaÆ 6lذa; _ذaÆ 6lذaÆ 6lذaÆ RIENDB` ELF>@H@8 @@@@eeppppZpjpje0x0088800hhhDDStd88800PtdxHxHxHQtdRtdpZpjpjee/lib64/ld-linux-x86-64.so.2 GNUGNU獫 ~. ]=QEGNU( 92 ?P0&4k!F"'[.KSbgTuUC-6/sG9;zsYM ("t_]z@F4g5X  {j @, y "`)|@h_ITM_deregisterTMCloneTable__gmon_start___ITM_registerTMCloneTable__cxa_finalize__libc_start_main__fdelt_chkselect__stack_chk_failstrcmpsigfillsetsigdelsetpthread_sigmasksigactionsleepmallocpthread_mutex_lockpthread_cond_signalpthread_mutex_unlockfanotify_mark__snprintf_chkstrleninotify_rm_watch__errno_locationstrndup__xpg_basename__sprintf_chkcallocstderr__fprintf_chkfwritefclosestdout__vsnprintf_chkfputsfflushpthread_exitpthread_cancelpthread_joinfdopenfilenofcntlcli_strerror__printf_chksyscallprctlsigemptysetpthread_cond_waitpthread_mutex_initpthread_cond_initcurl_easy_initcurl_easy_setoptcurl_easy_strerrorcurl_easy_cleanupcurl_easy_getinfocurl_easy_sendcurl_easy_performcli_safer_strdupstrchrcli_strntoulmemchrmemmovecurl_easy_recvsocketconnectfstatstrrchrsendmsgstrncmpstrncpymemcmpinotify_add_watchcli_safer_reallocmemsetfts_openfts_readfts_childrenfts_closepthread_createpthread_detachpthread_cond_broadcastdifftimegetpidreadlinkgetpwuidgetenvoptindoptargoptoptopterrcli_strtokenizeopenatcli_basenameunlinkatcli_filecopyrenameatfopen__getdeliminotify_init1strtolcl_strerrorpthread_testcancelkillcli_gettmpdirfgetsstrpbrkcli_regcompcli_regexeccli_regfreestrtollstrcasecmpfanotify_initcurl_global_initdup2forksetsidcli_realpathpthread_attr_initpthread_attr_setdetachstate_Unwind_Resume__gcc_personality_v0libcurl.so.4libclamav.so.12libgcc_s.so.1libc.so.6GCC_3.0GCC_3.3.1CLAMAV_PUBLICCLAMAV_PRIVATEGLIBC_2.9GLIBC_2.13GLIBC_2.15GLIBC_2.33GLIBC_2.34GLIBC_2.4GLIBC_2.32GLIBC_2.2.5GLIBC_2.3.2GLIBC_2.3.4         0P&y a_& 0Ӈ_ E ii    # .ii 9Cui Nri Zti fpjxjjjjtj0vjtjtjtkJv kt(kt8ktXkavhktpktktkuvktktkUxk0vktltlv l0v@ltHltXlvhl0vltltlyl0vltltlvl0vm mt0mv@m0v`mthmtxmvm0vmtmtmvm0vmtmtnvn0v8nt@ntPnv`n0vntntnvn0vntntnvn0votot(ov8o0vXot`otpovototowo0vototpup0v0pt8ptHpuXp0vxptptpup0vptptpup0vqtqt q0q0vPqXqthq wqwqtqtq#wq0vqtqtq-wr0v(r80rt@r5wPrIwprtxrtrRwrIwrtrtrgwr0vststslw(s0vHstPst`swwststsJus0vststsp tt(tt8tpHt0vhttptttwt0vtttttUuttutut@utHutXuSuhu0vututuwututuwvt vt0vw`vthvtxvwvtvtvwvIwvtvtwww0v8wt@wtPww`w0vwtwtwww0vwtwtwww0vxtxt(x1w8x0vXxt`xtpxwx0vxtxtxwx0vxtxtyw0yt8ytHyxxytytyxytyty%xztzt z2xPztXzthz8xxzIwzhzExzJxzIwzztzQx{Iw({0{t@{P{0vp{tx{t{]x{0v{t{t{fx|t|t|mxH|tP|t`|tx|t|t|x|t|t|x}w }t(}t8}xX}wh}tp}t}x}0v}t}t}x}t~t~x@~tH~tX~x~t~t~x~t~t~xt t0x`thtxxttx0vtx0v8t@tPxpxtty0vȀtЀtytt(y80vX@`tp0y0vptxȁ0vt?y0v0Hy8tHfyX0vxtpyȂt؂vyIw|yt y00vPXthyx0vtty0vtty(t0t@yptxtyttЄy0vtty(0vHtPt`zp0vttz0v؅ttz0v t(t8!zH0vhtpt(z0vttȆ0z؆0vtt7z 0v@tHtX?zh0vttGz0vЇt؇tXz0vt t0nz@0v`thtx}z0vttzЈIwttzz8t@tPzpzttzzȉtЉtzztt(zHzXt`tpzzttz؊zttz z0t8tHzhzxttzztȋtЋz؋z0vtt { {0IwP@X {`&{h4{x0vC{tR{f{ht(0|{8{P0vpxt{z8{ȍ{0v{t{(0vHxPtX{p0vt{Ȏ{؎{|0v |(t0&|80|H0vhXptx;|0vtQ|ȏj|Y|6tn|@8Hv|P{|X|xww||0vА(ؐ|||Iwp |(|0|`htpp}}(}3}8@C}HG}`0v(tpIwȒXВV}ؒp[} e}8IwX `~}huz`}}ȓIw}}Iw0P8}@%vXIwx}}IwȔ}Д}Iw8~}}0IwPX}`}xIwP}}Iw}}Iw((0D}8Qtpx}}~Iw&~Ȗ)~0vA~|\~(0vH0P|Xo~`~p0vXt~Iwؗ~~0v (t0~8~H0vhp|x~~~ؘ0vpt~ 0v@HtPX uh0v|60vЙؙ|<0v |(P@0v`@h|pexwj]yК0vts(8x@HP`Iw0vțЛ|؛8` (8X`)h.p80vhtCNZit0@8@HX0vxt0v0ȝtН؝0v tÀ00vPX|`׀hJzx0vt[z0vt 0v(`0t8@4P0vp xtNf0v|ȟxПIw'~(IwH@P'~Xԁp0vt0vؠ| 0v h(t08&H0vhptx0G0vtTȡeء0vtx 0v@ H|PXh0vp|т0vТآ|0v@ |(0@0v`ph|p,xE0vtXkУ0vp|0v8@tHP`0v tɃу0vȤФtؤڃ0vpt (80vX(`thp0vt+ȥ0vXt8B0v08t@MH`X0vxtv0vȦ|ЦئIws 0zPX`8hIxz}„IwHЄӄIw(08݄@PzppxzxȨ!Ш/zx >AT(zH PhXl`zpz Iwة Iw  (ą0ȅ8ӅHIwhp߅xIwp ȪتIw/4D z@H}PuV"tЫPثcIt s(r@0v`ph|prIwr0 vz8@{Hu`0v|t0vȭPЭtحt0vt ~p8IwXX`hvIwX}ZuȮIw`tpu0v08tHtxtt]ttȯtЯد0vtt 0IwPtXt`†hцx0vtt0vtt(08@y`)px)4;Iw}ȱBRRiH!PxX!#Iwز#'~0v @$(t0H0vh$ptxć0v&tڇ&@@'HP'((дh(ش*5IwC U(Z`(hlpu(u)y(Jv8)@tHP)шوȶX*жшض *ш (.X+`<hLIw+~}[ȷIw+D}j0v0,8t@jH{X0vx,|0v,ȸ|иظIw- 00vP-X|`ʉh߉x0v0.|Ŋ0vtt.K0v(.0|8@qP0vp(/x|0v/|Ⱥк(0vp|5K(0vH0P|X[ttlػtt t(t0htptxttؼ0vttΊ 0v@tHtPXh0vtt0vнh0ؽ|0vt t(,`0h8pR03`4_4(}q84@C}H5(6X6ȿ6пؿX66 8HϋX08`ϋhՋ9ߋ|: 0<8$@8x<>D>KTX?^uPX?X^`AhBB{(D08P0vpExt50vtt{|tt6(0vHtPtXp0vtt<0vttp t(t0H0vhtptxszttIwtt Iw@tHtP׀h0vtt0vtt 0vt t(@0v`thtp0vtt0vttuz8t@tHpttpIwtt6tttƌЌٌ/ry{ @ (0 8 @ H P X`hpx !"#$%&' (()0*8+@,H-P.X0`1h2p3x456789:;<=>?@ABCDEFGH I(J0K8L@MHNPOXP`QhRpSxTUVWXYZ[\]^_`abcdefgh i(j0k8l@mHnPoXp`qhsptxuvwxz|}~HHHtH5%hhhhhhhhqhah Qh Ah 1h !h hhhhhhhhhhqhahQhAh1h!hhhh h!h"h#h$h%h&h'qh(ah)Qh*Ah+1h,!h-h.h/h0h1h2h3h4h5h6h7qh8ah9Qh:Ah;1h<!h=h>h?h@hAhBhChDhEhFhGqhHahIQhJAhK1hL!hMhNhOhPhQhRhShThUhVhWqhXahYQhZAh[1h\!h]h^h_h`hahbhchdhehfhgqhhahiQhjAhk1hl!hmhnhohphqhrhshthuhvhwqhxahyQ%D% D%D%D%D%D%D%D%D%D%D%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%D%D%D%D%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%D%D%D%D%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%D%D%D%D%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MDH5y1]$HHtLHkLk8HAt HL]C uHH-HuDHuH=fHu1H5f1#LHiHtHHEH|$ D$!EtOLLAEXI}(LRH|$(Ht$ H|$(I f/wEt4LLEAEXI}(TLH}h1+D$H}9~HAlH 1H=Hl$0|tHHu0{H-,11fHOH111H5811H5 (11H5M11H 11H5a11H11H5u11H511H5H51111H5511H5}11H511H5p11H5M`11H5P11H5%@11H5e011H5 1H511H5/1H5111H11mHH51H51Az`H5^11eH\HH x 8H&1H5)HD$ x?{H51|$(rH\$ H5-Hl$0H{b HH@CS1HHL$ HH"QH=SHCHD$ HLpH@ L=L-oPLL x tLL x H51)HD$ LLpL x H\$ HK !H{H5Lq x HXLt$ LM~LO x IHHD$ ME=;HP HkIUH޿1Mm0MuH\$ H5H{ HPHS+HH51>H\$ {Hc 1H5H|$ txLUAH51H51AH51H5L# x u+AFH5Q1A]H5Lx IL=L5DHD$ =HP HIUL1Mm0MMEHLLD$nLD$uLLH5>1H51Mm0Hqu{1HHL$ HH{H=-uRH\$ ;H5k1WH51?UH5[1'=H5s1%HLLrx H51H51H5F1AH51H5x1tH\$ HK aIH5 x HH5Hx tPH51H\$ C;JH5xH}x kH\tHXH5HQx tsH51H\$ C;H5KHH5<x B=tI?x uHfDI<$Ht Ht I|$Ht Ht Md$8MuHL[A\ATISHHt>HfDI<$Ht Hwt I|$Ht Hat Md$8MuHL[A\UH dH%(H$1HHH H HHvH iH\HOHB1HL$1LH$HLH H$1H 1H1H 1HH$dH+%(u H ]fj d t(H@&H uHff.@ATIUSHtmHH-\HH@HH@H H=HPHHSHPHHXLcHH1[]A\øfDAWAVAUATUHSH8T$HHH=L$HL$ dH%(HD$(1HD$ D$[HD$ |$L`MD$|$1ҹ%AD$4ID$ HXI;\$(unHHLAUHL 1*ZYD$~LHL$T$LHL=H[I;\$(L+LHtL~Ht$LIHML$Ht$A|)/[HHHAULfH1^_UDIc\$0|$uD8t:f.D$HD$(dH+%(u?D$H8[]A\A]A^A_DAD$0H@HD$@ATIUHSHtRH@HHH@HHE1HID$(HtHPHZHSHCHX[D]A\Aff.fAVAUATUHSH,HHIHImHcH|,HEHHM1LH ؓHL-ГJf.8uvHL{M1SH}HLXZt@H}1xLD$ D$ H[]A\A]A^f.LH}HEH[]A\A]A^LmAUIATIUHSHHP$HË@(uYuCH{HtHHCHHLkC$HC 1H[]A\A]tHIHHtHL95'QItL`H$8dH+%({H[]A\A]A^A_D$=D$HD$/wgƃD$HH>HwHL$H$H$HL$HXD$/wD$H?HD$Ht$HFHD$HD$kDD$@@f=uL5/LHL16LIHtgI\$I&Lf=duL5LHL1cf=UEyALT$0@S1H54 HHtx@H5I1H=sH1H5THQH==HuDH5ٌ11H"H=&T1]H hH=1iH=1TeH5ة1< AWAVAUAATUHSHH$H$L$L$t@)$)$ )$0)$@)$P)$`)$p)$dH%(H$1AAuf=H$HD$0HD$8H$D$40HD$@IIIt~HT$@1AHL9sO|%uHDtLNAD$ LAD$ LHHtHxPHLAD$ AD$ AD$ tXLLLAD$LAD$H$dH+%(u@H1[]A\A]A^I|$8H "H=USHHW@tHHC@uHk8HC(1HC0H;H}(1EXH{8C@H[]AVAUATSHH\HIIIHHML1mAąH;L'1PAąH;c11AąNH;L1AąH;1AąZH;,1Aą{H;1Ҿ*1Aą8H5yHfL'1AąH;H/'1`AąH5wHCfH51AwHD[A\A]A^H5"H¿1CH;HD[A\A]A^@aH5HDIH5HD1H5 HDH5H{f.H5 H[f.H5ڢH;f.AVIAUATIUH,PSHH dH%(HD$1HT$ HD$Ll$Ht.fDLHHLQtHD$HtHH)u1.@|$ 1LJH5ߢ1HT$dH+%(H []A\A]A^ÉH5gH18t"H5H1bfH5H1@hqAWAVAUIATUSHH8L7H4$H5dH%(HD$(1GD$"zPINfD$&InH`H5HL`GP H5sH-H5lHHD$H@IFKH1L5I}LLtuLIEH|$LHHPKFH|$TH|$Ht$"LH|$H[0Ht+L{MuHuH51H$HD$(dH+%(D$H8[]A\A]A^A_IFKHD$H5JH1sH$똉D$ IEH5,~H(HDD$ x uH5~HDD$ x tjD`H5 1H1 H|$H$%1-H5FH1H$H|$SDH5ߠH1fAWGH5 }AVAUATUHSHHdH%(HD$81HfL$6HD$(HxD$HD$ D$2zPINHt$HLpt$Å-LeI|$H5|tIT$KH|$ LHpHEH5|H8CP HD$AA1L=H|$ DžLH1oHEHH59|H8L9x H511A/H|$ HtH|$t H|$HD$8dH+%(HHD[]A\A]A^A_H5{\H|$ L1Hp@H|$ Ht$2L)2HEH5o{H8x sH5[{11E1q=@@ t,ItALH51@DIt/LH5W{11պH5{1뻺H5 {11H5e1HxcHD$HH:Ht 8ALd$(H\$HL HHHIHH9D$(H51CH|$ AH H5%11AH5y1E1A+H5H1H|$ HRHXLd$(H) LHHHI HH9D$(H51j"AWAVIAUIATUHSH(HHt$HT$,PdH%(HD$1ZHL Hu#@H HIH1HLHH(MI)IHH,H9tHH(HHDžL|L LDLHHLH)LH)Q;|$Lz~L QLtfDH5!1AHD$dH+%(H(D[]A\A]A^A_HHL$HL)H)H(HHMtIAD+(Ht.H H(H5w1\ArH H(_fDE1H9MH5wwHtKH5w1A1H5H1A H5d1Aff.fAUATUSHH $HxH5vdH%(H$h1HD$/HzVERSIONHD$'HD$ HxHt$ HHXT$ uHmH}H5uHUKH|$HHpoH|$Hl$0DŽ$@H$PH$8H$XHDŽ$HDŽ$0üH|$Ht$'Hٺ Ld$AŅtttH|$1HLHuH|$ӿH$hdH+%(HxD[]A\A]H5tH|$H1Hp H51땉AH5FH1H|$EmH51AOH|$A:A谼H5AH1Z萿AVAUIATIUSLHH Mtx1LHCHI$(H)JT5I$HL9tLHM$(I$IDŽ$I,I$ LA$1HH)H葻I$IHI$ PHHH)I)I$(M$IUHtHAE+$(MI$ I$([D]A\A]A^H5os1A[]DA\A]A^I$ E1I9tH5#sLFt>H5hL $(L $HcT$HH5 H19HD$(D$H51yHy. ERRORH3AHdirectorH3qH HD$0HT$HD$ Ht!|$kLH5g1HD$( DHD$ Hdenied. H3AH Access H3qH u yERROfH5Ɍ110HD$(D$H|$HHHstHt$H߃D$ȮH\$L11H5fHHHYHOH5M1H5m1qLH51VLH5f1;H51#FLH5e11 V8 H5eH1fAzOR:HD$0HD$ H|$t#|$HT$L11H5eHD$("H51qL$L|$8Ll$`Hl$uNHD$(H|$`ǯD$L|$8HdH5dHl$Ll$`MIE1|$LH5d11=LH5d1}fyRONyRDzRyR2H5d11mHD$(D$萮[8TH5H1.HD$(D$HyLL$HH5dLT$@HL$8肫LL$HHL$8LT$@L8ڪLH5@1H1HD$(D$/ff.AWAVIAUAHATIHUSH8H=HL$HL$ DD$dH%(HD$(1HD$ D$#HD$ |$HhoLEHT$DԯE4E4HE HXH9](HHHT$PI4L~H4$L H4$HT$HI LMC|!/HHL1RL`HªXZLHEHLH561JD$HD$(dH+%(D$H8[]A\A]A^A_DD$HL$DLsuL臬H[H;]( HHH1RHL_ Y^CT$LD衩HcȅL5 9sHEM0I΋E4yL4 $芬Hc $HIH1 $PHIAwf<7/HuHHHIE,AE1H>HHud@H[HtWf{buHspLAƃuL脽HHD$(dH+%(&H8D[]A\A]A^A_fD(Mc}MunHHGL3L{LkHCHC M~MuAL$M/1Ҿ1fDAЉƉ 141i H1ƍBHL9rǃI$!HcL4IHtWt}HHHYHK JHCHX9rzHȢHHE1@HDZfHH@H@IHXHXHC HCAD$ LAݻTfDHc*1LH51AfDLA肻HHcA</ RM B= z]A%Iff.@AWAVAAUATIUSHhH<$HL$HHt$dH%(HD$X1HD$H0D$$HD$HHhHD$(H] EH[H9](ID$HD$AFD$ eHL~XAVL1LH芢XZH<$HAMtEuL$ LL$L蜤H[H;](tZL3LwHL$L,L6IHLMC|!/jHLWAVeH<$AH|$MEH$LD$11H8pADADЉ‰ 1Ѝ1ЍQi HHAAA1I9wÃD!HcHHtYHt$H<$LHL$PHD$PzHT$PHt0HCHt'H9uDH9_H@HufDH\$(H{ҸH:HD$XdH+%(D$Hh[]A\A]A^A_D$fDHt$HtIvEAIcHDH8/uH|$DD$ _DD$ HHD$NH|$DD$ mH<$HHD$PDD$ EIcHt$AHA>/uAEDD$ Ht$H<$HL$PHumHD$PHcL$ Ll$H@IL@ MLD$ tILH\$8H\$ Hl$0I#DH+HLLHΞt!H[HuِH|$膡D$?IHH\$8Hl$0I@HtIPHPIPHtHBLD$ AH|$ 7H|$-H[H;](DHcZHHB H;St)Ht HJHHHA HB HB+tHCHtH@HB H5B1H8H9uHBHCHtH@ Ht$IcЀ</1DD$ 蹛D$ fDAWAVAUATIUSHdH%(H$HclamonacHl$@Ht$3D$;c-sqD$?HD$31UH H0H#H H HHH1H蓛AT$SH5~1HHt_HHH@H@HzHt/HH@HXHHhHiHfA\$SE1DIZHH@`Lhh@ ǀHǀHǀHH1L踟L1L觟I~(1H5y1-LH5{1A~IFt4HD$|$HHt$HD$LHxH A~@AV1H5}谼A? H5/}11薼A?G>HSH$dH+%(HĘD[]A\A]A^A_@FH5uH1 H5v1 ÒAoHH[tKtR  ϐH5xuH1詻H5u1薻Af.1ɒH+D$ HgA?rH5uH1LH5Eu191肒HD$ %H\$fA?uIE111HދxrtH\$AXA~GA?ߏAVH5vH1赺A? A0A (DH5x1uA~וH}H}Hݒ1H5y:HD$Hx(tD$8@)L$89lH5zlwIDd$DD$<0H5rAH1A~fH}}HuH5x1Ҹ"A~4H5x1豸A~H5Gw1苸A~HH5^w1bff.fATIBUHSHdH%(HD$1葎H$HHHH,$L蝐HEEAuHEAMA1H5xӷH苬u'HD$dH+%(uXH[]A\fDEAHD$dH+%(u1HH5x1[]A\uH56xdK蚏f.AWIAVAAUATUSHHXHt$ T$ LD$(LL$dH%(HD$H1GAtHGDpL-LT$LLT$D$ H|$@HD$@Mb9Aj-%Mz1IR=I2LE觿H|$@赊=utHMELt$ t$8HD$TPHL$@H|$`D$\H x|H|$@ЍHD$HdH+%(HXL[]A\A]A^A_fDH5x11p@)H5rwH1ӵ두HD$H5w1趵H|$@11 H5t11H{0Ht$ 2HU%HtuH;T$PseAL1ˮHs0T$8HL$HLL$ LD$L HUH5s*ˆff.AWIAVAUATUHSH==H(>H1A++5 D%cHIcHH|LHcLD4D5u]DA?5Hc<7fDD9}H(D[]A\A]A^A_HtPA9u5S:tAW;HcH:8x:OAD$m9[E1A:AAGt:OD9IcHT -@+@-ufDH9|HT Aŀ-uztLH߉И#AE9HcIcHtD$IHD$Of.AAH~LL$)H $HH $LL$HHN|HIA9L~A9H~HMH=qE1HqA:u5D%A:t A?@IcHcHD<0yAD%ΗE/1A:A<ЍOՁ/A:"HcȃE,A:D ADH=HME1Hk:蟅Hc@5ڗH|IDr@-t6@1AHeAD%ztxLHp#AD%@DEHt$E)A)Dd$A@HTD%HLt6D1/~AƃtoDEL~HTL1ȢHI9uHD$D8E1H<$;{H$@dH+%(H(@D[]A\A]A^A_HTH5 211cDA}H5,i11A=H5hA)yH5h11H5+i11IH5h1A;!zAUATUH dH%(HD$1D$ HD$HHt$ IutLwHT$LH$yl$ utHt$1҉wAŅu|H|$Htyt|HD$dH+%(H D]A\A]H5h11Al$ @LH5h11AtA8uLH5i1H1àW1H5EhA誠H|$HP'yFxff.fATIUHdH%(HD$1H:xvH4$LyLH5/1*H<$+Ht 5Dy{H<$HtxHD$dH+%(uRH]A\LH5/1ʟH<$ˌHtH $LH5\/1蛟w@HtOATILt&H5S/1cdA\fH5E/11A\>fDAVAUATUSH dH%(HD$1HD$HHt$IіŅLl$D$HD$M Ht$LL+tHT$LH;vDt$Ht$LDyÅH|$HtvAtDyHL$H΅LH5B.11/yH|$HtvHD$dH+%(qH []A\A]A^HL$L1H5-՝H|$ՊHt1H5,f1譝H|$Ht.vHt$fLvtDHL$L1H5-iH|$iH%of.LXHL$6q8/rLH5xfH1H5e11Dt$sLH5e11ȜTp8qLL1IH5e1虜%tff.@AWAVIAUATUSHHHT$dH%(H$1HD$uIHhHcI,pH53LHtIHHcLt$I/ A~ LH5a1eHU1H5aNIcH,LuMt7LjL=1LHL蟆uAIcH,LuMuHD$0H5d%H-LcHxkDp IEuDMm0MtqMuLCjH=D1LHIH|$'H|$uMZ HQ 1LL8 IUH11gMm0MuHD$0H5$H8ʆh ]HxHt$HT$@D$HD$@IH} L0H-^bMu@MuIML_iH=`1LHIH|$CH|$uM H 1LLs IUH1腓LH5I`oL1`H5`1MMm0Ht%LGo IUL11LHH5`1HD$0LhH.#HD$LH5b#1̒LDhH=EHHH1LLH5`1腒HD$0Ht$HxDX HEmfL=~aH\$Ll$0IL52b Hm0HH]A$HgH=1HH苃uIU AuHߋ 聿D$@DžtE$EhHUH5`H1軑vH|-H\$HLMLD$eL=`LD$L5eaHL-aL% "LCHMELLD$fHt$H=~1H观LD$uHD$0 ~LHP p蔾D$@DžtDEEHhHH5_HH1ːLMnHD$0H5n!Hx*DH EZH|$`1H|$8L=aHHc= ~j ~IHJ D`fDcd8u& }Ht$8yE111gtHt$(=}iIH~fHD$(IHI9w@@uctvE HlL9sDuEx0HI}IcHHtU tH5a1袏DL1莏@H5a1uHEHHD$dH}IdIcH HT$ HqHL$HHt$hHt$HL$HHT$ I|/tgHIL*t$LH17eE^_uM@2@L@gHHqIt$LH$`Leu$x%=tE@tEHLH5na1G{HD$0LT$DpcT$HÅ~,E~'HL\uDHLELmcH=n{HH"H1L fH$`Ldu$x%=E@EHLH5`1ozHD$0LT$DpbT$HÅ~,E~'HL脂uDHLmLbH=zHHJH(<@@-HD$0H5HxPH dH=FzHtLHD$0 6zLHP p'HD$0H5AHx~P H$`Lc$x%=H|$0LtHD$0H5Hx~H$`L@ tY@cu$x%=tE@'EHLH5_1ËH|$0Labu$x%=E@EHLH5=_1fEHLH5^1EH5$\113H5]1F+D`HULH1A$L1ΊH5O[1車dJdeD_HLH1舊E L1dL1U0dcMuLH5iX1%:IUH5MX1 LH5X1dLL^ct/MtiLLڷuZHUH5W1A谉LH5qV藉H5V1脉H5V1qHUH5W1Uj;aIHD$0Lh{H53U1'baEH1efAWAVAUATUSHH $HL5E1E11H|$t$4HT$8L$DD$ dH%(H$1D$p:HD$(D$0D$$+AF,D$ut$ fAF(HI^LL$M&D$IF H$`IHLL$MPLHbIHMCL+bIGHH$H6H bIGH I_HHIG0CIG8AG$AG D$Ao,AG(IG@MH|$M}8MMN@IHMI>H|$HEH5?^HHD$E1L- H|$oHt$8|$4Lt$pH$E1LD$DLD$Dà :L[H L$$H$(1H 99uHHLMcL5qH|$(L;xHHcP,|$ HI\S4ttT$a@HL$H=sqHIHEH[1n_fHMH$IGHIG1@HD$(H|$L|$(MIG8M|$$tHcD$$HHL4D$uA~ t H<$A~HHDŽ (D$$D$$@tV|$0cHc|$0A~ @tDM1Avft$0M @D$0MI?[L[H o?H=TW^H|$(rHD$(H$dH+%(+ HD$(H[]A\A]A^A_ËL$$D$09M=HcD$01DpHcD$$HHDŽHDŽ DŽ(DŽsH$HH\HdHWH1Ƀ2H@ t@ u I9|LAL|$HWHA?# LH=WH5L\H{HXHkW1ҍpHH t u I9|L=W…kHID@q@v QHuHL$E1H=mH}V[HtH YH|$(pHD$(HcD$DHLHD$L u {HsHtYC0ED$H|$PH<$D$VH<$%E111LH|$.VH|$$QU<$C]H HcH>TH$M1Ht$HLTL $IA9"HD$HG&wAHHHH@@H[HHH|$H=YlDCHKEH Y1NZaE1Mt0L 1E1?YLcMIH|$H|$(LLLxUH|$H=kLHY1YHcAA>"I^"H?WHaA~)IH Yk)H=0S3ZH|$()nHD$(HL$H=kH<IHEHT1YtH j*H=RYH|$(mHD$(,E1ADCHKEtnHmU1XH5LVH5LWLH5UE1AE1ME1EH/U1CXA>#DCHKH=jEH V1XLs(DCHKEHS1W;HD$HH=iHMEHSS1WE1A{H=ei˾1HRoWH Ci3H=RX`HtHkTH|$({Hch9\$4j|$4)߃HcRHHD$(Hh@HDd$4Ll$8HHA9"I|lWHEHuH hH=VvWHHSH dh1H=P>WH|$(4kHD$(HR1CVHI9IE1MIA"H|$H=gVLHU1E1IUIHI9I HL$H=gHOUH fgH= @VH|$H=>gKLHR1BUUHKH=gM1H6RU/HHS1UHL$EH=fHyOTHI9IIRI?RLRDCHKE!IHS1qTE1INLD$ELH=(fHAO1:TMLD$ELH=eHNT%DCHKEtuHQ1SHKHS1SHR1SLH!R1SE1AyHCQ1wS-QIHR1PSE1I-H eH=FSSH|$(gHD$(UHH%s%s%s/%s%s/%s.%03uERROR: %sWARNING: %sClamonacc: stopped thread-pool-%dhttp://localhost/Can't send to clamd: %s OnAccessCurlTimeoutLocalSocketTCPAddrTCPSocketanypingwaitPONG ClamClient: Connected. Will try again in %lu second PINGing again in %lu second PINGing again in %lu seconds UNKNOWN COMMAND Overlong reply from clamd Communication error FDz%s %sFailed to read from %s. FD send failed: %s UNKNOWN COMMANDFailed to parse reply: "%s" FOUND%s%s FOUND %s%s Access denied. ERRORCan't access file ERRORSTDIN: noreply from clamd .%s: no reply from clamd ClamScanQueue: stopped ClamInotif: onas_ddd_exit() ClamInotif: stopped /proc/self/fd/%dOnAccessExcludeUIDOnAccessExcludeRootUIDOnAccessExcludeUname/proc/%uClamWorker: pathname is null POSIXLY_CORRECT%s: illegal option -- %c %s: unrecognized option `%s' %s: option `%s' is ambiguous traverse_to: Failed open %s %s: copied to '%s' Can't copy file '%s' Can't remove file '%s' %s: Removed. %s: moved to '%s' Can't move file %s to %s watch-listOnAccessIncludePathTemporaryDirectoryOnAccessExcludePathexclude-listExcluding temp directory: %s OnAccessPreventionOnAccessExtraScanningExample ERROR: Unknown option passed yestruecopyconfig-filehelp1.4.3ClamAV %s foreground/dev/nullCan't open /dev/null dup2(%d, %d) failed infectedremoveOnAccessRetryAttemptsOnAccessDenyOnErrorstreamfdpassmultiscanallmatchStreamMaxLengthClamonacc: daemon is remote daemon is local OnAccessMountPathOnAccessDisableDDDOnAccessMaxFileSizeOnAccessMaxThreads^(yes|true|1|no|false|0)$/etc/clamd.d/scan.conf/etc/freshclam.conf/etc/mail/clamav-milter.confdebuggen-jsondumpcertsquietleave-tempsno-warningsshow-progressstdoutdaemonno-dnslist-mirrorsupdate-dbreloaddatabase/var/lib/clamavrecursivegen-mdbfollow-dir-symlinks^[0-9]+$follow-file-symlinksbellno-summaryfile-listsuppress-ok-resultsexcludeexclude-dirincludeinclude-dirstructured-ssn-formathex-dumpmd5sha1sha256impfuzzy-imgprint-certshtml-normaliseascii-normaliseutf16-decodebuildmax-bad-sigs3000flevelcvd-versionno-cdiffserverunpackunpack-currentinfolist-sigsfind-sigsdecode-sigstest-sigsvbavba-hexcomparerun-cdiffverify-cdiffhybriddefaultcolorsconfig-dir/etcnon-defaultgenerate-configforce-interpretertrust-bytecodeprintsrcPrint source code of bytecodeprintbcirinputtracebytecode trace levelno-trace-showsourcearchive-verbosebytecode-trust-allhttp-proxyproxy-userlog-verboseforcedisable-summarydisable-archiveno-archiveno-peno-elfno-ole2no-pdfno-htmlno-mailno-phishing-sigsno-phishing-scan-urlsno-algorithmicno-phishing-restrictedscanmax-ratiomax-space^[0-9]+[KMG]?$unzipfoounrararjunzoolhajartartgzdebAlertExceedsMaxalert-exceeds-maxCacheSizecache-size65536PreludeEnableprelude-enableEnable preludePreludeAnalyzerNameprelude-analyzer-name/tmp/clamav.logLogFileUnlockLogFileMaxSize5MLogTimeLog time with each message.LogCleanLogSyslogLogFacilityLOG_LOCAL6LOG_MAILLogVerboseEnable verbose logging.LogRotatelog-rotateExtendedDetectionInfoPidFile/run/clamav/clam.pidtempdir/tmpDatabaseDirectorydatadirOfficialDatabaseOnlyofficial-db-onlynoFailIfCvdOlderThanfail-if-cvd-older-than-1YaraRulesyara-rules/run/clamav/clamd.sockLocalSocketGroupvirusgroupLocalSocketMode660FixStaleSocket3310localhostMaxConnectionQueueLength30100MStreamMinPort1024StreamMaxPort2048120CommandReadTimeoutSendBufTimeout200300MaxQueueIdleTimeout^/proc/ ^/sys/MaxDirectoryRecursionmax-dir-recursion15FollowDirectorySymlinksFollow directory symlinks.FollowFileSymlinksCrossFilesystemscross-fsSelfCheck600ConcurrentDatabaseReloadDisableCachedisable-cacheVirusEvent/opt/send_virus_alert_sms.shExitOnOOMAllowAllMatchScanForegroundDon't fork into background.DebugLeaveTemporaryFilesGenerateMetadataJsonUserBytecodeBytecodeSecurity^(TrustSigned|Paranoid)$TrustSignedBytecodeTimeoutbytecode-timeout10000BytecodeUnsignedbytecode-unsignedBytecodeModebytecode-modeAutoStatisticsstatisticsNoneDetectPUAdetect-puaExcludePUAexclude-puaNetTool PWToolIncludePUAinclude-puaSpy Scanner RATScanPEscan-peScanELFscan-elfScanMailscan-mailScanPartialMessagesPhishingSignaturesPhishingScanURLsHeuristicAlertsheuristic-alertsHeuristicScanPrecedenceheuristic-scan-precedenceStructuredDataDetectiondetect-structuredStructuredMinCreditCardCountstructured-cc-countStructuredMinSSNCountstructured-ssn-countStructuredSSNFormatNormalStructuredSSNFormatStrippedScanHTMLscan-htmlScanOLE2scan-ole2AlertBrokenExecutablesalert-brokenAlertBrokenMediaalert-broken-mediaAlertEncryptedalert-encryptedStructuredCCOnlystructured-cc-modeAlertEncryptedArchivealert-encrypted-archiveAlertEncryptedDocalert-encrypted-docAlertOLE2Macrosalert-macrosAlertPhishingSSLMismatchalert-phishing-sslAlertPhishingCloakalert-phishing-cloakAlertPartitionIntersectionalert-partition-intersectionScanPDFscan-pdfScanSWFscan-swfScanXMLDOCSscan-xmldocsScanHWP3scan-hwp3ScanOneNotescan-onenoteScanArchivescan-archiveScanImagescan-imageScanImageFuzzyHashscan-image-fuzzy-hashForceToDiskforce-to-diskMaxScanTimemax-scantime120000max-scansize400Mmax-recursion17max-filesMaxEmbeddedPEmax-embeddedpe40MMaxHTMLNormalizemax-htmlnormalizeMaxHTMLNoTagsmax-htmlnotags8MMaxScriptNormalizemax-scriptnormalize20MMaxZipTypeRcgmax-ziptypercg1MMaxPartitionsmax-partitions128MaxIconsPEmax-iconspe100MaxRecHWP3max-rechwp316PCREMatchLimitpcre-match-limit100000PCRERecMatchLimitpcre-recmatch-limit5000PCREMaxFileSizepcre-max-filesize/ /home/user/home /students/home/bofh /rootclamuser10000LDevACOnlydev-ac-onlyDevACDepthdev-ac-depthDevPerformancedev-performanceDevLiblogdev-liblogUpdateLogFile/var/log/freshclam.logDatabaseOwnerclamupdateCheckschecksDNSDatabaseInfocurrent.cvd.clamav.netDatabaseMirrordatabase.clamav.netPrivateMirrorMaxAttemptsScriptedUpdatesTestDatabasesCompressLocalDatabaseExtraDatabasedbname1 dbname2ExcludeDatabaseDatabaseCustomURLHTTPProxyServeryour-proxyHTTPProxyPortHTTP proxy's port8080HTTPProxyUsernameusernameHTTPProxyPasswordHTTPUserAgentNotifyClamddaemon-notifyOnUpdateExecuteon-update-executecommandOnErrorExecuteon-error-executeOnOutdatedExecuteon-outdated-executeLocalIPAddresslocal-addressaaa.bbb.ccc.dddConnectTimeoutReceiveTimeoutDisableCertChecknocertsSafeBrowsingTimeLimittimelimitDetectBrokenExecutablesdetect-brokenAlgorithmicDetectionalgorithmic-detectionblock-maxPhishingAlwaysBlockCloakOLE2BlockMacrosblock-macrosArchiveBlockEncryptedblock-encryptedMailMaxRecursionArchiveMaxScanSizeArchiveMaxRecursionArchiveMaxFilesArchiveMaxCompressionRatioArchiveBlockMaxArchiveLimitMemoryUsageMailFollowURLsmail-follow-urlsAllowSupplementaryGroupsScanOnAccessClamdSockettcp:scanner.mydomain:7357MilterSocketMilterSocketGroupMilterSocketModeLocalNetOnCleanAcceptOnInfectedQuarantineOnFail^(Accept|Reject|Defer)$DeferRejectMsgMTA specificAddHeader^(No|Replace|Yes|Add)$ReplaceReportHostnamemy.mail.server.nameVirusActionChroot/newrootAllowList/etc/allowed_addressesWhitelistSkipAuthenticatedLogInfectedBasicSupportMultipleRecipientsCONTSCANMULTISCANINSTREAMFILDESALLMATCHSCANERROR: optaddarg: Unregistered option %s ERROR: optaddarg: strdup() failed ERROR: optaddarg: malloc() failed Clamonacc: onas_clamonacc_exit(), signal %d Clamonacc: clamonacc has experienced a fatal error, if you continue to see this error, please run clamonacc with --verbose and report the issue and crash report to the developers Clamonacc: attempting to stop ddd thread ... Clamonacc: attempting to stop event consumer thread ... ERROR: Failed to open log file %s: %s ERROR: Failed to convert the open log file descriptor for %s to a FILE* handle: %s WARNING: File locking not supported (NFS?)ERROR: Failed to lock the log file %s: %s jobqueue_pull: Thread %ld pulled last job from queue. jobqueue_pull: Thread %ld pulled a job from queue. thread_do(): cannot handle SIGUSR1ClamClient: invalid (NULL) args passed to onas_curl_init ClamClient: could not setup curl with local unix socket, %s ClamClient: could not setup curl with local address, %s ClamClient: could not setup curl with tcp port, %s ClamClient: could not setup curl with tcp address, %s ClamClient: could not setup curl to not use signals, %s ClamClient: could not setup curl with connect timeout, %s ClamClient: could not setup curl to connect only, %s ClamClient: could not setup curl to send HEAD request, %s ClamClient: could not setup curl to not send header, %s ClamCom: could not get curl active socket info %s ClamCom: TIMEOUT while waiting on socket (send) ClamClient: Clamonacc does not support binding to INADDR_ANY, please specify an address with TCPAddr in your clamd.conf config file ClamClient: could not init curl, %s ClamClient: Initial connection failed, %s. Will try again... ClamClient: Could not connect to clamd, %s ClamClient: could not ping clamd, %s ClamClient: could not check to see if daemon was remote... PINGing again... ClamClient: could not setup curl with tcp address and port, %s interval_str would go past end of buffer attempt_str would go past end of buffer ClamClient: could not connect to clamd, %s Will try again in %lu seconds Wait timeout exceeded; Could not connect to clamd PING timeout exceeded; No response from clamd ClamCom: TIMEOUT while waiting on socket (recv) Communication error, clamd received unknown command Command rejected by clamd (wrong clamd version?) ClamClient: could not check to see if daemon was remote ClamClient: clamd did not respond with version information ClamSock: Could not connect to clamd on LocalSocket Filename cannot be NULL for MULTISCAN or CONTSCAN. Cannot allocate a command buffer: %s onas_send_stream: Invalid args, a filename or file descriptor must be provided. %s: Failed to open file. ERROR ClamProto: error when getting socket descriptor ClamProto: error when fdpassing clamd replied "UNKNOWN COMMAND". Command was %s No such file or directory. ERRORCan't open file or directory ERROR lstat() failed: Permission denied. ERROR%s: stat() failed with %s, clamd may not be responding onas_send_stream: Invalid args, bad file descriptor. ClamInotif: could not add element to hash table for %s ClamInotif: watch descriptor issue when adding watch for %s ClamInotif: error when marking %s to be watched by fanotify ClamInotif: out of memory when adding child for %s ClamInotif: issue when adding watch for %s ClamHash: could not open '%s' ClamHash: node's directory name is NULL! ClamScanQueue: initializing event queue consumer ... (%d) threads in thread pool thpool_init(): Could not allocate memory for thread pool thpool_init(): Could not allocate memory for job queue thpool_init(): Could not allocate memory for threads thread_init(): Could not allocate memory for thread ClamScanQueue: waiting to consume events ... thpool_add_work(): Could not allocate memory for new job ClamScanQueue: onas_scan_queue_exit() ClamScThread: context and scan event struct are null ... ClamFanotif: starting fanotify event loop with process id (%d) ... ClamFanotif: internal error (failed to read data) ... %s ClamFanotif: file too large for fanotify ... recovering and continuing scans... ClamFanotif: check your SELinux audit logs and consider adding an exception ... recovering and continuing scans... ClamFanotif: waiting for consumer thread to catch up then retrying ... ClamFanotif: Mismatch of fanotify metadata version. ClamFanotif: internal error (readlink() failed), %d, %s ClamWorker: fd already closed ... recovering ... ClamMisc: internal error (failed to exclude event) ... %s ClamMisc: system i/o failed while retrieving username information (excluding for safety) ClamMisc: caught signal while retrieving username information from system (excluding for safety) ClamMisc: waiting for consumer thread to catch up then retrying ... ClamMisc: fds have been exhausted ... attempting to force the consumer thread to catch up ... (excluding for safety) ClamMisc: unknown error occurred (excluding for safety) ClamMisc: permission denied to stat /proc/%d to exclude UIDs... perhaps SELinux denial? ClamMisc: $/proc/%d vanished before UIDs could be excluded; scanning anyway ClamFanotif: %s skipped (excluded UID) ClamFanotif: could not allocate memory for event data struct ClamFanotif: could not allocate memory for event data struct fmd ClamFanotif: could not allocate memory for event data struct pathname ClamFanotif: attempting to feed consumer queue ClamFanotif: error occurred while feeding consumer queue ... ClamFanotif: ... recovering ... ClamFanotif: error occurred while excluding event ClamFanotif: error occurred while closing metadata fd, %d ClamFanotif: fd already closed ... recovering ... ClamInotif: could not allocate memory for event data struct ClamInotif: attempting to feed consumer queue ClamInotif: error occurred while feeding consumer queue extra event ... continuing ... ClamClient: could not init curl for scanning, %s ClamClient: Connection to clamd failed, %s. ClamClient: Connection to clamd re-established. ClamClient: connection could not be established ... return code %d ClamWorker: scan failed (NULL arg given) ClamMisc: Scan issue; Daemon could not find or access: %s) ClamMisc: Internal issue; Failed to parse reply from daemon: %s) ClamMisc: Unexpected issue; Daemon failed to scan: %s ClamMisc: reattempting scan ... ClamWorker: scan failed with error code %d ClamWorker: internal error (can't write to fanotify) ClamWorker: permission event has already been written ... recovering ... ClamWorker: internal error (can't close fanotify meta fd, %d) ClamWorker: handling inotify event ... ClamWorker: performing (extra) scanning on directory '%s' ClamWorker: size limit surpassed while doing extra scanning ... skipping object ... ClamWorker: performing (extra) scanning on file '%s' ClamWorker: performing scanning on file '%s' ClamWorker: invalid worker arguments for scanning thread %s: option requires an argument -- %c %s: option `--%s' doesn't allow an argument %s: option `--%s' requires an argument traverse_to: Invalid arguments! traverse_to: Failed to get copy of directory path to be tokenized! traverse_to: tokenize of target directory returned 0 tokens! traverse_to: Failed to open file descriptor for '/' directory. traverse_to: Handle opened for '%s' directory. traverse_unlink: Invalid arguments! traverse_unlink: Failed to open file descriptor for target directory! traverse_unlink: Failed to get basename of target path: %s Error: %d traverse_unlink: Failed to unlink: %s Error:%s traverse_rename: Invalid arguments! traverse_rename: Failed to open file descriptor for source directory! traverse_rename: Failed to get basename of source path:%s Error: %d traverse_rename: Failed to rename: %s to: %s Error:%s Can't unlink '%s' after copy: %s ClamMisc: could not open path list file `%s', %s ClamMisc: when parsing path list ... could not stat '%s' ... %s ... skipping ClamMisc: when parsing path list ... '%s' is not a directory ... skipping ClamMisc: when parsing path list ... ignoring path '%s' while DDD is enabled ... skipping ClamMisc: use the OnAccessMountPath configuration option to watch '%s' ClamInotif: starting inotify event loop ... ClamInotif: could not init inotify /proc/sys/fs/inotify/max_user_watchesClamInotif: dynamically determining directory hierarchy... ClamInotif: failed to initialize DDD system ClamInotif: Please specify at least one path with OnAccessIncludePath ClamInotif: Not watching path '%s' while DDD is enabled ClamInotif: Please use the OnAccessMountPath option to watch '%s' ClamInotif: Not watching path '%s' ClamInotif: ClamOnAcc should not watch the directory clamd is using for temp files ClamInotif: Consider setting TemporaryDirectory in clamd.conf to a different directory. ClamInotif: can't include '%s' ClamInotif: watching '%s' (and all sub-directories) ClamInotif: could not parse include list (%s) ClamInotif: can't exclude '%s' ClamInotif: excluding '%s' (and all sub-directories) ClamInotif: could not parse exclude list (%s) ClamInotif: NVM, didn't actually need to exclude '%s' ClamInotif: could not watch path '%s', %s ClamInotif: could not watch path '%s', %s ClamInotif: when using the OnAccessPrevention option, please ensure your kernel was compiled with CONFIG_FANOTIFY_ACCESS_PERMISSIONS set to Y ClamInotif: you likely do not have enough inotify watchpoints available ... run the follow command to increase available watchpoints and try again ... $ echo fs.inotify.max_user_watches=524288 | sudo tee -a /etc/sysctl.conf && sudo sysctl -p ClamInotif: extra scanning on inotify events enabled ClamInotif: watch descriptor (wd:%d) not found in lookup table ... skipping ClamInotif: inotify event IN_UNMOUNT (mask:%d) occurred, clamonacc should be restarted because a filesystem monitored by inotify was umounted. ClamInotif: inotify event IN_Q_OVERFLOW (mask:%d) occurred, clamonacc should be restarted because inotify events were dropped by the kernel and the internal clamonacc inotify data structures are likely invalid. ClamInotif: could not allocate space for child path ... aborting ClamInotif: DELETE - removing %s from %s with wd:%d ClamInotif: MOVED_FROM - removing %s from %s with wd:%d ClamInotif: CREATE - adding %s to %s with wd:%d ClamInotif: MOVED_TO - adding %s to %s with wd:%d ERROR: optparse: Can't register new option (not enough memory) ERROR: optparse: longopts[] is too small ERROR: optparse: shortopts[] is too small ERROR: optparse: (short|long)opts[] is too small ERROR: Please edit the example config file %s ERROR: Missing argument for option at %s:%d ERROR: Missing closing parenthesis in option %s at %s:%d ERROR: Empty argument for option %s at %s:%d ERROR: Incomplete option passed (missing argument) ERROR: optparse: No corresponding long name for option '-%c' ERROR: Parse error at %s:%d: Unknown option %s WARNING: Ignoring unsupported option %s at %s:%d WARNING: Ignoring unsupported option --%s (-%c) WARNING: Ignoring unsupported option --%s WARNING: Ignoring deprecated option %s at %s:%d WARNING: Ignoring deprecated option --%s (-%c) WARNING: Ignoring deprecated option --%s ERROR: optparse: Can't compile regular expression %s for option %s ERROR: Incorrect argument format for option %s ERROR: Incorrect argument format for option --%s (-%c) ERROR: Incorrect argument format for option --%s ERROR: Option --%s (-%c) requires a non-empty string argument ERROR: Option --%s requires a non-empty string argument ERROR: Can't parse numerical argument for option %s ERROR: Can't parse numerical argument for option --%s (-%c) ERROR: Can't parse numerical argument for option --%s WARNING: Numerical value for option %s too high, resetting to %lld WARNING: Numerical value for option --%s (-%c) too high, resetting to %lld ERROR: Can't register argument for option %s ERROR: Can't register argument for option --%s ERROR: optparse: calloc failed ERROR: optparse: strdup failed Clamonacc: can't initialize context Clamonacc: can't parse command line options -------------------------------------- ClamClient: problem with internal logger Clamonacc: can't parse clamd configuration file %s ClamAV: On Access Scanning Application and Client %s By The ClamAV Team: https://www.clamav.net/about.html#credits (C) 2024 Cisco Systems, Inc. clamonacc [options] [file/directory/-] --help -h Show this help --version -V Print version number and exit --verbose -v Be verbose --log=FILE -l FILE Save scanning output to FILE --foreground -F Output to foreground and do not daemonize --watch-list=FILE -W FILE Watch directories from FILE --exclude-list=FILE -e FILE Exclude directories from FILE --ping -p A[:I] Ping clamd up to [A] times at optional interval [I] until it responds. --wait -w Wait up to 30 seconds for clamd to start. Optionally use alongside --ping to set attempts [A] and interval [I] to check clamd. --remove Remove infected files. Be careful! --move=DIRECTORY Move infected files into DIRECTORY --copy=DIRECTORY Copy infected files into DIRECTORY --config-file=FILE -c FILE Read configuration from FILE --allmatch -z Continue scanning within file after finding a match. --fdpass Pass filedescriptor to clamd (useful if clamd is running as a different user) --stream Force streaming files to clamd (for debugging and unit testing) Clamonacc: fanotify_init failed: %s Clamonacc: clamonacc must have elevated permissions ... exiting ... Clamonacc: daemon is local, but a connection could not be established Clamonacc: at least one of OnAccessExcludeUID, OnAccessExcludeUname, or OnAccessExcludeRootUID must be specified ... it is recommended you exclude the clamd instance UID or uname to prevent infinite event scanning loops Clamonacc: could not daemonize action_setup: Failed to get realpath of %s '%s' doesn't exist or is not a directory ClamClient: client setup to scan via fd passing ClamClient: client setup to scan via streaming ClamClient: client setup to scan in multiscan mode ClamClient: client setup to scan in all-match mode ClamClient: client setup for continuous scanning Clamonacc: can't set up fd passing, configuration issue -- please ensure your system is capable of fdpassing before specifying the fdpass option Clamonacc: not setting up client Clamonacc: can't setup client ClamScanQueue: Unable to start event consumer queue thread ... Clamonacc: can't setup event consumer queue ClamFanotif: unable to start clamonacc. (bad context) ClamFanotif: kernel-level blocking feature enabled ... preventing malicious files access attempts ClamFanotif: kernel-level blocking feature disabled ... ClamFanotif: feature not available when watching mounts ... ClamFanotif: can't include mountpoint '%s' ClamFanotif: recursively watching the mount point '%s' ClamFanotif: Not watching path '%s' ClamFanotif: ClamOnAcc should not watch the directory clamd is using for temp files ClamFanotif: Consider setting TemporaryDirectory in clamd.conf to a different directory. ClamFanotif: can't include path '%s' ClamFanotif: watching directory '%s' (non-recursively) ClamFanotif: please specify at least one path with OnAccessIncludePath ClamFanotif: max file size limited to %lu bytes ClamFanotif: file size limit disabled Clamonacc: can't setup fanotify ClamInotif: Unable to start dynamic directory determination ... Clamonacc: beginning event loops Clamonacc: unable to start clamonacc. (bad context) Dump authenticode certificate chain.Perform HTML, script, and text normalizationAlways generate MDB entries for PE sectionsMaximum number of mismatched signatures when building a CVD. Zero disables this limit.Feature level to put in the CVDVersion number of the CVD to buildCreate a hybrid (standard and bytecode) database fileForce using the interpreter instead of the JITTrust loaded bytecode (default yes)Load and print bytecode information without executingPrint IR of bytecode signatureInput file to run the bytecode nDon't show source line during tracingNumber of entries the cache can store.Name of the analyzer as seen in prewikkaSave all reports to a log file.By default the log file is locked for writing and only a single daemon process can write to it. This option disables the lock.Maximum size of the log file. Value of 0 disables the limit.Log all clean files. Useful in debugging but drastically increases the log size.Use the system logger (can work together with LogFile).Type of syslog messages. Please refer to 'man syslog' for the facility names.Rotate log file. Requires LogFileMaxSize option set prior to this option.Log additional information about the infected file, such as its size and hash, together with the virus name.Save the process ID to a file.This option allows you to change the default temporary directory.This option allows you to change the default database directory. If you enable it, please make sure it points to the same directory in both clamd and freshclam.Only load the official signatures published by the ClamAV project.Return with a nonzero error code if the virus database is older than the specified number of days.By default, yara rules will be loaded. This option allows you to exclude yara rules when scanning and also to scan only using yara rules. Valid options are yes|no|onlyPath to a local socket file the daemon will listen on.Sets the group ownership on the unix socket.Sets the permissions on the unix socket to the specified mode.Remove a stale socket after unclean shutdownA TCP port number the daemon will listen on.By default clamd binds to INADDR_ANY. This option allows you to restrict the TCP address and provide some degree of protection from the outside world.Maximum length the queue of pending connections may grow to.Close the STREAM session when the data size limit is exceeded. The value should match your MTA's limit for the maximum attachment size.The STREAM command uses an FTP-like protocol. This option sets the lower boundary for the port range.This option sets the upper boundary for the port range.Maximum number of threads running at the same time.This option specifies the time (in seconds) after which clamd should timeout if a client doesn't provide any data.This option specifies the time (in seconds) after which clamd should timeout if a client doesn't provide any initial command after connecting.This option specifies how long to wait (in milliseconds) if the send buffer is full. Keep this value low to prevent clamd hanging.Waiting for data from clamd will timeout after this time (seconds).Maximum number of queued items (including those being processed by MaxThreads threads). It is recommended to have this value at least twice MaxThreads if possible. WARNING: you shouldn't increase this too much to avoid running out of file descriptors, the following condition should hold: MaxThreads*MaxRecursion + MaxQueue - MaxThreads + 6 < RLIMIT_NOFILE (usual max for RLIMIT_NOFILE is 1024) This option specifies how long (in seconds) the process should wait for a new job.Don't scan files/directories whose names match the provided regular expression. This option can be specified multiple times.Maximum depth the directories are scanned at.Follow symlinks to regular files.Scan files and directories on other filesystems.This option specifies the time intervals (in seconds) in which clamd should perform a database check.Enable non-blocking (multi-threaded/concurrent) database reloads. This feature will temporarily load a second scanning engine while scanning continues using the first engine. Once loaded, the new engine takes over. The old engine is removed as soon as all scans using the old engine have completed. This feature requires more RAM, so this option is provided in case users are willing to block scans during reload in exchange for lower RAM requirements.This option allows you to disable clamd's caching feature.Execute a command when virus is found. Use the following environment variables to identify the file and virus names: - $CLAM_VIRUSEVENT_FILENAME - $CLAM_VIRUSEVENT_VIRUSNAME In the command string, '%v' will also be replaced with the virus name. Note: The '%f' filename format character has been disabled and will no longer be replaced with the file name, due to command injection security concerns. Use the 'CLAM_VIRUSEVENT_FILENAME' environment variable instead. For the same reason, you should NOT use the environment variables in the command directly, but should use it carefully from your executed script.Stop the daemon when libclamav reports an out of memory condition.Permit use of the ALLMATCHSCAN command.Enable debug messages in libclamav.Don't remove temporary files (for debugging purposes).Record metadata about the file being scanned. Scan metadata is useful for file analysis purposes and for debugging scan behavior. The JSON metadata will be printed after the scan is complete if Debug is enabled. A metadata.json file will be written to the scan temp directory if LeaveTemporaryFiles is enabled.Run the daemon as a specified user (the process must be started by root).With this option enabled ClamAV will load bytecode from the database. It is highly recommended you keep this option on, otherwise you'll miss detections for many new viruses.Set bytecode security level. Possible values: TrustSigned - trust bytecode loaded from signed .c[lv]d files, insert runtime safety checks for bytecode loaded from other sources Paranoid - don't trust any bytecode, insert runtime checks for all Recommended: TrustSigned, because bytecode in .cvd files already has these checks.Set bytecode timeout in milliseconds.Allow loading bytecode from outside digitally signed .c[lv]d files.^(Auto|ForceJIT|ForceInterpreter|Test)$Set bytecode execution mode. Possible values: Auto - automatically choose JIT if possible, fallback to interpreter ForceJIT - always choose JIT, fail if not possible ForceInterpreter - always choose interpreter Test - run with both JIT and interpreter and compare results. Make all failures fatal.^(none|None|bytecode|Bytecode|pcre|PCRE)$Collect and print execution statistics. Possible values: Bytecode - reports bytecode statistics PCRE - reports PCRE execution statistics None - reports no statisticsDetect Potentially Unwanted Applications.Exclude a specific PUA category. This directive can be used multiple times. See https://docs.clamav.net/faq/faq-pua.html for the complete list of PUA categories.Only include a specific PUA category. This directive can be used multiple times.PE stands for Portable Executable - it's an executable file format used in all 32- and 64-bit versions of Windows operating systems. This option allows ClamAV to perform a deeper analysis of executable files and it's also required for decompression of popular executable packers such as UPX or FSG. If you turn off this option, the original files will still be scanned, but without additional processing.Executable and Linking Format is a standard format for UN*X executables. This option allows you to control the scanning of ELF files. If you turn off this option, the original files will still be scanned, but without additional processing.Enable the built in email scanner. If you turn off this option, the original files will still be scanned, but without parsing individual messages/attachments.Scan RFC1341 messages split over many emails. You will need to periodically clean up $TemporaryDirectory/clamav-partial directory. WARNING: This option may open your system to a DoS attack. Please don't use this feature on highly loaded servers.With this option enabled ClamAV will try to detect phishing attempts by using signatures.Scan URLs found in mails for phishing attempts using heuristics.In some cases (eg. complex malware, exploits in graphic files, and others), ClamAV uses special algorithms to provide accurate detection. This option controls the algorithmic detection.Allow heuristic match to take precedence. When enabled, if a heuristic scan (such as phishingScan) detects a possible virus/phish it will stop scan immediately. Recommended, saves CPU scan-time. When disabled, virus/phish detected by heuristic scans will be reported only at the end of a scan. If an archive contains both a heuristically detected virus/phish, and a real malware, the real malware will be reported. Keep this disabled if you intend to handle "Heuristics.*" viruses differently from "real" malware. If a non-heuristically-detected virus (signature-based) is found first, the scan is interrupted immediately, regardless of this config option.Enable the Data Loss Prevention module.This option sets the lowest number of Credit Card numbers found in a file to generate a detect.This option sets the lowest number of Social Security Numbers found in a file to generate a detect.With this option enabled the DLP module will search for valid SSNs formatted as xxx-yy-zzzz.With this option enabled the DLP module will search for valid SSNs formatted as xxxyyzzzzPerform HTML/JavaScript/ScriptEncoder normalisation and decryption. If you turn off this option, the original files will still be scanned, but without additional processing.This option enables scanning of OLE2 files, such as Microsoft Office documents and .msi files. If you turn off this option, the original files will still be scanned, but without additional processing.With this option enabled clamav will try to detect broken executables (PE, ELF, & Mach-O) and alert on them with a Broken.Executable heuristic signature.With this option enabled clamav will try to detect broken media files (JPEG, TIFF, PNG, GIF) and alert on them with a Broken.Media heuristic signature.Alert on encrypted archives and documents (encrypted .zip, .7zip, .rar, .pdf).With this option enabled the DLP module will search for valid Credit Card numbers only. Debit and Private Label cards will not be searched.Alert on encrypted archives (encrypted .zip, .7zip, .rar).Alert on encrypted documents (encrypted .pdf).With this option enabled OLE2 files with VBA macros, which were not detected by signatures will be marked as "Heuristics.OLE2.ContainsMacros".Alert on SSL mismatches in URLs, even if they're not in the database. This feature can lead to false positives.Alert on cloaked URLs, even if they're not in the database. This feature can lead to false positives.Alert on raw DMG image files containing partition intersections.This option enables scanning within PDF files. If you turn off this option, the original files will still be scanned, but without decoding and additional processing.This option enables scanning within SWF files. If you turn off this option, the original files will still be scanned, but without decoding and additional processing.This option enables scanning xml-based document files supported by libclamav. If you turn off this option, the original files will still be scanned, but without additional processing.This option enables scanning HWP3 files. If you turn off this option, the original files will still be scanned, but without additional processing.This option enables scanning OneNote files. If you turn off this option, the original files will still be scanned, but without additional processing.Scan within archives and compressed files. If you turn off this option, the original files will still be scanned, but without unpacking and additional processing.This option enables scanning of image (graphics). If you turn off this option, the original files will still be scanned, but without additional processing.This option enables detection by calculating a fuzzy hash of image (graphics) files Signatures using image fuzzy hashes typically match files and documents by identifying images embedded or attached to those files. If you turn off this option, then some files may no longer be detected.This option causes memory or nested map scans to dump the content to disk. If you turn on this option, more data is written to disk and is available when the leave-temps option is enabled at the cost of more disk writes.This option sets the maximum amount of time a scan may take to complete. The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result allow scanning of certain files to lock up the scanning process/threads resulting in a Denial of Service. The value is in milliseconds.This option sets the maximum amount of data to be scanned for each input file. Archives and other containers are recursively extracted and scanned up to this value. The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result in severe damage.Files/messages larger than this limit won't be scanned. Affects the input file itself as well as files contained inside it (when the input file is an archive, a document or some other kind of container). The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result in severe damage to the system.Nested archives are scanned recursively, e.g. if a Zip archive contains a RAR file, all files within it will also be scanned. This option specifies how deeply the process should be continued. The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result in severe damage to the system.Number of files to be scanned within an archive, a document, or any other container file. The value of 0 disables the limit. WARNING: disabling this limit or setting it too high may result in severe damage to the system.This option sets the maximum size of a file to check for embedded PE. Files larger than this value will skip the additional analysis step. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum size of a HTML file to normalize. HTML files larger than this value will not be normalized or scanned. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum size of a normalized HTML file to scan. HTML files larger than this value after normalization will not be scanned. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum size of a script file to normalize. Script content larger than this value will not be normalized or scanned. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum size of a ZIP file to reanalyze type recognition. ZIP files larger than this value will skip the step to potentially reanalyze as PE. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum number of partitions of a raw disk image to be scanned. Raw disk images with more partitions than this value will have up to the value number partitions scanned. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum number of icons within a PE to be scanned. PE files with more icons than this value will have up to the value number icons scanned. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum recursive calls to HWP3 parsing function. HWP3 files using more than this limit will be terminated and alert the user. Scans will be unable to scan any HWP3 attachments if the recursive limit is reached. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance.This option sets the maximum calls to the PCRE match function during an instance of regex matching. Instances using more than this limit will be terminated and alert the user but the scan will continue. For more information on match_limit, see the PCRE documentation. Negative values are not allowed. WARNING: setting this limit too high may severely impact performance.This option sets the maximum recursive calls to the PCRE match function during an instance of regex matching. Instances using more than this limit will be terminated and alert the user but the scan will continue. For more information on match_limit_recursion, see the PCRE documentation. Negative values are not allowed and values > PCREMatchLimit are superfluous. WARNING: setting this limit too high may severely impact performance.This option sets the maximum filesize for which PCRE subsigs will be executed. Files exceeding this limit will not have PCRE subsigs executed unless a subsig is encompassed to a smaller buffer. Negative values are not allowed. Setting this value to zero disables the limit. WARNING: setting this limit too high or disabling it may severely impact performance.This option specifies a directory or mount point which should be scanned on access. The mount point specified, or the mount point containing the specified directory will be watched, but only notifications will occur. If any directories are specified, this option will preempt the DDD system. It can also be used multiple times.This option specifies a directory (including all files and directories inside it), which should be scanned on access. This option can be used multiple times.This option allows excluding directories from on-access scanning. It can be used multiple times. Only works with DDD system.Use this option to exclude the root UID (0) and allow any processes run under root to access all watched files without triggering scans.With this option you can exclude specific UIDs. Processes with these UIDs will be able to access all files. This option can be used multiple times (one per line). Using a value of 0 on any line will disable this option entirely. To exclude the root UID please enable the OnAccessExcludeRootUID option.This option allows exclusions via user names when using the on-access scanning client. It can be used multiple times.Files larger than this value will not be scanned in on access.This option toggles the dynamic directory determination system for on-access scanning (Linux only).This option changes fanotify behavior to prevent access attempts on malicious files instead of simply notifying the user (On Access scan only).Enables extra scanning and notification after catching certain inotify events. Only works with the DDD system enabled.Max amount of time (in milliseconds) that the OnAccess client should spend for every connect, send, and receive attempt when communicating with clamd via curl (5s default)Max number of scanning threads to allocate to the OnAccess thread pool at startup--these threads are the ones responsible for creating a connection with the daemon and kicking off scanning after an event has been processed. To prevent clamonacc from consuming all clamd's resources keep this lower than clamd's max threads. Default is 5Number of times the OnAccess client will retry a failed scan due to connection problems (or other issues). Defaults to no retries.When using prevention, if this option is turned on, any errors that occur during scanning will result in the event attempt being denied. This could potentially lead to unwanted system behaviour with certain configurations, so the client defaults to off and allowing access events in case of error.When started by root freshclam will drop privileges and switch to the user defined in this option.This option defined how many times daily freshclam should check for a database update.Use DNS to verify the virus database version. FreshClam uses DNS TXT records to verify the versions of the database and software itself. With this directive you can change the database verification domain. WARNING: Please don't change it unless you're configuring freshclam to use your own database verification domain.DatabaseMirror specifies to which mirror(s) freshclam should connect. You should have at least one entry: database.clamav.net.This option allows you to easily point freshclam to private mirrors. If PrivateMirror is set, freshclam does not attempt to use DNS to determine whether its databases are out-of-date, instead it will use the If-Modified-Since request or directly check the headers of the remote database files. For each database, freshclam first attempts to download the CLD file. If that fails, it tries to download the CVD file. This option overrides DatabaseMirror, DNSDatabaseInfo and Scripted Updates. It can be used multiple times to provide fall-back mirrors.mirror1.mynetwork.com mirror2.mynetwork.comThis option defines how many attempts freshclam should make before giving up.With this option you can control scripted updates. It's highly recommended to keep them enabled.With this option enabled, freshclam will attempt to load new databases into memory to make sure they are properly handled by libclamav before replacing the old ones. Tip: This feature uses a lot of RAM. If your system has limited RAM and you are actively running ClamD or ClamScan during the update, then you may need to set `TestDatabases no`.By default freshclam will keep the local databases (.cld) uncompressed to make their handling faster. With this option you can enable the compression. The change will take effect with the next database update.Include an optional signature databases (opt-in). This option can be used multiple times.Exclude a standard signature database (opt-out). This option can be used multiple times.With this option you can provide custom sources (http:// or file://) for database files. This option can be used multiple times.http://myserver.com/mysigs.ndb file:///mnt/nfs/local.hdbIf you're behind a proxy, please enter its address here.A user name for the HTTP proxy authentication.A password for the HTTP proxy authentication.If your servers are behind a firewall/proxy which does a User-Agent filtering you can use this option to force the use of a different User-Agent header.Send the RELOAD command to clamd after a successful update.Run a command after a successful database update. Use EXIT_1 to return 1 after successful database update.Run a command when a database update error occurs.Run a command when freshclam reports an outdated version. In the command string %v will be replaced with the new version number.With this option you can provide a client address for the database downloading. Useful for multi-homed systems.Timeout in seconds when connecting to database server.Timeout in seconds when reading from database server. 0 means no timeout.This option enables downloading of bytecode.cvd, which includes additional detection mechanisms and improvements to the ClamAV engine.Disable authenticode certificate chain verification in PE files.Deprecated option to download signatures derived from the Google Safe Browsing API. See https://blog.clamav.net/2020/06/the-future-of-clamav-safebrowsing.html for more details.Deprecated option to set the max-scantime. The value is in milliseconds.Deprecated option to alert on broken PE and ELF executable files.Deprecated option to enable heuristic alerts (e.g. "Heuristics.")PhishingAlwaysBlockSSLMismatchDeprecated option to alert on SSL mismatches in URLs, even if they're not in the database. This feature can lead to false positives.Deprecated option to alert on cloaked URLs, even if they're not in the database. This feature can lead to false positives.Deprecated option to alert on raw DMG image files containing partition intersections.Deprecated option to alert on encrypted archives and documents (encrypted .zip, .7zip, .rar, .pdf).Initialize a supplementary group access (the process must be started by root).Define the clamd socket to connect to for scanning. This option is mandatory! Syntax: ClamdSocket unix:path ClamdSocket tcp:host:port The first syntax specifies a local unix socket (needs an absolute path) e.g.: ClamdSocket unix:/run/clamav/clamd.sock The second syntax specifies a tcp local or remote tcp socket: the host can be a hostname or an ip address; the ":port" field is only required for IPv6 addresses, otherwise it defaults to 3310 ClamdSocket tcp:192.168.0.1 This option can be repeated several times with different sockets or even with the same socket: clamd servers will be selected in a round-robin fashion.Define the interface through which we communicate with sendmail. This option is mandatory! Possible formats are: [[unix|local]:]/path/to/file - to specify a unix domain socket; inet:port@[hostname|ip-address] - to specify an ipv4 socket; inet6:port@[hostname|ip-address] - to specify an ipv6 socket./tmp/clamav-milter.sock inet:7357Define the group ownership for the (unix) milter socket.Sets the permissions on the (unix) milter socket to the specified mode.Messages originating from these hosts/networks will not be scanned This option takes a host(name)/mask pair in CIRD notation and can be repeated several times. If "/mask" is omitted, a host is assumed. To specify a locally originated, non-smtp, email use the keyword "local".local 192.168.0.0/24 1111:2222:3333::/48^(Accept|Reject|Defer|Blackhole|Quarantine)$Action to be performed on clean messages (mostly useful for testing). The following actions are available: Accept: the message is accepted for delivery Reject: immediately refuse delivery (a 5xx error is returned to the peer) Defer: return a temporary failure message (4xx) to the peer Blackhole: like Accept but the message is sent to oblivion Quarantine: like Accept but message is quarantined instead of being deliveredAction to be performed on error conditions (this includes failure to allocate data structures, no scanners available, network timeouts, unknown scanner replies and the like. The following actions are available: Accept: the message is accepted for delivery; Reject: immediately refuse delivery (a 5xx error is returned to the peer); Defer: return a temporary failure message (4xx) to the peer.This option allows you to set a specific rejection reason for infected messages and it's therefore only useful together with "OnInfected Reject" The string "%v", if present, will be replaced with the virus name.If this option is set to "Replace" (or "Yes"), an "X-Virus-Scanned" and an "X-Virus-Status" headers will be attached to each processed message, possibly replacing existing headers. If it is set to Add, the X-Virus headers are added possibly on top of the existing ones. Note that while "Replace" can potentially break DKIM signatures, "Add" may confuse procmail and similar filters.When AddHeader is in use, this option allows you to set the reported hostname. This may be desirable in order to avoid leaking internal names. If unset the real machine name is used.Execute a command when an infected message is processed. The following parameters are passed to the invoked program in this order: virus name, queue id, sender, destination, subject, message id, message date. Note #1: this requires MTA macroes to be available (see LogInfected below) Note #2: the process is invoked in the context of clamav-milter Note #3: clamav-milter will wait for the process to exit. Be quick or fork to avoid unnecessary delays in email delivery/usr/local/bin/my_infected_message_handlerChroot to the specified directory. Chrooting is performed just after reading the config file and before dropping privileges.This option specifies a file which contains a list of basic POSIX regular expressions. Addresses (sent to or from - see below) matching these regexes will not be scanned. Optionally each line can start with the string "From:" or "To:" (note: no whitespace after the colon) indicating if it is, respectively, the sender or recipient that is to be allowed. If the field is missing, "To:" is assumed. Lines starting with #, : or ! are ignored.Messages from authenticated SMTP users matching this extended POSIX regular expression (egrep-like) will not be scanned. As an alternative, a file containing a plain (not regex) list of names (one per line) can be specified using the prefix "file:". e.g. SkipAuthenticated file:/etc/good_guys Note: this is the AUTH login name!SkipAuthenticated ^(tom|dick|henry)$This option allows you to tune what is logged when a message is infected. Possible values are Off (the default - nothing is logged), Basic (minimal info logged), Full (verbose info logged) Note: For this to work properly in sendmail, make sure the msg_id, mail_addr, rcpt_addr and i macroes are available in eom. In other words add a line like: Milter.macros.eom={msg_id}, {mail_addr}, {rcpt_addr}, i to your .cf file. Alternatively use the macro: define(`confMILTER_MACROS_EOM', `{msg_id}, {mail_addr}, {rcpt_addr}, i') Postfix should be working fine with the default settings.This option allows you to tune what is logged when no threat is found in a scanned message. See LogInfected for possible values and caveats. Useful in debugging but drastically increases the log size.This option affects the behaviour of LogInfected, LogClean and VirusAction when a message with multiple recipients is scanned: If SupportMultipleRecipients is off (the default) then one single log entry is generated for the message and, in case the message is determined to be malicious, the command indicated by VirusAction is executed just once. In both cases only the last recipient is reported. If SupportMultipleRecipients is on: then one line is logged for each recipient and the command indicated by VirusAction is also executed once for each recipient. Note: although it's probably a good idea to enable this option, the default value is currently set to off for legacy reasons.\?;<g XoHv x\xx`,ȋHH(؏P(hȒH0XHPhh(0hX8ت8ȱ | @ x x d (  p   x x x,|48TXzRx &D$4eFJ w?:*3$"\m(t YGDA ~DBlTKEB B(A0A8D@ 8D0A(B BBBE D8A0A(B BBBA,KDA ABA@d'AaH\xLHB B(K0A8I 8A0A(B BBBA @LBAG  ABJ A FBG AFB$XBDD GDB$@XBDD GDB$<x.AG AA dA\\,|BIA s ABA d BBB B(A0D8DpxMVxApxNVxApR 8A0A(B BBBF ,sBID U DBA `DHBBB A(D0D@HMP\HA@u 0A(A BBBK b 0A(A BBBA LBED D(D0g (A ABBH  (C ABBA l5AoLBBB E(A0D8G 8A0A(B BBBH dEL|BBB E(A0D8G _ 8D0A(B BBBE ,hBBA ` BBG DFPN A(A0J 0C(A BBBA $DmAAG ]AALlvBBB A(D0 (D BBBI i (D BBBE @8OBEB D(I0GP 0A(A BBBA HDBBB E(A0A8Gpi 8A0A(B BBBA LL0BNB B(A0D8D} 8D0A(B BBBA HxFBE E(A0D8D`~ 8D0A(B BBBA @PBBA A(G L)b (D ABBA `,FBE D(A0 (D BBBH Z (A EBBD I (D RBBA XBBB B(A0A8G L@L`Lk 8A0A(B BBBB dBBE H(G0A8DpxIYxApJ 8A0A(B BBBD |xJYxApHTDGH D(A0H (B BBBH F(B BBBHBBE B(G0A8Dp 8D0A(B BBBG hZBBE B(D0A8DIZAr IE * 8A0A(B BBBD zPLRxA| 4$lFBB B(I0A8G \Tk Ii N < DAAD z AAF d AAB DOAP0  BBB B(A0A8G L3 8D0A(B BBBE @ BII F0  AABG \  OABE \ \BEH B(A0A8GMFFWh 8D0A(B BBBK `( BBB B(A0A8Dp 8A0A(B BBBJ X 8O0A(B BBBH ( 8BAG ABJ 8 eFBA A(G (C ABBD H BEB B(A0D8M` 8D0A(B BBBD L@ D$BBH E(A0D8Md 8D0A(B BBBD T $BBB B(A0A8H Q D  8D0A(B BBBH 0 SBBA D@  DBBD ( FDD0 ABD H YKk J M@h FBB A(A0DP 0A(A BBBI L HBBJ B(A0A8J 8D0A(B BBBE pxFBB B(A0A8G L$ 8C0A(B BBBA $N$Z$A$~ $K$I h &$PBBB B(A0A8G L0 8A0A(B BBBA g 0LgFBB B(I0H8GX 8A0A(B BBBA   [ "" jth0vtttcJvtttavtttcuvttUxV0vttv0v+ttv0v)ttyv0v:ttv0vtv0v:ttv0v(ttv0vttv0vttv0v:ttvd0vttv0vttv0vttvttw0vttum0vttu0vttu0vttuz0vtt0vt wdwtt#wr0vtt-w0v8t5wIwttRwIwttgw0vttlw0vttwwfttJui0vttppttpw0vttwo0vttUutttttSu0vttwttwttwttwttwIwttw0v ttw0v ttw0v ttw0v tt1w0v ttw0v ttw0v ttw ttx ttx tt%x tt2xb tt8xIw hExJxIw tQxIw t0v tt]x0v ttfx ttmxu tttx ttxi ttxlw ttxfw ttx0v ttx ttx ttx ttxd ttxc ttxr ttx ttx0v txd0vttxcx@ttyn0v@ttyg@ttyf0v@t0yt0vptxi0vt?yp0vHytfyc0vtpyrtvyTIw|ytys0vtya0vttyt0vttyttyttytty0vtty0vttz0vttz0vttz0vtt!z0vtt(z0vtt0z0vtt7z0vtt?z0vttGz0vttXz0vttnz0vtt}z0vttzIwttzzttzzttzzttzzttzzttzzttzzttzzttzzttzzttzz0v tt {{Iw @ {&{4{0vC{tR{f{htl|{{0vt{z8{{0v{t{0vxt{0vt{{{|0v|t&|0|0vXt;|0vtQ|j|pY|6tn|-8v|{||w#w||0v (|||Iw p|||tp}}(}3}C}G}0v(tpIwXV}p[}e}Iw ~}uz@`}}Iw}}IwP}%vIw }}Iwx}}Iw8~}}Iw}}IwxP}}Iwd}}Iw(D}Qt}}~Iw &~)~0vA~|\~0v0|o~~0v Xt~IwX~~0vt~~0v |~~~0vpt~0vt uF0v|60v|<0v|P0v@|exwj]y0v tsxIw' 0v |8 `).80v htCN Zit @0v t0v 0t0v tÀ0v|׀Jz0v t[z0v t 0v `t40v tNf0v |xIw '~Iw @'~ԁ0vt0v| 0v ht&0v t0G0v tTe0v tx0v |0v p|т0v |0v @|0v p|,E0v tXk0v p|0v t0v tɃу0v tڃ0v pt0v (t0v t+0v Xt8B0v tM`0v tv0v |Iw sz 8Iz@ }„Iw HЄӄIw' ݄z pz x!/z x >ATz@ hlzz Iw2 Iwd ąȅӅIw ߅Iw p Iw /4Dz@ }uV"tPcItsr0vp|rIwr0 vzP{u0v|t0vPtt0vt~pIwXvIwX}ZuIw`tpu0vttWtt]tett0v ttIw tt†ц0v tt0vttlyu))4;cIw }BRRi!x!#Iw#'~0v@$t0v$tć0v&tڇ&@''((h(*5IwCUZ(lu(u)yJv)t)шوX*ш *ш.a+<LIw+~}[Iw<+D}j0v,tj{0v ,|0v,|Iw-0v -|ʉ߉0v 0.|Ŋ0v tt.K0v .|q0v (/|0v /|(0v p|5K0v 0|[ttltttttttt0vttΊ0vtt0v tt0vh0|0vtt,08R03`4_4(}q4C}5(6X66X66ϋ08ϋՋ9ߋ|: <$8<>D>KTX?^uX?^AhBB{D0vEt50vtt{|tt60vtt0vtt<0vttptt0vttszttIwttIwtt׀0vtt0vtt 0vtt0vtt0vtt0vttuzttpttpIwtt6tttƌЌٌ Xkpjxjo  p P ooooxoU0@P`pа 0@P`pб 0@P`pв 0@P`pг 0@P`pд 0@P`pе 0@P`pж 0@P`pclamonacc-1.4.3-2.el9.x86_64.debugf7zXZִF!t/]?Eh=ڊ2NÆB)KN4 'a.LjJ_7w?#mr <.J<\}-Z$mL0>9&ΣGDM<YPfܳ3klg|MثoТۯrzhjjKnZ}MMſKVŠL&D^#Rٓ1.`KJIA.'Z4 Ko†$T*eloW RqH0L] |@hb֓]%wkRQjEsu XZ^銎nڝ[Ei !p;WcR!)V#>0θS8xV*ƻVX d@pUG0xࡡGF?E, r} \Ȫ@&PKFzE`*Eɞas b_u" hCM̵x0՟MGזጁY"98Ȑj-(𴒁bo57ps@ȋXLvx`W=VxFp#3n1n4M?.T.a}QB5ʹиoCvv:Jkܺ0-C!`/M/i+j3mu{mvO K%[S|o I';˱S)S]/m†Ua{|X1sewDIB9r"3a?bA /Q2nM5`s툨gDDŽ(S>{۲]NΆܞHui(wh5J@Qجx@Pzu׎?VWW0ʽL kEP(@_+o))={ZӡWC~@vkkGW O@uQqdv\Krɶ rv C U Zlz 1;5RVpBRe M;|c2ٻ.njK@{Ji>Ok+P'6B-<䉸U$ }}W o5/zdG <ۂ4,:| wTt\`L&i'"bjy&rK*uٯ740Nw&Y_sUYHϼK{C?FPNȉ7wǨX{[%2{*i6䁲%nV5EװVr f-7命G+䈫58#GSIf$9|eqU#w!KrI6Xs=}-T2IQocͅ_#m'l{G5^'Y$G./<|ДkD4xf7ξ7\tBŔ{h2 6QiO+=Mao@#{wuHwL9M/D*bkrϤ^9bV<᠃<ZNf| 31 ϱgYZ.shstrtab.interp.note.gnu.property.note.gnu.build-id.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.plt.sec.text.fini.rodata.eh_frame_hdr.eh_frame.gcc_except_table.init_array.fini_array.data.rel.ro.dynamic.got.data.bss.gnu_debuglink.gnu_debugdata 880&hh$9 Go<Q  Yaoxx no}BPPp  ззppXkXk ppxxHxHhJhJXYYSpjpZxjxZjZ(_ 0 ػ  (+@: