clamscan(1) Clam AntiVirus clamscan(1) (NAME) clamscan - ClamAV (SYNOPSIS) clamscan [] [//-] (DESCRIPTION) clamscan . (OPTIONS) . [=yes/no(*)] =yes/=no <> . . -h, --help . -V, --version . -v, --verbose . -a, --archive-verbose . --debug libclamav. --quiet ( ). --stdout ( libclamav) (stdout). --no-summary . -i, --infected . -o, --suppress-ok-results (OK). --bell . --tempdir=DIRECTORY DIRECTORY. <> clamscan . --leave-temps . --force-to-disk (dump) . LeaveTemporaryFiles . --gen-json JSON () . --leave-temps JSON . --json-store-html-uris URI HTML . URI metadata.json <> . --json-store-pdf-uris URI PDF . URI metadata.json <> . --json-store-extra-hashes md5 sha1 sha2-256 . -d FILE/DIR, --database=FILE/DIR FILE DIR. --official-db-only=[yes/no(*)] ClamAV. --fail-if-cvd-older-than=days . -l FILE, --log=FILE FILE. -r, --recursive . . -z, --allmatch . --cross-fs=[yes(*)/no] . --follow-dir-symlinks=[0/1(*)/2] . : 0 - 1 () - clamscan 2 - . --follow-file-symlinks=[0/1(*)/2] . : 0 - 1 () - clamscan 2 - . -f FILE, --file-list=FILE FILE. --remove[=yes/no(*)] . ! --move=DIRECTORY DIRECTORY. <> clamscan . --copy=DIRECTORY DIRECTORY. <> clamscan . --exclude=REGEX, --exclude-dir=REGEX / . . --include=REGEX, --include-dir=REGEX / . . --bytecode[=yes(*)/no] ClamAV . . --bytecode-unsigned[=yes/no(*)] .c[lv]d. : . . --bytecode-timeout=N () (: 10000 = ). --statistics[=none(*)/bytecode/pcre] . --detect-pua[=yes/no(*)] (PUA). --exclude-pua=CATEGORY PUA. . PUA https://docs.clamav.net/faq/faq-pua.html . --include-pua=CATEGORY PUA. . PUA https://docs.clamav.net/faq/faq-pua.html . --detect-structured[=yes/no(*)] (DLP) (SSN) . --structured-ssn-format=X X=0: xxx- yy-zzzz () X=1: xxxyyzzzz ( ) X=2: . 0 . --structured-ssn-count=#n (: 3). --structured-cc-count=#n (: 3). --scan-mail[=yes(*)/no] . . --phishing-sigs[=yes(*)/no] . --phishing-scan-urls[=yes(*)/no] (Heuristics.Phishing.Email.*). --heuristic-alerts[=yes(*)/no] ( ) ClamAV . . --heuristic-scan-precedence[=yes/no(*)] (). ( phishingScan) . . . / . <> <<>> . ( ) . --normalize[=yes(*)/no] ( ) html . yara normalize=no . --scan-pe[=yes(*)/no] PE Portable Executable ( ) - . ClamAV UPX Petite FSG . . --scan-elf[=yes(*)/no] Executable and Linking Format (UN*X) . ELF . . --scan-ole2[=yes(*)/no] .msi. . --scan-pdf[=yes(*)/no] PDF. . --scan-swf[=yes(*)/no] SWF. . --scan-html[=yes(*)/no] / HTML . . --scan-xmldocs[=yes(*)/no] xml libclamav . . --scan-hwp3[=yes(*)/no] HWP3. . --scan-archive[=yes(*)/no] libclamav. . --scan-image[=yes(*)/no] () . . --scan-image-fuzzy-hash[=yes(*)/no] () . . . --alert-broken[=yes/no(*)] (PE ELF). --alert-encrypted[=yes/no(*)] (.zip .7zip .rar .pdf ). --alert-encrypted-archive[=yes/no(*)] (.zip .7zip .rar .pdf ). --alert-encrypted-doc[=yes/no(*)] (.zip .7zip .rar .pdf ). --alert-macros[=yes/no(*)] OLE2 VBA ( Heuristics.OLE2.ContainsMacros). --alert-exceeds-max[=yes/no(*)] ( Heuristics.Limits.Exceeded). --alert-phishing-ssl[=yes/no(*)] SSL ( !). --alert-phishing-cloak[=yes/no(*)] ( ). --alert-partition-intersection[=yes/no(*)] . --nocerts authenticode PE. --dumpcerts authenticode PE. --max-scantime=#n . . 0 . (DoS) (: 120000 = ). --max-filesize=#n #n . xK xk xM xm x . DoS (: 100 : 2 ). --max-scansize=#n #n . . max-scansize . xK xk xM xm x . DoS (: 400 ). --max-files=#n #n ( ). DoS (: 10000). --max-recursion=#n . DoS (: 17 : 100). --max-dir-recursion=#n (: 15). --max-embeddedpe=#n PE . xK xk xM xm x (: 40 ). --max-htmlnormalize=#n HTML . xK xk xM xm x (: 40 ). --max-htmlnotags=#n HTML . xK xk xM xm x (: 8 ). --max-scriptnormalize=#n . xK xk xM xm x (: 20 ). --max-ziptypercg=#n zip . xK xk xM xm x (: 1 ). --max-partitions=#n . (: 50). --max-iconspe=#n PE . (: 100). --max-rechwp3=#n HWP3 (: 16). --pcre-match-limit=#n PCRE (: 100000). --pcre-recmatch-limit=#n PCRE (: 2000). --pcre-max-filesize=#n PCRE (: 100 ). --disable-cache () () . --hash-hint libclamav . <<--hash-alg>> . --log-hash . <<--hash-alg>> . --hash-alg <<--hash-hint>> <<--log-hash>>. "md5" "sha1" "sha2-256". "sha2-256" . --file-type-hint libclamav "pe" "elf" "zip" . ClamAV "CL_TYPE_PE" . ClamAV . : https://docs.clamav.net/appendix/FileTypes.html#file-types --log-file-type . --cvdcertsdir=DIR CA CVD. clamscan . --fips-limits FIPS . MD5 SHA1 CVD <<.sign>> . (ENVIRONMENT VARIABLES) clamscan : LD_LIBRARY_PATH libclamunrar_iface RAR . CVD_CERTS_DIR CA CVD. clamscan . (EXAMPLES) () : clamscan file () : clamscan () ( ) /home: clamscan -r /home () : clamscan -d /tmp/newclamdb -r /tmp () (): cat testfile | clamscan - () (): clamscan -r /var/spool/mail (RETURN CODES) 0 : . 1 : ( ) . 2 : . (CREDITS) . (AUTHORS) Tomasz Kojm , Kevin Lin (SEE ALSO) clamdscan(1), freshclam(1), freshclam.conf(5) ClamAV 1.5.4 December 4, 2013 clamscan(1)