OS Manuals

/usr/bin/sigtool

ClamAV command-line scanner and utils

From clamav-1.4-scanner 1.4.3-r3 (os), captured 2026-11-05 by running sigtool --help (exit 0). permalink

Also provided by 4 other package versions
                      Clam AntiVirus: Signature Tool 1.4.3
           By The ClamAV Team: https://www.clamav.net/about.html#credits
           (C) 2024 Cisco Systems, Inc.

    sigtool [options]

    --help                 -h              Show this help
    --version              -V              Print version number and exit
    --quiet                                Be quiet, output only error messages
    --debug                                Enable debug messages
    --stdout                               Write to stdout instead of stderr. Does not affect 'debug' messages.
    --hex-dump                             Convert data from stdin to a hex
                                           string and print it on stdout
    --md5 [FILES]                          Generate MD5 checksum from stdin
                                           or MD5 sigs for FILES
    --sha1 [FILES]                         Generate SHA1 checksum from stdin
                                           or SHA1 sigs for FILES
    --sha256 [FILES]                       Generate SHA256 checksum from stdin
                                           or SHA256 sigs for FILES
    --mdb [FILES]                          Generate .mdb (section hash) sigs
    --imp [FILES]                          Generate .imp (import table hash) sigs
    --fuzzy-img FILE(S)                    Generate image fuzzy hash for each file
    --html-normalise=FILE                  Create normalised parts of HTML file
    --ascii-normalise=FILE                 Create normalised text file from ascii source
    --utf16-decode=FILE                    Decode UTF16 encoded files
    --info=FILE            -i FILE         Print database information
    --build=NAME [cvd] -b NAME             Build a CVD file
    --max-bad-sigs=NUMBER                  Maximum number of mismatched signatures
                                           When building a CVD. Default: 3000
    --flevel=FLEVEL                        Specify a custom flevel.
                                           Default: 213
    --cvd-version=NUMBER                   Specify the version number to use for
                                           the build. Default is to use the value+1
                                           from the current CVD in --datadir.
                                           If no datafile is found the default
                                           behaviour is to prompt for a version
                                           number, this switch will prevent the
                                           prompt.  NOTE: If a CVD is found in the
                                           --datadir its version+1 is used and
                                           this value is ignored.
    --no-cdiff                             Don't generate .cdiff file
    --unsigned                             Create unsigned database file (.cud)
    --hybrid                               Create a hybrid (standard and bytecode) database file
    --print-certs=FILE                     Print Authenticode details from a PE
    --server=ADDR                          ClamAV Signing Service address
    --datadir=DIR                          Use DIR as default database directory
    --unpack=FILE          -u FILE         Unpack a CVD/CLD file
    --unpack-current=SHORTNAME             Unpack local CVD/CLD into cwd
    --list-sigs[=FILE]     -l[FILE]        List signature names
    --find-sigs=REGEX      -fREGEX         Find signatures matching REGEX
    --decode-sigs                          Decode signatures from stdin
    --test-sigs=DATABASE TARGET_FILE       Test signatures from DATABASE against
                                           TARGET_FILE
    --vba=FILE                             Extract VBA/Word6 macro code
    --vba-hex=FILE                         Extract Word6 macro code with hex values
    --diff=OLD NEW         -d OLD NEW      Create diff for OLD and NEW CVDs
    --compare=OLD NEW      -c OLD NEW      Show diff between OLD and NEW files in
                                           cdiff format
    --run-cdiff=FILE       -r FILE         Execute update script FILE in cwd
    --verify-cdiff=DIFF CVD/CLD            Verify DIFF against CVD/CLD
    --tempdir=DIRECTORY                    Create temporary files in DIRECTORY
    --leave-temps[=yes/no(*)]              Do not remove temporary files
Options (40)
OptionDescriptionSource
--help-h Show this helphelp
--version-V Print version number and exithelp
--quietBe quiet, output only error messageshelp
--debugEnable debug messageshelp
--stdoutWrite to stdout instead of stderr.help
--hex-dumpConvert data from stdin to a hex string and print it on stdouthelp
--md5 FILESGenerate MD5 checksum from stdin or MD5 sigs for FILEShelp
--sha1 FILESGenerate SHA1 checksum from stdin or SHA1 sigs for FILEShelp
--sha256 FILESGenerate SHA256 checksum from stdin or SHA256 sigs for FILEShelp
--mdb FILESGenerate .mdb (section hash) sigshelp
--imp FILESGenerate .imp (import table hash) sigshelp
--fuzzy-img FILE(S)Generate image fuzzy hash for each filehelp
--html-normalise FILECreate normalised parts of HTML filehelp
--ascii-normalise FILECreate normalised text file from ascii sourcehelp
--utf16-decode FILEDecode UTF16 encoded fileshelp
--info FILE-i FILE Print database informationhelp
--build NAMEBuild a CVD filehelp
--max-bad-sigs NUMBERMaximum number of mismatched signatures When building a CVD.help
--flevel FLEVELSpecify a custom flevel.help
--cvd-version NUMBERSpecify the version number to use for the build.help
--no-cdiffDon't generate .cdiff filehelp
--unsignedCreate unsigned database file (.cud)help
--hybridCreate a hybrid (standard and bytecode) database filehelp
--print-certs FILEPrint Authenticode details from a PEhelp
--server ADDRClamAV Signing Service addresshelp
--datadir DIRUse DIR as default database directoryhelp
--unpack FILE-u FILE Unpack a CVD/CLD filehelp
--unpack-current SHORTNAMEUnpack local CVD/CLD into cwdhelp
--list-sigs FILE-l[FILE] List signature nameshelp
--find-sigs REGEX-fREGEX Find signatures matching REGEXhelp
--decode-sigsDecode signatures from stdinhelp
--test-sigs DATABASETest signatures from DATABASE against TARGET_FILEhelp
--vba FILEExtract VBA/Word6 macro codehelp
--vba-hex FILEExtract Word6 macro code with hex valueshelp
--diff OLD-d OLD NEW Create diff for OLD and NEW CVDshelp
--compare OLD-c OLD NEW Show diff between OLD and NEW files in cdiff formathelp
--run-cdiff FILE-r FILE Execute update script FILE in cwdhelp
--verify-cdiff DIFFVerify DIFF against CVD/CLDhelp
--tempdir DIRECTORYCreate temporary files in DIRECTORYhelp
--leave-temps yes/no(*)Do not remove temporary fileshelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.