<182>1 2024-10-30T15:06:43+01:00 SVRFW01DE.localdomain freshclam 79749 - [meta sequenceId="1"] Update process terminated<183>1 2024-10-30T15:06:58+01:00 SVRFW01DE.localdomain clamd 56583 - [meta sequenceId="2"] Waiting for all threads to finish<182>1 2024-10-30T15:08:04+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="1"] Received 0 file descriptor(s) from systemd.<182>1 2024-10-30T15:08:04+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="2"] clamd daemon 1.4.1 (OS: FreeBSD, ARCH: amd64, CPU: amd64)<182>1 2024-10-30T15:08:04+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="3"] Log file size limited to 1048576 bytes.<182>1 2024-10-30T15:08:04+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="4"] Reading databases from /var/db/clamav<182>1 2024-10-30T15:08:04+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="5"] Not loading PUA signatures.<182>1 2024-10-30T15:08:04+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="6"] Bytecode: Security mode set to "TrustSigned".<182>1 2024-10-30T15:08:29+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="7"] Loaded 8699262 signatures.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="8"] TCP: Bound to [127.0.0.1]:3310<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="9"] TCP: Setting connection queue length to 200<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="10"] LOCAL: Unix socket file /var/run/clamav/clamd.sock<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="11"] LOCAL: Setting connection queue length to 200<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="12"] Limits: Global time limit set to 120000 milliseconds.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="13"] Limits: Global size limit set to 104857600 bytes.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="14"] Limits: File size limit set to 26214400 bytes.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="15"] Limits: Recursion level limit set to 16.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="16"] Limits: Files limit set to 10000.<183>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="17"] Limits: Core-dump limit is 9223372036854775807.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="18"] Limits: MaxEmbeddedPE limit set to 41943040 bytes.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="19"] Limits: MaxHTMLNormalize limit set to 41943040 bytes.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="20"] Limits: MaxHTMLNoTags limit set to 8388608 bytes.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="21"] Limits: MaxScriptNormalize limit set to 20971520 bytes.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="22"] Limits: MaxZipTypeRcg limit set to 1048576 bytes.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="23"] Limits: MaxPartitions limit set to 50.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="24"] Limits: MaxIconsPE limit set to 100.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="25"] Limits: MaxRecHWP3 limit set to 16.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="26"] Limits: PCREMatchLimit limit set to 100000.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="27"] Limits: PCRERecMatchLimit limit set to 2000.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="28"] Limits: PCREMaxFileSize limit set to 104857600.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="29"] Archive support enabled.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="30"] Image (graphics) scanning support enabled.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="31"] Detection using image fuzzy hash enabled.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="32"] Alerting of encrypted archives enabled.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="33"] AlertExceedsMax heuristic detection disabled.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="34"] Heuristic alerts enabled.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="35"] Portable Executable support enabled.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="36"] ELF support enabled.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="37"] Mail files support enabled.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="38"] OLE2 support enabled.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="39"] OLE2: Alerting on all VBA macros.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="40"] PDF support enabled.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="41"] SWF support enabled.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="42"] HTML support enabled.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="43"] XMLDOCS support enabled.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="44"] HWP3 support enabled.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="45"] OneNote support enabled.<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="46"] Self checking every 600 seconds.<183>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="47"] Listening daemon: PID: 7073<183>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="48"] MaxQueue set to: 100<182>1 2024-10-30T15:08:33+01:00 SVRFW01DE.localdomain clamd 7073 - [meta sequenceId="49"] Set stacksize to 2162688<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62220 - [meta sequenceId="50"] Current working dir is /var/db/clamav/<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62220 - [meta sequenceId="51"] Last cf-ray not present in freshclam.dat.<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62220 - [meta sequenceId="52"] Loaded freshclam.dat:<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62220 - [meta sequenceId="53"] version: 1<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62220 - [meta sequenceId="54"] uuid: d1e0e390-c53a-4594-a6ee-5752bff8d00e<182>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="55"] freshclam daemon 1.4.1 (OS: FreeBSD, ARCH: amd64, CPU: amd64)<182>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="56"] ClamAV update process started at Wed Oct 30 15:08:34 2024<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="57"] Current working dir is /var/db/clamav/<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="58"] Querying current.cvd.clamav.net<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="59"] TTL: 1800<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="60"] fc_dns_query_update_info: Software version from DNS: 0.103.12<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="61"] Current working dir is /var/db/clamav/<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="62"] check_for_new_database_version: Local copy of daily found: daily.cld.<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="63"] query_remote_database_version: daily.cvd version from DNS: 27443<182>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="64"] daily.cld database is up-to-date (version: 27443, sigs: 2067465, f-level: 90, builder: raynman)<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="65"] fc_update_database: daily.cld already up-to-date.<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="66"] Current working dir is /var/db/clamav/<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="67"] check_for_new_database_version: Local copy of main found: main.cvd.<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="68"] query_remote_database_version: main.cvd version from DNS: 62<182>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="69"] main.cvd database is up-to-date (version: 62, sigs: 6647427, f-level: 90, builder: sigmgr)<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="70"] fc_update_database: main.cvd already up-to-date.<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="71"] Current working dir is /var/db/clamav/<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="72"] check_for_new_database_version: Local copy of bytecode found: bytecode.cld.<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="73"] query_remote_database_version: bytecode.cvd version from DNS: 335<182>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="74"] bytecode.cld database is up-to-date (version: 335, sigs: 86, f-level: 90, builder: raynman)<183>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="75"] fc_update_database: bytecode.cld already up-to-date.<182>1 2024-10-30T15:08:34+01:00 SVRFW01DE.localdomain freshclam 62493 - [meta sequenceId="76"] --------------------------------------
2024-10-30T15:40:00.982 677 10.10.0.4 TCP_REFRESH_MODIFIED/200 5770 GET https://www.eicar.org/wp.serviceworker - ORIGINAL_DST/89.238.73.97 text/javascript 2024-10-30T15:39:59.209 1923 10.10.0.4 TCP_MISS_ABORTED/000 0 GET https://www.eicar.org/download/eicar_com-zip/? - ORIGINAL_DST/89.238.73.97 - 2024-10-30T15:39:57.287 122 10.10.0.4 NONE_NONE/000 0 CONNECT 89.238.73.97:443 - ORIGINAL_DST/89.238.73.97 - 2024-10-30T15:39:57.285 124 10.10.0.4 NONE_NONE/000 0 CONNECT 89.238.73.97:443 - ORIGINAL_DST/89.238.73.97 -
Wed Oct 30 15:29:41 2024, 90557/35896739057920, Antivirus engine is not available, allow 204Wed Oct 30 15:33:49 2024, 90564/35896739063296, Registry 'virus_scan::engines' does not exist!Wed Oct 30 15:39:57 2024, 90564/35896739063296, Registry 'virus_scan::engines' does not exist!Wed Oct 30 15:39:57 2024, 90564/35896739065088, Registry 'virus_scan::engines' does not exist!Wed Oct 30 15:39:57 2024, 90564/35896739065088, Registry 'virus_scan::engines' does not exist!Wed Oct 30 15:40:00 2024, 90564/35896739065088, Registry 'virus_scan::engines' does not exist!Wed Oct 30 15:40:00 2024, 90564/35896739052544, Registry 'virus_scan::engines' does not exist!Wed Oct 30 15:40:00 2024, 90564/35896739052544, Antivirus engine is not available, allow 204Wed Oct 30 15:50:09 2024, 90564/35896739052544, Registry 'virus_scan::engines' does not exist!Wed Oct 30 15:50:12 2024, 90564/35896739052544, Registry 'virus_scan::engines' does not exist!Wed Oct 30 15:50:14 2024, 90564/35896739052544, Registry 'virus_scan::engines' does not exist!Wed Oct 30 15:50:15 2024, 90564/35896739052544, Registry 'virus_scan::engines' does not exist!