clamscan -dbytecode.cvd --debug /dev/null 2>clamscan.log Segmentation fault (core dumped) log file LibClamAV debug: searching for unrar, user-searchpath: /usr/lib LibClamAV debug: searching for unrar: libclamunrar_iface.so.6.1.9 not found LibClamAV debug: searching for unrar: libclamunrar_iface.so.6 not found LibClamAV debug: searching for unrar: libclamunrar_iface.so not found LibClamAV debug: searching for unrar: libclamunrar_iface.a not found LibClamAV debug: Cannot dlopen libclamunrar_iface: file not found - unrar support unavailable LibClamAV debug: Initialized 0.97 engine LibClamAV debug: Initializing phishcheck module LibClamAV debug: Phishcheck: Compiling regex: ^ *(http|https|ftp:(//)?)?[0-9]{1,3}(\.[0-9]{1,3}){3}[/?:]? *$ LibClamAV debug: Phishcheck module initialized LibClamAV debug: Bytecode initialized in JIT mode LibClamAV debug: in cli_cvdload() LibClamAV debug: MD5(.tar.gz) = ff364a21207a5a53505a690ad867fae9 LibClamAV debug: cli_versig: Decoded signature: ff364a21207a5a53505a690ad867fae9 LibClamAV debug: cli_versig: Digital signature is correct. LibClamAV debug: in cli_tgzload() LibClamAV debug: bytecode.info loaded LibClamAV debug: in cli_tgzload() LibClamAV debug: Initializing engine->root[0] LibClamAV debug: Initialising AC pattern matcher of root[0] LibClamAV debug: cli_initroots: Initializing BM tables of root[0] LibClamAV debug: Initializing engine->root[1] LibClamAV debug: Initialising AC pattern matcher of root[1] LibClamAV debug: cli_initroots: Initializing BM tables of root[1] LibClamAV debug: Initializing engine->root[2] LibClamAV debug: Initialising AC pattern matcher of root[2] LibClamAV debug: Initializing engine->root[3] LibClamAV debug: Initialising AC pattern matcher of root[3] LibClamAV debug: Initializing engine->root[4] LibClamAV debug: Initialising AC pattern matcher of root[4] LibClamAV debug: Initializing engine->root[5] LibClamAV debug: Initialising AC pattern matcher of root[5] LibClamAV debug: Initializing engine->root[6] LibClamAV debug: Initialising AC pattern matcher of root[6] LibClamAV debug: Initializing engine->root[7] LibClamAV debug: Initialising AC pattern matcher of root[7] LibClamAV debug: Initializing engine->root[8] LibClamAV debug: Initialising AC pattern matcher of root[8] LibClamAV debug: Initializing engine->root[9] LibClamAV debug: Initialising AC pattern matcher of root[9] LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 6 APIcalls, maxapi 15 LibClamAV debug: Parsed 9 BBs, 93 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000767942.cbc(1) has logical signature: BC.ClamAV-Test-File-detected-via-bytecode.{};Target:1;(0&2&1);0:4d5a50000200000004000f00ffff0000;EOF-544:4d5a50000200000004000f00ffff0000;S0+0:4d5a50000200000004000f00ffff0000 LibClamAV debug: 0000767942.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: Skipping bytecode with (engine) functionality level 51-51 (current 60) LibClamAV debug: line: 4096 LibClamAV debug: Parsed 0 functions LibClamAV debug: 0000767943.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 7 APIcalls, maxapi 66 LibClamAV debug: unknown inst type: 67 LibClamAV debug: Parsed 19 BBs, 97 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000767944.cbc(2) has logical signature: BC.Win32.Patched.User32;Engine:52-255,Target:1;(0&((((5=0)|(4<2)|(4>2))&3&(2=0))|((4=0)&2))&1);VI:49006e007400650072006e0061006c004e0061006d006500000075007300650072003300;VI:43006f006d00700061006e0079004e0061006d006500000000004d006900630072006f0073006f0066007400200043006f00720070006f007200610074006900;VI:460069006c006500560065007200730069006f006e000000000035002e00;VI:460069006c006500560065007200730069006f006e000000000036002e003000;*:41007000700049006e00690074005f0044004c004c0073;*:4c006f006100640041007000700049006e00690074005f0044004c004c00730000 LibClamAV debug: 0000767944.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 8 APIcalls, maxapi 65 LibClamAV debug: Parsed 47 BBs, 228 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000814800.cbc(3) has logical signature: BC.Exploit.CVE_2010_1885;Engine:52-255,Target:3;0;6863703a2f2f{25-700}736372697074{1-3}6465666572 LibClamAV debug: 0000814800.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 4 APIcalls, maxapi 16 LibClamAV debug: unknown inst type: 66 LibClamAV debug: Parsed 9 BBs, 31 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000817376.cbc(4) has logical signature: BC.XLS.Exploit.{CVE_2009_3129};Engine:52-255,Target:0;(0&(2|1));0:d0cf11e0a1b11ae1;*:57006f0072006b0062006f006f006b;*:42006f006f006b LibClamAV debug: 0000817376.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 4 APIcalls, maxapi 16 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 68 LibClamAV debug: Parsed 12 BBs, 47 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000817795.cbc(5) has logical signature: BC.Exploit.CVE_2010_0815.{Exploit.CVE_2010_0815};Engine:52-255,Target:0;0;0:d0cf11e0a1b11ae1 LibClamAV debug: 0000817795.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 6 APIcalls, maxapi 42 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 66 LibClamAV debug: unknown inst type: 66 LibClamAV debug: Parsed 48 BBs, 220 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000824716.cbc(6) has logical signature: BC.Exploit.CVE_2010_2568.{};Target:0;0;4c0000000114020000000000c000000000000046 LibClamAV debug: 0000824716.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 11 APIcalls, maxapi 66 LibClamAV debug: Parsed 55 BBs, 258 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000829571.cbc(7) has logical signature: BC.Exploit.CVE_2010_1885-2;Engine:52-255,Target:3;0;6863703a2f2f{25-700}736372697074{1-3}6465666572 LibClamAV debug: 0000829571.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 7 APIcalls, maxapi 89 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: Parsed 11 BBs, 42 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000830429.cbc(8) has logical signature: BC.Heuristic.Trojan.SusPacked.BF.{};Engine:51-255,IconGroup2:BIFROSE,Target:1;0;EP+0:60be00??41008dbe00??feff57eb0b908a064688074701db75078b1e83eefc11db72edb80100000001db75078b1e83eefc11db11c001 LibClamAV debug: 0000830429.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 30 APIcalls, maxapi 68 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: Parsed 834 BBs, 7724 instructions LibClamAV debug: Parsed 3 BBs, 8 instructions LibClamAV debug: Parsed 2 functions LibClamAV debug: Bytecode 0000850700.cbc(9) has logical signature: BC.PDF.Parser-4.{MalwareFound};Target:0;(1|0|2);0:255044462d312e;0:252150532d41646f62652d??2e????5044462d;0,1024:255044462d;EOF-1024,1019:2525454f46;EOF-1280,1266:737461727478726566 LibClamAV debug: 0000850700.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 8 APIcalls, maxapi 89 LibClamAV debug: Parsed 12 BBs, 42 instructions LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: Parsed 10 BBs, 47 instructions LibClamAV debug: unknown inst type: 67 LibClamAV debug: Parsed 9 BBs, 31 instructions LibClamAV debug: Parsed 3 BBs, 9 instructions LibClamAV debug: Parsed 4 functions LibClamAV debug: Bytecode 0000850930.cbc(10) has logical signature: BC.Heuristic.Trojan.SusPacked.BF-6.{A,B,C};Engine:55-255,IconGroup2:BIFROSE,Target:1,FileSize:0-8388607;0;0:4d5a LibClamAV debug: 0000850930.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 9 APIcalls, maxapi 87 LibClamAV debug: Parsed 20 BBs, 67 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: 0000855079.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 11 APIcalls, maxapi 87 LibClamAV debug: Parsed 26 BBs, 150 instructions LibClamAV debug: Parsed 40 BBs, 131 instructions LibClamAV debug: Parsed 2 functions LibClamAV debug: 0000867507.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 3 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 7 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000868322.cbc(13) has logical signature: BC.Heuristic.Trojan.SusPacked.TMS;Engine:52-255,IconGroup2:BIFROSE,Target:1,FileSize:10-10000000,NumberOfSections:7-255;(0&((2|1)=0));0:4d5a;VI:4c006500670061006c0043006f0070007900720069006700680074000000a90020004d006900630072006f0073006f0066007400200043006f00720070006f0072006100740069006f006e002e00200041006c006c00200072006900670068007400730020007200650073006500720076006500;VI:43006f006d00700061006e0079004e0061006d006500000000004d006900630072006f0073006f0066007400200043006f00720070006f007200610074006900 LibClamAV debug: 0000868322.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 3 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 13 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000872695.cbc(14) has logical signature: BC.Exploit.CVE_2010_3338.{Exploit-CVE_2010_3338};Engine:56-255,Target:1;0;S1+3125:003c005000 LibClamAV debug: 0000872695.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 3 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 23 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000872696.cbc(15) has logical signature: BC.Exploit.CVE_2010_3963.{Exploit-CVE_2010_3963};Engine:56-255,Target:1;(1|0);EOF-64:453a5c776f;453a5c776f LibClamAV debug: 0000872696.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 2 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 27 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000872785.cbc(16) has logical signature: BC.Exploit.CVE_2010_3943.{Exploit-CVE_2010_3943};Engine:56-255,Target:1;(0&2&1);S0+14736:ffff595f5e;S0+15632:8b00385dfc;S0+19520:83661c0059 LibClamAV debug: 0000872785.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 3 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 13 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000872786.cbc(17) has logical signature: BC.Exploit.CVE_2010_3939.{Exploit-CVE_2010_3939};Engine:56-255,Target:1;0;S0+0:81ecc80000 LibClamAV debug: 0000872786.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 3 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 33 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000872787.cbc(18) has logical signature: BC.Exploit.CVE_2010_3942.{Exploit-CVE_2010_3942};Engine:56-255,Target:1;(0&2&1);S0+4096:d6ffd05959;S0+9456:c6730f8b07;S0+12912:a0b9400089 LibClamAV debug: 0000872787.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 3 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 13 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000872788.cbc(19) has logical signature: BC.Exploit.CVE_2010_3940.{Exploit-CVE_2010_3940};Engine:56-255,Target:1;0;S1+608:256400000a LibClamAV debug: 0000872788.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 3 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 13 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000872793.cbc(20) has logical signature: BC.Exploit.CVE_2010_3941.{Exploit-CVE_2010_3941};Engine:56-255,Target:1;0;S1+6656:436f756c64 LibClamAV debug: 0000872793.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 2 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 19 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000872843.cbc(21) has logical signature: BC.Exploit.CVE_2010_3944.{Exploit-CVE_2010_3944};Engine:56-255,Target:1;(0&1);S0+1696:fc0000000f;S0+2864:1f837dfc00 LibClamAV debug: 0000872843.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 2 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 11 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000872844.cbc(22) has logical signature: BC.Exploit.CVE_2010_3961.{Exploit-CVE_2010_3961};Engine:56-255,Target:1;0;S1+704:7665640044 LibClamAV debug: 0000872844.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 5 APIcalls, maxapi 66 LibClamAV debug: Parsed 9 BBs, 38 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000873154.cbc(23) has logical signature: BC.Exploit.CVE_2010_3333.{Exploit-CVE_2010_3333};Engine:56-255,Target:0;0;5c7370{-100}5c736e2070467261676d656e7473{-100}5c7376 LibClamAV debug: 0000873154.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 3 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 13 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000876141.cbc(24) has logical signature: BC.Exploit.CVE_2011_0026.{Exploit-CVE_2011_0026};Engine:56-255,Target:1;0;S1+1200:fffeffebd0 LibClamAV debug: 0000876141.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 5 APIcalls, maxapi 66 LibClamAV debug: unknown inst type: 67 LibClamAV debug: Parsed 6 BBs, 41 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000876351.cbc(25) has logical signature: BC.Exploit.CVE_2010_3970;Engine:56-255,Target:2;0;feff{26}e0859ff2f94f6810ab9108002b27b3d9 LibClamAV debug: 0000876351.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 9 APIcalls, maxapi 74 LibClamAV debug: unknown inst type: 95 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: Parsed 53 BBs, 227 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: 0000877519.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 3 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 23 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000897200.cbc(27) has logical signature: BC.Exploit.CVE_2011_0030.{Exploit-CVE_2011_0030};Engine:56-255,Target:1;(1|0);S1+11272:483a5c7368656c6c;S1+2652:437372436c69656e7443616c6c536572766572 LibClamAV debug: 0000897200.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 3 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 23 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000897207.cbc(28) has logical signature: BC.Exploit.CVE_2011_0045.{Exploit-CVE_2011_0045};Engine:56-255,Target:1;(1|0);S1+346:54726163654576656e74;S0+0:558bec83ec48c745f0080000c0c745f8 LibClamAV debug: 0000897207.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 3 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 13 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000897208.cbc(29) has logical signature: BC.Exploit.CVE_2011_0090.{Exploit-CVE_2011_0090};Engine:56-255,Target:1;0;S0+64:558bec83ec68c745d80000000033c089 LibClamAV debug: 0000897208.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 3 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 23 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000897209.cbc(30) has logical signature: BC.Exploit.CVE_2011_0089.{Exploit-CVE_2011_0089};Engine:56-255,Target:1;(1|0);S2+16304:020000005c5c7265647465616d5c7365;S1+6000:51ff15242443003bf4e803efffff8bf4 LibClamAV debug: 0000897209.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 3 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 23 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000897211.cbc(31) has logical signature: BC.Exploit.CVE_2011_0088.{Exploit-CVE_2011_0088};Engine:56-255,Target:1;(1|0);S2+16224:4551466f020000005c5c726564746561;S1+5680:ec51ff15182443003bf4e838f0ffffb8 LibClamAV debug: 0000897211.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 3 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 23 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000898169.cbc(32) has logical signature: BC.Exploit.CVE_2011_0039.{Exploit-CVE_2011_0039};Engine:56-255,Target:1;(1|0);S0+784:5c564d572d5850535032454e5c63245c;S1+992:747874446f6d61696e00020438045802 LibClamAV debug: 0000898169.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 3 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 23 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000898175.cbc(33) has logical signature: BC.Exploit.CVE_2011_0087.{Exploit-CVE_2011_0087};Engine:56-255,Target:1;(1|0);S2+0:0a5b2a5d20466f756e642077696e646f;S0+80:550852ff15248140008b85f0feffff8b LibClamAV debug: 0000898175.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 3 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 23 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000898176.cbc(34) has logical signature: BC.Exploit.CVE_2011_0086.{Exploit-CVE_2011_0086};Engine:56-255,Target:1;(1|0);S2+16:6e642077696e646f773a202578202825;S0+256:4000e8ad03000083c4048b550852ff15 LibClamAV debug: 0000898176.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 10 APIcalls, maxapi 91 LibClamAV debug: unknown inst type: 115 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 118 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: unknown inst type: 67 LibClamAV debug: Parsed 236 BBs, 935 instructions LibClamAV debug: Parsed 15 BBs, 57 instructions LibClamAV debug: Parsed 2 functions LibClamAV debug: 0000901806.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 9 APIcalls, maxapi 55 LibClamAV debug: Parsed 30 BBs, 141 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000905416.cbc(36) has logical signature: BC.Format.DEB-AR-1;Engine:56-255,Target:0;0;0:213c617263683e0a64656269616e2d62696e617279 LibClamAV debug: 0000905416.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 0 APIcalls, maxapi 0 LibClamAV debug: Parsed 1 BBs, 1 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000909661.cbc(37) has logical signature: BC.dummy;Engine:56-255,Target:1;(0&(1=0));EP+0:aabbccddeeff;EP+0:aabbccddeeff LibClamAV debug: 0000909661.cbc loaded LibClamAV debug: Loading trusted bytecode LibClamAV debug: bytecode: Parsed 3 APIcalls, maxapi 66 LibClamAV debug: Parsed 3 BBs, 13 instructions LibClamAV debug: Parsed 1 functions LibClamAV debug: Bytecode 0000923457.cbc(38) has logical signature: BC.Exploit.CVE_2011_0037.{Exploit-CVE_2011_0037};Engine:56-255,Target:1;0;S1+736:626c6564000000002028557365642066 LibClamAV debug: 0000923457.cbc loaded LibClamAV debug: last.hdb loaded LibClamAV debug: bytecode.cvd loaded LibClamAV debug: Loaded 117 filetype definitions LibClamAV debug: Using filter for trie 0 LibClamAV debug: Matcher[0]: GENERIC: AC sigs: 69 (reloff: 2, absoff: 0) BM sigs: 0 (reloff: 0, absoff: 0) maxpatlen 24 LibClamAV debug: Using filter for trie 1 LibClamAV debug: Matcher[1]: PE: AC sigs: 48 (reloff: 42, absoff: 0) BM sigs: 0 (reloff: 0, absoff: 0) maxpatlen 116 LibClamAV debug: Matcher[2]: OLE2: AC sigs: 2 (reloff: 0, absoff: 0) BM sigs: 0 (reloff: 0, absoff: 0) maxpatlen 16 (ac_only mode) LibClamAV debug: Matcher[3]: HTML: AC sigs: 6 (reloff: 0, absoff: 0) BM sigs: 0 (reloff: 0, absoff: 0) maxpatlen 6 (ac_only mode) LibClamAV debug: Using filter for trie 4 LibClamAV debug: Matcher[4]: MAIL: AC sigs: 0 (reloff: 0, absoff: 0) BM sigs: 0 (reloff: 0, absoff: 0) maxpatlen 0 (ac_only mode) LibClamAV debug: Matcher[5]: GRAPHICS: AC sigs: 0 (reloff: 0, absoff: 0) BM sigs: 0 (reloff: 0, absoff: 0) maxpatlen 0 (ac_only mode) LibClamAV debug: Matcher[6]: ELF: AC sigs: 0 (reloff: 0, absoff: 0) BM sigs: 0 (reloff: 0, absoff: 0) maxpatlen 0 (ac_only mode) LibClamAV debug: Using filter for trie 7 LibClamAV debug: Matcher[7]: ASCII: AC sigs: 0 (reloff: 0, absoff: 0) BM sigs: 0 (reloff: 0, absoff: 0) maxpatlen 0 (ac_only mode) LibClamAV debug: Matcher[8]: NOT USED: AC sigs: 0 (reloff: 0, absoff: 0) BM sigs: 0 (reloff: 0, absoff: 0) maxpatlen 0 (ac_only mode) LibClamAV debug: Matcher[9]: MACH-O: AC sigs: 0 (reloff: 0, absoff: 0) BM sigs: 0 (reloff: 0, absoff: 0) maxpatlen 0 (ac_only mode) LibClamAV debug: Dynamic engine configuration settings: LibClamAV debug: -------------------------------------- LibClamAV debug: Module PE: On LibClamAV debug: * Submodule PARITE: On LibClamAV debug: * Submodule KRIZ: On LibClamAV debug: * Submodule MAGISTR: On LibClamAV debug: * Submodule POLIPOS: On LibClamAV debug: * Submodule MD5SECT: On LibClamAV debug: * Submodule UPX: On LibClamAV debug: * Submodule FSG: On LibClamAV debug: * Submodule SWIZZOR: On LibClamAV debug: * Submodule PETITE: On LibClamAV debug: * Submodule PESPIN: On LibClamAV debug: * Submodule YC: On LibClamAV debug: * Submodule WWPACK: On LibClamAV debug: * Submodule NSPACK: On LibClamAV debug: * Submodule MEW: On LibClamAV debug: * Submodule UPACK: On LibClamAV debug: * Submodule ASPACK: On LibClamAV debug: Module ELF: On LibClamAV debug: Module MACHO: On LibClamAV debug: Module ARCHIVE: On LibClamAV debug: * Submodule RAR: On LibClamAV debug: * Submodule ZIP: On LibClamAV debug: * Submodule GZIP: On LibClamAV debug: * Submodule BZIP: On LibClamAV debug: * Submodule ARJ: On LibClamAV debug: * Submodule SZDD: On LibClamAV debug: * Submodule CAB: On LibClamAV debug: * Submodule CHM: On LibClamAV debug: * Submodule OLE2: On LibClamAV debug: * Submodule TAR: On LibClamAV debug: * Submodule CPIO: On LibClamAV debug: * Submodule BINHEX: On LibClamAV debug: * Submodule SIS: On LibClamAV debug: * Submodule NSIS: On LibClamAV debug: * Submodule AUTOIT: On LibClamAV debug: * Submodule ISHIELD: On LibClamAV debug: * Submodule 7zip: On LibClamAV debug: Module DOCUMENT: On LibClamAV debug: * Submodule HTML: On LibClamAV debug: * Submodule RTF: On LibClamAV debug: * Submodule PDF: On LibClamAV debug: * Submodule SCRIPT: On LibClamAV debug: * Submodule HTMLSKIPRAW: On LibClamAV debug: * Submodule JSNORM: On LibClamAV debug: Module MAIL: On LibClamAV debug: * Submodule MBOX: On LibClamAV debug: * Submodule TNEF: On LibClamAV debug: Module OTHER: On LibClamAV debug: * Submodule UUENCODED: On LibClamAV debug: * Submodule SCRENC: On LibClamAV debug: * Submodule RIFF: On LibClamAV debug: * Submodule JPEG: On LibClamAV debug: * Submodule CRYPTFF: On LibClamAV debug: * Submodule DLP: On LibClamAV debug: * Submodule MYDOOMLOG: On LibClamAV debug: * Submodule PREFILTERING: On LibClamAV debug: Module PHISHING On LibClamAV debug: * Submodule ENGINE: On LibClamAV debug: * Submodule ENTCONV: On LibClamAV debug: Module BYTECODE On LibClamAV debug: * Submodule INTERPRETER: On LibClamAV debug: * Submodule JIT X86: On LibClamAV debug: * Submodule JIT PPC: On LibClamAV debug: * Submodule JIT ARM: ** Off ** LibClamAV debug: pool memory used: 6.066 MB LibClamAV debug: environment detected: LibClamAV debug: check_platform(0x0a213c3c, 0x08040502, 0x01040502) LibClamAV debug: check_platform(0x0a 2 1 3c 3c,0x0 8 04 05 02,0x01 04 05 02) LibClamAV debug: check_platform( OS CPU COM FL DCONF,BE PTR CXX VV.VV.VV, FLG CC VV.VV.VV) LibClamAV debug: Engine version: 0.97 LibClamAV debug: Host triple: x86_64-pc-linux-gnu LibClamAV debug: Host CPU: i686 LibClamAV debug: OS: Linux LibClamAV debug: OS release: 2.6.38-8-generic LibClamAV debug: OS version: #42-Ubuntu SMP Mon Apr 11 03:31:24 UTC 2011 LibClamAV debug: OS hardware: x86_64 LibClamAV debug: OS LLVM category: 6 LibClamAV debug: Has JIT compiled: 1 LibClamAV debug: ------------------------------------------------------ LibClamAV debug: Bytecode: mode is 0 LibClamAV debug: Bytecode: BC_STARTUP running (loaded) LibClamAV debug: Bytecode 26: executing in interpeter mode LibClamAV debug: bytecode: registered ctx variable at (nil) (+0) id 6 LibClamAV debug: bytecode: registered ctx variable at 0x7fc62e1a32c0 (+2) id 2 LibClamAV debug: bytecode: registered ctx variable at 0x7fc62dd187e0 (+256) id 1 LibClamAV debug: bytecode: registered ctx variable at 0x7fc62e1a32c4 (+4) id 5 LibClamAV debug: bytecode: registered ctx variable at 0x7fc62e1a32e0 (+648) id 4 LibClamAV debug: bytecode: registered ctx variable at 0x25997b0 (+752) id 7 LibClamAV debug: bytecode debug: startup: bytecode execution in auto mode LibClamAV debug: intepreter bytecode run finished in 28us, after executing 118 opcodes LibClamAV debug: Bytecode: disable status is 0 LibClamAV debug: [Bytecode JIT]: emitted function bc4294967295f0 of 33 bytes at 0x7fc62b82f010 LibClamAV debug: [Bytecode JIT]: emitted function bc4294967295f0_wrap of 21 bytes at 0x7fc62b82f040 LibClamAV debug: bytecode self test running LibClamAV debug: Bytecode 4294967295: executing in JIT mode LibClamAV debug: bytecode finished in 4 us LibClamAV debug: bytecode self test succeeded LibClamAV debug: [Bytecode JIT]: emitted function bc1f0 of 624 bytes at 0x7fc62b82f010 LibClamAV debug: [Bytecode JIT]: emitted function bc1f0_wrap of 21 bytes at 0x7fc62b82f290 LibClamAV debug: [Bytecode JIT]: emitted function bc2f0 of 596 bytes at 0x7fc62b82f2b0 LibClamAV debug: [Bytecode JIT]: emitted function bc2f0_wrap of 21 bytes at 0x7fc62b82f510