GIF89a; EcchiShell v1.0
//proc/self/root/usr/local/maldetect/

500 If FILE is specified, paths will be extracted from file, line spaced If PATHS are specified, must be comma spaced list, NO WILDCARDS! e.g: maldet \fB\-\-monitor\fR users e.g: maldet \fB\-\-monitor\fR \fI\,/usr/local/maldetect/monitor_paths\/\fP e.g: maldet \fB\-\-monitor\fR \fI\,/home/mike\/\fP,/home/ashton .HP \fB\-k\fR, \fB\-\-kill\-monitor\fR .IP Terminate inotify monitoring service .HP \fB\-c\fR, \fB\-\-checkout\fR FILE .IP Upload suspected malware to rfxn.com for review & hashing into signatures .HP \fB\-l\fR, \fB\-\-log\fR .IP View maldet log file events .HP \fB\-e\fR, \fB\-\-report\fR SCANID email .IP View scan report of most recent scan or of a specific SCANID and optionally e\-mail the report to a supplied e\-mail address e.g: maldet \fB\-\-report\fR e.g: maldet \fB\-\-report\fR list e.g: maldet \fB\-\-report\fR 050910\-1534.21135 e.g: maldet \fB\-\-report\fR SCANID user@domain.com .HP \fB\-s\fR, \fB\-\-restore\fR FILE|SCANID .IP Restore file from quarantine queue to orginal path or restore all items from a specific SCANID e.g: maldet \fB\-\-restore\fR \fI\,/usr/local/maldetect/quarantine/config.php.23754\/\fP e.g: maldet \fB\-\-restore\fR 050910\-1534.21135 .HP \fB\-q\fR, \fB\-\-quarantine\fR SCANID .IP Quarantine all malware from report SCANID e.g: maldet \fB\-\-quarantine\fR 050910\-1534.21135 .HP \fB\-n\fR, \fB\-\-clean\fR SCANID .IP Try to clean & restore malware hits from report SCANID e.g: maldet \fB\-\-clean\fR 050910\-1534.21135 .HP \fB\-U\fR, \fB\-\-user\fR USER .IP Set execution under specified user, ideal for restoring from user quarantine or to view user reports. e.g: maldet \fB\-\-user\fR nobody \fB\-\-report\fR e.g: maldet \fB\-\-user\fR nobody \fB\-\-restore\fR 050910\-1534.21135 .HP \fB\-co\fR, \fB\-\-config\-option\fR VAR1=VALUE,VAR2=VALUE,VAR3=VALUE .IP Set or redefine the value of maldetect.conf config options e.g: maldet \fB\-\-config\-option\fR email_addr=you@domain.com,quarantine_hits=1 .HP \fB\-p\fR, \fB\-\-purge\fR .IP Clear logs, quarantine queue, session and temporary data. .SH LICENSE This program may be freely redistributed under the terms of the GNU GPL v2 .SH AUTHORS .PP (C) 2002\-2017, R\-fx Networks (C) 2017, Ryan MacDonald