malware: use sendfile for ClamAV TCP