Hi All,
I am running ClamAV 0.91.2 release on RedHat Enterprise Linux 5 release
(64 bit version). I scanned a pdf and it gives clamav a denial of
service. can someone help me giving me a fix to this.
I am giving the output of clamscan that i ran on the pdf at the end of
this email. important things are marked in bold
Regards
K.Deepak
*LibClamAV debug: Initializing the engine (0.91.2)*
LibClamAV debug: Initializing phishcheck module
LibClamAV debug: Phishcheck: Compiling regex:
^(0[xX][0-9a-fA-F]+|[0-9]+)(\.(0[xX][0-9a-fA-F]+|[0-9]+)){0,3}$
LibClamAV debug: Phishcheck: Compiling regex:
^(a[dfilmoqrtuwxz]|b[bdeghijmorstwyz]|c[ahlmnosuy]|d[ejkmz]|e[cegrstu]|f[ijr]|g[abdeghilmnprtuwy]|h[nrtu]|i[delnqst]|j[emop]|k[eghimwz]|l[birstuv]|m[acglmnoqrstuvwxyz]|n[aegilopru]|om|p[aehkltwy]|qa|r[ow]|s[cdeginorz]|t[dghjklmnorvwz]|u[agyz]|v[enu]|ws|y[etu])$
LibClamAV debug: Phishcheck: Compiling regex:
^(A[CDEFGILMNOQRSTUWXZ]|B[ABDEFGHIJMNORSTVWYZ]|C[ACDFGHIKLMNORUVXYZ]|D[EJKMOZ]|E[CEGRSTU]|F[IJKMOR]|G[ABDEFGHILMNPQRSTUWY]|H[KMNRTU]|I[DELMNOQRST]|J[EMOP]|K[EGHIMNRWYZ]|L[ABCIKRSTUVY]|M[ACDGHKLMNOPQRSTUVWXYZ]|N[ACEFGILOPRUZ]|OM|P[AEFGHKLMNRSTWY]|QA|R[EOUW]|S[ABCDEGHIJKLMNORTUVYZ]|T[CDFGHJKLMNOPRTVWZ]|U[AGKMSYZ]|V[ACEGINU]|W[FS]|Y[ETU]|Z[AMW]|BIZ|CAT|COM|EDU|GOV|INT|MIL|NET|ORG|PRO|AERO|ARPA|COOP|INFO|JOBS|MOBI|NAME|MUSEUM)$
LibClamAV debug: Phishcheck: Compiling regex: ^
*(([a-zA-Z]([-$_@&a-zA-Z0-9!*"'(),]|%[0-9a-fA-f]{2})*:(//)?)?(([-$_@&a-zA-Z0-9!*"'(),]|%[0-9a-fA-f]{2})|\+)+\.((([-$_@&a-zA-Z0-9!*"'(),]|%[0-9a-fA-f]{2})|\+)+\.)*(A[CDEFGILMNOQRSTUWXZ]|B[ABDEFGHIJMNORSTVWYZ]|C[ACDFGHIKLMNORUVXYZ]|D[EJKMOZ]|E[CEGRSTU]|F[IJKMOR]|G[ABDEFGHILMNPQRSTUWY]|H[KMNRTU]|I[DELMNOQRST]|J[EMOP]|K[EGHIMNRWYZ]|L[ABCIKRSTUVY]|M[ACDGHKLMNOPQRSTUVWXYZ]|N[ACEFGILOPRUZ]|OM|P[AEFGHKLMNRSTWY]|QA|R[EOUW]|S[ABCDEGHIJKLMNORTUVYZ]|T[CDFGHJK
LMNOPRTVWZ]|U[AGKMSYZ]|V[ACEGINU]|W[FS]|Y[ETU]|Z[AMW]|BIZ|CAT|COM|EDU|GOV|INT|MIL|NET|ORG|PRO|AERO|ARPA|COOP|INFO|JOBS|MOBI|NAME|MUSEUM)(/(([EMAIL
PROTECTED]&a-zA-Z0-9!*""'(),]|%[0-9a-fA-f]{2})|\+|=)*)*(\?(([EMAIL
PROTECTED]&a-zA-Z0-9!*""'(),]|%[0-9a-fA-f]{2})+)*)?(#([EMAIL
PROTECTED]&a-zA-Z0-9!*"'(),]|%[0-9a-fA-f]{2})+)?|(http|https|ftp)://.+)
*$
LibClamAV debug: Phishcheck: Compiling regex: ^
*([a-zA-Z]([-$_@&a-zA-Z0-9!*"'(),]|%[0-9a-fA-f]{2})*:(//)?)?[0-9]{1,3}(\.[0-9]{1,3}){3}(:(([-$_@&a-zA-Z0-9!*"'(),]|%[0-9a-fA-f]{2})|\+)+)?(/((([EMAIL
PROTECTED]&a-zA-Z0-9!*""'(),]|%[0-9a-fA-f]{2})|\+)+/?)*)?(\?(([EMAIL
PROTECTED]&a-zA-Z0-9!*""'(),]|%[0-9a-fA-f]{2})+)*)?(#([EMAIL
PROTECTED]&a-zA-Z0-9!*"'(),]|%[0-9a-fA-f]{2})+)?
*$
LibClamAV debug: Phishcheck module initialized
LibClamAV debug: cli_loaddbdir: Acquiring dbdir lock
LibClamAV debug: Loading databases from /var/lib/clamav
LibClamAV debug: Initializing engine->root[0]
LibClamAV debug: Initialising AC pattern matcher of root[0]
LibClamAV debug: cli_initroots: Initializing BM tables of root[0]
LibClamAV debug: in cli_bm_init()
LibClamAV debug: BM: Number of indexes = 63744
LibClamAV debug: Initializing engine->root[1]
LibClamAV debug: Initialising AC pattern matcher of root[1]
LibClamAV debug: cli_initroots: Initializing BM tables of root[1]
LibClamAV debug: in cli_bm_init()
LibClamAV debug: BM: Number of indexes = 63744
LibClamAV debug: Initializing engine->root[2]
LibClamAV debug: Initialising AC pattern matcher of root[2]
LibClamAV debug: cli_initroots: Initializing BM tables of root[2]
LibClamAV debug: in cli_bm_init()
LibClamAV debug: BM: Number of indexes = 63744
LibClamAV debug: Initializing engine->root[3]
LibClamAV debug: Initialising AC pattern matcher of root[3]
LibClamAV debug: cli_initroots: Initializing BM tables of root[3]
LibClamAV debug: in cli_bm_init()
LibClamAV debug: BM: Number of indexes = 63744
LibClamAV debug: /var/lib/clamav/phish.ndb loaded
LibClamAV debug: in cli_cvdload()
LibClamAV debug: MD5(.tar.gz) = f58ebea492c9bd38d4921f6c60b480cb
LibClamAV debug: cli_versig: Decoded signature:
f58ebea492c9bd38d4921f6c60b480cb
LibClamAV debug: cli_versig: Digital signature is correct.
LibClamAV debug: in cli_untgz()
LibClamAV debug: Unpacking
/tmp/clamav-462851ba33b53ab50d257fe9274b4048/COPYING
LibClamAV debug: Unpacking
/tmp/clamav-462851ba33b53ab50d257fe9274b4048/main.db
LibClamAV debug: Unpacking
/tmp/clamav-462851ba33b53ab50d257fe9274b4048/main.hdb
LibClamAV debug: Unpacking
/tmp/clamav-462851ba33b53ab50d257fe9274b4048/main.ndb
LibClamAV debug: Unpacking
/tmp/clamav-462851ba33b53ab50d257fe9274b4048/main.zmd
LibClamAV debug: Unpacking
/tmp/clamav-462851ba33b53ab50d257fe9274b4048/main.fp
LibClamAV debug: Unpacking
/tmp/clamav-462851ba33b53ab50d257fe9274b4048/main.mdb
LibClamAV debug: Unpacking
/tmp/clamav-462851ba33b53ab50d257fe9274b4048/main.info
LibClamAV debug: cli_loaddbdir: Acquiring dbdir lock
LibClamAV debug: Loading databases from
/tmp/clamav-462851ba33b53ab50d257fe9274b4048
LibClamAV debug: /tmp/clamav-462851ba33b53ab50d257fe9274b4048/main.ndb
loaded
LibClamAV debug: /tmp/clamav-462851ba33b53ab50d257fe9274b4048/main.db loaded
LibClamAV debug: /tmp/clamav-462851ba33b53ab50d257fe9274b4048/main.zmd
loaded
LibClamAV debug: cli_loadhdb: Initializing MD5 list structure
LibClamAV debug: /tmp/clamav-462851ba33b53ab50d257fe9274b4048/main.fp loaded
LibClamAV debug: /tmp/clamav-462851ba33b53ab50d257fe9274b4048/main.hdb
loaded
LibClamAV debug: in cli_bm_init()
LibClamAV debug: BM: Number of indexes = 63744
LibClamAV debug: /tmp/clamav-462851ba33b53ab50d257fe9274b4048/main.mdb
loaded
LibClamAV debug: /var/lib/clamav/main.cvd loaded
LibClamAV debug: /var/lib/clamav/MSRBL-Images.hdb loaded
LibClamAV debug: /var/lib/clamav/scam.ndb loaded
LibClamAV debug: /var/lib/clamav/MSRBL-SPAM.ndb loaded
LibClamAV debug: cli_loaddbdir: Acquiring dbdir lock
LibClamAV debug: Loading databases from /var/lib/clamav/daily.inc
LibClamAV debug: /var/lib/clamav/daily.inc/daily.cfg loaded
LibClamAV debug: /var/lib/clamav/daily.inc/daily.ndb loaded
LibClamAV debug: /var/lib/clamav/daily.inc/daily.mdb loaded
LibClamAV debug: /var/lib/clamav/daily.inc/daily.fp loaded
LibClamAV debug: Loading regex_list
LibClamAV debug: regex_list: Initialising AC pattern matcher
LibClamAV debug: Building regex list
LibClamAV debug: /var/lib/clamav/daily.inc/daily.wdb loaded
LibClamAV debug: /var/lib/clamav/daily.inc/daily.mdu skipped
LibClamAV debug: /var/lib/clamav/daily.inc/daily.zmd loaded
LibClamAV debug: /var/lib/clamav/daily.inc/daily.db loaded
LibClamAV debug: /var/lib/clamav/daily.inc/daily.hdu skipped
LibClamAV debug: /tmp/clamav-462851ba33b53ab50d257fe9274b4048/main.zmd
loaded
LibClamAV debug: cli_loadhdb: Initializing MD5 list structure
LibClamAV debug: /tmp/clamav-462851ba33b53ab50d257fe9274b4048/main.fp loaded
LibClamAV debug: /tmp/clamav-462851ba33b53ab50d257fe9274b4048/main.hdb
loaded
LibClamAV debug: in cli_bm_init()
LibClamAV debug: BM: Number of indexes = 63744
LibClamAV debug: /tmp/clamav-462851ba33b53ab50d257fe9274b4048/main.mdb
loaded
LibClamAV debug: /var/lib/clamav/main.cvd loaded
LibClamAV debug: /var/lib/clamav/MSRBL-Images.hdb loaded
LibClamAV debug: /var/lib/clamav/scam.ndb loaded
LibClamAV debug: /var/lib/clamav/MSRBL-SPAM.ndb loaded
LibClamAV debug: cli_loaddbdir: Acquiring dbdir lock
LibClamAV debug: Loading databases from /var/lib/clamav/daily.inc
LibClamAV debug: /var/lib/clamav/daily.inc/daily.cfg loaded
LibClamAV debug: /var/lib/clamav/daily.inc/daily.ndb loaded
LibClamAV debug: /var/lib/clamav/daily.inc/daily.mdb loaded
LibClamAV debug: /var/lib/clamav/daily.inc/daily.fp loaded
LibClamAV debug: Loading regex_list
LibClamAV debug: regex_list: Initialising AC pattern matcher
LibClamAV debug: Building regex list
LibClamAV debug: /var/lib/clamav/daily.inc/daily.wdb loaded
LibClamAV debug: /var/lib/clamav/daily.inc/daily.mdu skipped
LibClamAV debug: /var/lib/clamav/daily.inc/daily.zmd loaded
LibClamAV debug: /var/lib/clamav/daily.inc/daily.db loaded
LibClamAV debug: /var/lib/clamav/daily.inc/daily.hdu skipped
LibClamAV debug: Loading regex_list
LibClamAV debug: regex_list: Initialising AC pattern matcher
LibClamAV debug: Building regex list
LibClamAV debug: /var/lib/clamav/daily.inc/daily.pdb loaded
LibClamAV debug: /var/lib/clamav/daily.inc/daily.ndu skipped
LibClamAV debug: /var/lib/clamav/daily.inc/daily.hdb loaded
LibClamAV debug: Dynamic engine configuration settings:
LibClamAV debug: --------------------------------------
LibClamAV debug: Module PE: On
LibClamAV debug: * Submodule PARITE: On
LibClamAV debug: * Submodule KRIZ: On
LibClamAV debug: * Submodule MAGISTR: On
LibClamAV debug: * Submodule POLIPOS: On
LibClamAV debug: * Submodule MD5SECT: On
LibClamAV debug: * Submodule UPX: On
LibClamAV debug: * Submodule FSG: On
LibClamAV debug: * Submodule SUE: On
LibClamAV debug: * Submodule PETITE: On
LibClamAV debug: parseMimeHeader: cmd='Content-Transfer-Encoding', arg='
quoted-printable'
LibClamAV debug: messageSetEncoding: 'quoted-printable'
LibClamAV debug: Encoding type 1 is "quoted-printable"
LibClamAV debug: Multipart 0: End of header information
LibClamAV debug: boundaryStart: found
----=_NextPart_000_0003_01C7FB96.A4446380 in
------=_NextPart_000_0003_01C7FB96.A4446380
LibClamAV debug: Part 0 has 213 lines, rc = 1
LibClamAV debug: Mixed message part 0 is of type 6
LibClamAV debug: Mixed message text part disposition ""
LibClamAV debug: Mime subtype "html"
LibClamAV debug: messageToBlob
LibClamAV debug: messageExport: numberOfEncTypes == 1
LibClamAV debug: messageExport: enctype 0 is 1
LibClamAV debug: Attachment sent with no filename
LibClamAV debug: messageAddArgument, arg='name=attachment'
LibClamAV debug: blobSetFilename: attachment
LibClamAV debug: Exported 9176 bytes using enctype 1
LibClamAV debug: getHrefs: calling html_normalise_mem
LibClamAV debug: blobClose: recovered 4075 bytes from 4096
LibClamAV debug: blobClose: recovered 4086 bytes from 4096
LibClamAV debug: getHrefs: html_normalise_mem returned
LibClamAV debug: Phishcheck:Checking url
mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED]
LibClamAV debug: Phishing: looking up in whitelist:
mailto:[EMAIL PROTECTED]:[EMAIL PROTECTED]; host-only:0
LibClamAV debug: Looking up in regex_list:
mailto:[EMAIL PROTECTED]:[EMAIL PROTECTED]/
LibClamAV debug: Lookup result: not in regex list
LibClamAV debug: Looking up in regex_list:
mailto:[EMAIL PROTECTED]:[EMAIL PROTECTED]
LibClamAV debug: Lookup result: not in regex list
LibClamAV debug: Looking up in regex_list: hotmail.com
LibClamAV debug: Lookup result: not in regex list
LibClamAV debug: Phishcheck: Phishing scan result: URL is mailto
LibClamAV debug: Phishcheck:Checking url
http://www.cafemessenger.com?ocid=TXT_TAGLM_SeptWLtagline->Play now!
LibClamAV debug: Phishing: looking up in whitelist:
http://www.cafemessenger.com?ocid=TXT_TAGLM_SeptWLtagline:playnow!;
host-only:0
LibClamAV debug: Looking up in regex_list:
http://www.cafemessenger.com?ocid=TXT_TAGLM_SeptWLtagline:playnow!/
LibClamAV debug: Lookup result: not in regex list
LibClamAV debug: Looking up in regex_list:
http://www.cafemessenger.com?ocid=TXT_TAGLM_SeptWLtagline:playnow!
LibClamAV debug: Lookup result: not in regex list
LibClamAV debug: Looking up in regex_list: playnow!
LibClamAV debug: Lookup result: not in regex list
LibClamAV debug: Phishcheck: Phishing scan result: Host not listed in
.pdb -> not checked
LibClamAV debug: blobDestroy
LibClamAV debug: blobDestroy
LibClamAV debug: blobDestroy
LibClamAV debug: Add arguments ' name="CALPIN~1.PDF"'
LibClamAV debug: messageAddArgument, arg='name=CALPIN~1.PDF'
LibClamAV debug: Multipart 0: About to parse folded header
'Content-Transfer-Encoding: base64'
LibClamAV debug: parseEmailHeader 'Content-Transfer-Encoding: base64'
LibClamAV debug: parseMimeHeader: cmd='Content-Transfer-Encoding', arg='
base64'
LibClamAV debug: messageSetEncoding: 'base64'
LibClamAV debug: Encoding type 1 is "base64"
LibClamAV debug: Multipart 0: About to parse folded header
'Content-Disposition: attachment; filename="CALPIN~1.PDF"'
LibClamAV debug: parseEmailHeader 'Content-Disposition: attachment;
filename="CALPIN~1.PDF"'
LibClamAV debug: parseMimeHeader: cmd='Content-Disposition', arg='
attachment; filename="CALPIN~1.PDF"'
LibClamAV debug: messageAddArgument, arg='filename="CALPIN~1.PDF"'
LibClamAV debug: Multipart 0: End of header information
LibClamAV debug: boundaryEnd: found
----=_NextPart_000_0003_01C7FB96.A4446380 in -
LibClamAV debug: Part 0 has 197208 lines, rc = 1
LibClamAV debug: Mixed message part 0 is of type 1
LibClamAV debug: messageToFileblob
LibClamAV debug: messageExport: numberOfEncTypes == 1
LibClamAV debug: messageExport: enctype 0 is 2
LibClamAV debug: blobSetFilename: CALPIN~1.PDF
LibClamAV debug: fileblobSetFilename:
mkstemp(/tmp/clamav-eb8eb5aef703357a03e39948da01df37/CALPIN~1.PDFXXXXXX)
LibClamAV debug: Creating
/tmp/clamav-eb8eb5aef703357a03e39948da01df37/CALPIN~1.PDFvNmuhb
LibClamAV debug: Exported 11240763 bytes using enctype 2
LibClamAV debug: 3 trailing bytes to export
LibClamAV debug: base64chars = 3 (@ @ 4)
LibClamAV debug: fileblobDestroy: CALPIN~1.PDF
LibClamAV debug: Now read in part 0
LibClamAV debug: Empty part
LibClamAV debug: The message has 1 parts
LibClamAV debug: Find out the multipart type (mixed)
LibClamAV debug: Mixed message with 1 parts
LibClamAV debug: Mixed message part 0 is of type 0
LibClamAV debug: No mime headers found in multipart part 0
LibClamAV debug: No plain text alternative
LibClamAV debug: Adding to non mime-part
LibClamAV debug: cli_mbox returning 0
*LibClamAV debug: Recognized PDF document file
LibClamAV debug: in cli_pdf(/tmp/clamav-f3c60fa34c60deb5f2e9e034592bc3ef)
LibClamAV debug: cli_pdf: scanning 11240766 bytes
LibClamAV debug: Length is in indirect obj 11
LibClamAV debug: length in '11 0 obj' 3734
LibClamAV debug: length 3734, calculated_streamlen 3734 isFlate 0
isASCII85 0
LibClamAV debug: cli_pdf: writing 3734 bytes from the stream
LibClamAV debug: cli_pdf: extracted to
/tmp/clamav-f3c60fa34c60deb5f2e9e034592bc3ef/pdfB34W2x
LibClamAV debug: Mixed message part 0 is of type 0
LibClamAV debug: No mime headers found in multipart part 0
LibClamAV debug: No plain text alternative
LibClamAV debug: Adding to non mime-part
LibClamAV debug: cli_mbox returning 0
LibClamAV debug: Recognized PDF document file
LibClamAV debug: in cli_pdf(/tmp/clamav-f3c60fa34c60deb5f2e9e034592bc3ef)
LibClamAV debug: cli_pdf: scanning 11240766 bytes
LibClamAV debug: Length is in indirect obj 11
LibClamAV debug: length in '11 0 obj' 3734
LibClamAV debug: length 3734, calculated_streamlen 3734 isFlate 0
isASCII85 0
LibClamAV debug: cli_pdf: writing 3734 bytes from the stream
LibClamAV debug: cli_pdf: extracted to
/tmp/clamav-f3c60fa34c60deb5f2e9e034592bc3ef/pdfB34W2x
LibClamAV debug: Length is in indirect obj 13
LibClamAV debug: length in '13 0 obj' 163
LibClamAV debug: length 163, calculated_streamlen 163 isFlate 1 isASCII85 0
LibClamAV debug: cli_pdf: flatedecode 163 bytes
LibClamAV debug: cli_pdf: flatedecode in=163 out=265 ratio 1 (max 250)
LibClamAV debug: cli_pdf: extracted to
/tmp/clamav-f3c60fa34c60deb5f2e9e034592bc3ef/pdfz9k8QU
LibClamAV debug: Length is in indirect obj 17
LibClamAV debug: length in '17 0 obj' 2029
LibClamAV debug: length 2029, calculated_streamlen 2029 isFlate 1
isASCII85 0
LibClamAV debug: cli_pdf: flatedecode 2029 bytes
LibClamAV debug: cli_pdf: flatedecode in=2029 out=6891 ratio 3 (max 250)
LibClamAV debug: cli_pdf: extracted to
/tmp/clamav-f3c60fa34c60deb5f2e9e034592bc3ef/pdfBefXHh
LibClamAV debug: Length is in indirect obj 21
LibClamAV debug: length in '21 0 obj' 384
LibClamAV debug: length 384, calculated_streamlen 384 isFlate 0 isASCII85 0
LibClamAV debug: cli_pdf: writing 384 bytes from the stream
LibClamAV debug: cli_pdf: extracted to
/tmp/clamav-f3c60fa34c60deb5f2e9e034592bc3ef/pdfhHoqBE
LibClamAV debug: Length is in indirect obj 23
LibClamAV debug: length in '23 0 obj' 380
LibClamAV debug: length 380, calculated_streamlen 380 isFlate 0 isASCII85 0
LibClamAV debug: cli_pdf: writing 380 bytes from the stream
LibClamAV debug: cli_pdf: extracted to
/tmp/clamav-f3c60fa34c60deb5f2e9e034592bc3ef/pdfJ8axx1
LibClamAV debug: Length is in indirect obj 25
LibClamAV debug: length in '25 0 obj' 46
LibClamAV debug: length 46, calculated_streamlen 46 isFlate 1 isASCII85 0
LibClamAV debug: cli_pdf: flatedecode 46 bytes
LibClamAV debug: cli_pdf: flatedecode in=46 out=40 ratio 0 (max 250)
LibClamAV debug: cli_pdf: extracted to
/tmp/clamav-f3c60fa34c60deb5f2e9e034592bc3ef/pdfPm2hwo
LibClamAV debug: Length is in indirect obj 27
LibClamAV debug: length in '27 0 obj' 345
LibClamAV debug: length 345, calculated_streamlen 345 isFlate 0 isASCII85 0
LibClamAV debug: cli_pdf: writing 345 bytes from the stream
LibClamAV debug: cli_pdf: extracted to
/tmp/clamav-f3c60fa34c60deb5f2e9e034592bc3ef/pdf9pHFxL
LibClamAV debug: Length is in indirect obj 29
LibClamAV debug: length in '29 0 obj' 44
LibClamAV debug: length 44, calculated_streamlen 44 isFlate 1 isASCII85 0
LibClamAV debug: cli_pdf: flatedecode 44 bytes
LibClamAV debug: cli_pdf: flatedecode in=44 out=41 ratio 0 (max 250)
LibClamAV debug: cli_pdf: extracted to
/tmp/clamav-f3c60fa34c60deb5f2e9e034592bc3ef/pdfvaJFB8
LibClamAV debug: Length is in indirect obj 31
LibClamAV debug: length in '31 0 obj' 371
LibClamAV debug: length 371, calculated_streamlen 371 isFlate 0 isASCII85 0
LibClamAV debug: cli_pdf: writing 371 bytes from the stream
LibClamAV debug: cli_pdf: extracted to
/tmp/clamav-f3c60fa34c60deb5f2e9e034592bc3ef/pdf5C4mIv
LibClamAV debug: Length is in indirect obj 33
LibClamAV debug: length in '33 0 obj' 47
LibClamAV debug: length 47, calculated_streamlen 47 isFlate 1 isASCII85 0
LibClamAV debug: cli_pdf: flatedecode 47 bytes
LibClamAV debug: cli_pdf: flatedecode in=47 out=41 ratio 0 (max 250)
LibClamAV debug: cli_pdf: extracted to
/tmp/clamav-f3c60fa34c60deb5f2e9e034592bc3ef/pdfd51GRS
LibClamAV debug: Length is in indirect obj 35
LibClamAV debug: length in '35 0 obj' 362
LibClamAV debug: length 362, calculated_streamlen 362 isFlate 0 isASCII85 0
LibClamAV debug: cli_pdf: writing 362 bytes from the stream
LibClamAV debug: cli_pdf: extracted to
/tmp/clamav-f3c60fa34c60deb5f2e9e034592bc3ef/pdfFq0C3f
LibClamAV debug: Length is in indirect obj 37
LibClamAV debug: length in '37 0 obj' 49
LibClamAV debug: length 49, calculated_streamlen 49 isFlate 1 isASCII85 0
LibClamAV debug: cli_pdf: flatedecode 49 bytes
LibClamAV debug: cli_pdf: flatedecode in=49 out=43 ratio 0 (max 250)
LibClamAV debug: cli_pdf: extracted to
/tmp/clamav-f3c60fa34c60deb5f2e9e034592bc3ef/pdfFtEbiD
LibClamAV debug: Length is in indirect obj 39
LibClamAV debug: length in '39 0 obj' 374
LibClamAV debug: length 374, calculated_streamlen 374 isFlate 0 isASCII85 0
LibClamAV debug: cli_pdf: writing 374 bytes from the stream
LibClamAV debug: cli_pdf: extracted to
/tmp/clamav-f3c60fa34c60deb5f2e9e034592bc3ef/pdf1knmz0
LibClamAV debug: Length is in indirect obj 41
LibClamAV debug: length in '41 0 obj' 49
LibClamAV debug: length 49, calculated_streamlen 49 isFlate 1 isASCII85 0
LibClamAV debug: cli_pdf: flatedecode 49 bytes
LibClamAV debug: cli_pdf: flatedecode in=49 out=45 ratio 0 (max 250)
*LibClamAV debug: cli_pdf: extracted to
/tmp/clamav-f3c60fa34c60deb5f2e9e034592bc3ef/pdfpAYeTn
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
