OS Manuals

/usr/bin/sigtool

ClamAV command-line scanner and utils

From clamav-1.4-scanner 1.4.6-r7 (enterprise-packages), captured 2026-11-08 by running sigtool --help (exit 0). permalink

                      Clam AntiVirus: Signature Tool 1.4.6
           By The ClamAV Team: https://www.clamav.net/about.html#credits
           (C) 2024 Cisco Systems, Inc.

    sigtool [options]

    --help                 -h              Show this help
    --version              -V              Print version number and exit
    --quiet                                Be quiet, output only error messages
    --debug                                Enable debug messages
    --stdout                               Write to stdout instead of stderr. Does not affect 'debug' messages.
    --hex-dump                             Convert data from stdin to a hex
                                           string and print it on stdout
    --md5 [FILES]                          Generate MD5 checksum from stdin
                                           or MD5 sigs for FILES
    --sha1 [FILES]                         Generate SHA1 checksum from stdin
                                           or SHA1 sigs for FILES
    --sha256 [FILES]                       Generate SHA256 checksum from stdin
                                           or SHA256 sigs for FILES
    --mdb [FILES]                          Generate .mdb (section hash) sigs
    --imp [FILES]                          Generate .imp (import table hash) sigs
    --fuzzy-img FILE(S)                    Generate image fuzzy hash for each file
    --html-normalise=FILE                  Create normalised parts of HTML file
    --ascii-normalise=FILE                 Create normalised text file from ascii source
    --utf16-decode=FILE                    Decode UTF16 encoded files
    --info=FILE            -i FILE         Print database information
    --build=NAME [cvd] -b NAME             Build a CVD file
    --max-bad-sigs=NUMBER                  Maximum number of mismatched signatures
                                           When building a CVD. Default: 3000
    --flevel=FLEVEL                        Specify a custom flevel.
                                           Default: 216
    --cvd-version=NUMBER                   Specify the version number to use for
                                           the build. Default is to use the value+1
                                           from the current CVD in --datadir.
                                           If no datafile is found the default
                                           behaviour is to prompt for a version
                                           number, this switch will prevent the
                                           prompt.  NOTE: If a CVD is found in the
                                           --datadir its version+1 is used and
                                           this value is ignored.
    --no-cdiff                             Don't generate .cdiff file
    --unsigned                             Create unsigned database file (.cud)
    --hybrid                               Create a hybrid (standard and bytecode) database file
    --print-certs=FILE                     Print Authenticode details from a PE
    --server=ADDR                          ClamAV Signing Service address
    --datadir=DIR                          Use DIR as default database directory
    --unpack=FILE          -u FILE         Unpack a CVD/CLD file
    --unpack-current=SHORTNAME             Unpack local CVD/CLD into cwd
    --list-sigs[=FILE]     -l[FILE]        List signature names
    --find-sigs=REGEX      -fREGEX         Find signatures matching REGEX
    --decode-sigs                          Decode signatures from stdin
    --test-sigs=DATABASE TARGET_FILE       Test signatures from DATABASE against
                                           TARGET_FILE
    --vba=FILE                             Extract VBA/Word6 macro code
    --vba-hex=FILE                         Extract Word6 macro code with hex values
    --diff=OLD NEW         -d OLD NEW      Create diff for OLD and NEW CVDs
    --compare=OLD NEW      -c OLD NEW      Show diff between OLD and NEW files in
                                           cdiff format
    --run-cdiff=FILE       -r FILE         Execute update script FILE in cwd
    --verify-cdiff=DIFF CVD/CLD            Verify DIFF against CVD/CLD
    --tempdir=DIRECTORY                    Create temporary files in DIRECTORY
    --leave-temps[=yes/no(*)]              Do not remove temporary files
Options (40)
OptionDescriptionSource
--help, -hOutput help information and exit.help + man
--version, -V-V Print version number and exithelp + man
--quietBe quiet - output only error messages.help + man
--debugEnable debug messageshelp
--stdoutWrite to stdout instead of stderr.help + man
--hex-dumpConvert data from stdin to a hex string and print it on stdouthelp + man
--md5 FILESGenerate MD5 checksum from stdin or MD5 sigs for FILEShelp
--sha1 FILESGenerate SHA1 checksum from stdin or SHA1 sigs for FILEShelp
--sha256 FILESGenerate SHA256 checksum from stdin or SHA256 sigs for FILEShelp
--mdb FILESGenerate .mdb (section hash) sigshelp
--imp FILESGenerate .imp (import table hash) sigshelp
--fuzzy-img FILE(S)Generate image fuzzy hash for each filehelp
--html-normalise FILECreate normalised HTML files comment.html, nocomment.html, and script.html in current working directory.help + man
--ascii-normalise FILECreate normalised text file from ascii sourcehelp
--utf16-decode FILEDecode UTF16 encoded fileshelp + man
--info, -i FILEPrint a CVD information and verify MD5 and a digital signature.help + man
--build, -b NAMEBuild a CVD file.help + man
--max-bad-sigs NUMBERMaximum number of mismatched signatures When building a CVD.help + man
--flevel FLEVELSpecify a custom flevel.help + man
--cvd-version NUMBERSpecify the version number to use for the build.help + man
--no-cdiffDon't create a .cdiff file when building a new database file.help + man
--unsignedCreate a database file without digital signatures (.cud).help + man
--hybridCreate a hybrid (standard and bytecode) database filehelp
--print-certs FILEPrint Authenticode details from a PE file.help + man
--server ADDRClamAV Signing Service address (for virus database maintainers only).help + man
--datadir DIRUse DIR as the default database directory for all operations.help + man
--unpack, -u FILEUnpack FILE (CVD) to a current directory.help + man
--unpack-current SHORTNAMEUnpack a local CVD file (main or daily) to current directory.help + man
--list-sigs FILE-l[FILE] List signature nameshelp
--find-sigs, -fREGEX REGEXFind and display signatures from the local database directory which match the given REGEX.help + man
--decode-sigs REGEXDecode signatures read from the standard input (eg.help + man
--test-sigs DATABASETest all signatures from DATABASE against TARGET_FILE.help + man
--vba FILEExtract VBA/Word6 macros from given MS Office document.help + man
--vba-hex FILEExtract Word6 macros from given MS Office document and display the corresponding hex values.help + man
--diff, -d OLDCreate a diff file for OLD and NEW CVDs/INCDIRs.help + man
--compare, -c OLDThis command will compare two text files and print differences in a cdiff format.help + man
--run-cdiff, -r FILEExecute update script FILE in current directory.help + man
--verify-cdiff DIFFVerify DIFF against CVD/CLDhelp
--tempdir DIRECTORYCreate temporary files in DIRECTORY.help + man
--leave-temps yes/no(*)Do not remove temporary files.help + man

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.