Please note that ClamWin Free Antivirus does not include an on-access real-time scanner. You need to manually scan a file in order to detect a virus or spyware.
The new ClamAV for Windows is the result of a partnership between Immunet Corporation (http://www.immunet.com) and Sourcefire, Inc. (http://www.sourcefire.com). It is designed to provide the ClamAV community with a free Windows-specific Anti-Virus (AV) solution using an advanced Cloud-based protection mechanism.
You can use ClamAV For Windows as a stand-alone, host-based AV solution, or in conjunction with your pre-installed AV solution to provide enhanced detection for the latest malware threats.
Say goodbye to the days of watching AV software drain your memory and processing speed. Immunet’s unique Cloud-based technologies allow the ClamAV application to leverage the power of the Cloud to drive the AV engine. When you use ClamAV for Windows, you save system resources for the tasks they really want to run, like games and business applications.
Detailed Description
ClamAV for Windows utilizes advanced Cloud-based and community-based detection methods. Developed by Immunet, these detection methods leverage the computers of your friends, family and a worldwide global community to harness their collective knowledge for securing your PC. Every time someone in this collective community encounters a threat, everyone else in the community gains protection from that same threat in real time. You no longer have to rely on the isolated security of your current Anti-Virus vendor. You are able to protect your friends and family while being better protected yourself. This is exactly what we designed ClamAV for Windows to do. By providing a fast and light layer of virus detection, and linking everyone in a global community, we harness a security sum that is far greater than its individual parts, we call this Collective Immunity.
Immunet placed ClamAV into their Cloud infrastructure alongside their Ethos detection engine, and several other detection technologies. By combining all these technologies, and utilizing the power of community-based detection, we feel we have the most effective Anti-Virus technology on the market. And it only gets better with every user that installs and utilizes our technology.
Clam AntiVirus ist ein Antivirus Toolkit für Unix das unter der GPL Lizenz steht. Es wurde speziell für das scannen von EMails auf Mailgateways designt. Das Paket stellt eine Reihe von Hilfsmittel zur Verfügung: einen flexiblen und skalierbaren Multi-Threaded Daemon, einen Kommandozeilen Scanner und ein komplexes Programm zur automatischen Aktualisierung über das Internet bereit. Das Herzstück des Paketes ist ein Antivirus-Einheit in Form einer gemeinsam genutzten Bibliothek.
Hier ist eine Liste mit den wichtigsten Funktionen:
# Kommandozeilen Scanner
# performanter Multi-Threaded Daemon mit der Unterstützung von on-access scannen
# Milter-Schnittstellen für Sendmail
# Komplexes Update-Programm für die Datenbank mit Unterstützung für scripted Updates und digitale Signaturen
# Virus Scanner Bibliothek in C
# On-Access Scanning (Linux® and FreeBSD®)
# Mehrmals tägliche Updates der Virusdatenbank (siehe Homepage für die gesamte Anzahl von Signaturen)
# Eingebaute Unterstützung für verschieden Archiv-Formate wie Zip, RAR, Tar, Gzip, Bzip2, OLE2, Cabinet, CHM, BinHex, SIS und andere
# Eingebaute Unterstützung für nahezu alle Mail Dateien Formate
# Eingebaute Unterstützung für ELF executables und Portable Executable Dateien komprimiert mit UPX, FSG, Petite, NsPack, wwpack32, MEW, Upack und verschleiert mit SUE, Y0da Cryptor und anderen
* Eingebaute Unterstützung für populäre Dokumentenformate wie MS Office und MacOffice Dateien, HTML, RTF und PDF
Weitere Details findest Du in der Dokumentation (http://www.clamav.net/doc/latest).
Mon Sep 20 17:09:37 CEST 2010 (tk)
----------------------------------
* V 0.96.3
Mon Sep 20 14:16:59 CEST 2010 (acab)
------------------------------------
* libclamav/nsis/bzlib.cld sys: port upstream fixes for CVE-2010-0405,
check for buggy bzip2 (bb#2230, bb#2231)
Mon Sep 20 14:50:34 EEST 2010 (edwin)
-------------------------------------
* libclamav/pdf.c: Add missing boundscheck to pdf code (bb #2226)
Thu Sep 16 14:37:15 CEST 2010 (tk)
----------------------------------
* clamconf: print information about 3rd party databases
Wed Sep 15 19:00:15 CEST 2010 (tk)
----------------------------------
* sigtool/sigtool.c: print db names in --find-sigs
Wed Sep 15 13:19:12 EEST 2010 (edwin)
-------------------------------------
* libclamav/c++/bytecode2llvm.cpp: workaround crash due to gcc stack alignment requirements (bb #2270)
Fri Sep 10 22:10:33 EEST 2010 (edwin)
-------------------------------------
* libclamav/pdf.c, pe.c, bytecode*: Fix bytecode virusname reporting (bb #2255)
Fri Sep 10 10:52:45 CEST 2010 (acab)
------------------------------------
* clamav-milter/netcode.c: fix error path fd leak when connection succeeds
but ping fails (bb#2259)
Thu Sep 9 22:07:13 EEST 2010 (edwin)
-------------------------------------
* libclamav/c++/bytecode2llvm.cpp: fix __bzero call on darwin 10.
Thu Sep 9 12:30:34 EEST 2010 (edwin)
-------------------------------------
* libclamav/bytecode.c: properly skip bytecodes with long lines.
Wed Sep 8 00:00:18 CEST 2010 (acab)
------------------------------------
* unit_tests: add VI unit tests
Tue Sep 7 16:55:43 CEST 2010 (tk)
----------------------------------
* libclamav: versioninfo hashset was not properly cached (bb#2065)
Thu Sep 2 21:21:58 EEST 2010 (edwin)
-------------------------------------
* libclamav/c++/bytecode2llvm.cpp: fix hung clamd on FreeBSD (bb #2235)
Thu Sep 2 15:38:22 EEST 2010 (edwin)
-------------------------------------
* libclamav/pe.c: add BC_PE_ALL hook (bb #2237)
Wed Sep 1 10:03:26 EEST 2010 (edwin)
-------------------------------------
* libclamav/c++/{bytecode2llvm,ClamBCRTChecks}.cpp: avoid false 'Verification error' messages (bb #2239)
Tue Aug 31 16:11:30 CEST 2010 (tk)
----------------------------------
* freshclam/freshclam.c: fix handling of relative paths with --datadir (bb#2240)
Tue Aug 31 15:10:29 EEST 2010 (edwin)
-------------------------------------
* clamd/clamd.c: limit RLIMIT_DATA to 2GB on 32-bit processes (bb #1941).
Tue Aug 31 11:13:44 EEST 2010 (edwin)
-------------------------------------
* libclamav/regex/regexec.c: fix regex when sizeof(void*) != sizeof(long) (bb #2232).
Thanks to Martin Olsen <martypal2005*gmail.com>
Tue Aug 31 10:53:06 EEST 2010 (edwin)
-------------------------------------
* libclamav/pdf.c: improve handling of pdf objects (bb #2216).
Tue Aug 31 01:39:11 CEST 2010 (acab)
------------------------------------
* libclamav/pe_icons.c: support special case where icon is encoded as 32bpp but it really
carries alpha as a mask... well go figure. (bb#2221)
Thu Aug 26 14:06:55 CEST 2010 (tk)
----------------------------------
* libclamav/mpool.c: permanently disable debug mode (bb#2222)
Tue Aug 24 12:27:16 CEST 2010 (tk)
----------------------------------
* libclamav: allow logical sigs to be used as file type sigs (bb#2228)
Wed Aug 18 11:01:10 EEST 2010 (edwin)
-------------------------------------
* libclamav/c++/detect.cpp: don't warn on x86_64 vs i386 mismatches (bb #2214).
Tue Aug 17 13:10:00 CEST 2010 (tk)
----------------------------------
* sigtool/sigtool.c: fix EOL matching in --find-sigs (bb#2164)
Sat Aug 14 16:29:32 EEST 2010 (edwin)
-------------------------------------
* libclamav/c++/llvm/test: XFAIL a test that fails on i686-apple-darwin8 (bb #2206).
Sat Aug 14 15:18:03 EEST 2010 (edwin)
-------------------------------------
* libclamav/bytecode_detect.c: fix warning on FreeBSD (bb #2201).
Fri Aug 13 13:57:04 EEST 2010 (edwin)
--------------------------------------
* libclamav/bytecode_detect.c: prevent fclose(NULL) on SELinux (bb #2200)
Mon Oct 25 18:02:56 CEST 2010 (tk)
----------------------------------
* V 0.96.4
Mon Oct 18 20:01:46 CEST 2010 (tk)
----------------------------------
* clamd: be more verbose about config errors (bb#2252)
Mon Oct 18 15:52:47 CEST 2010 (tk)
----------------------------------
* libclamav/matcher.c: fix stack smash with HandlerType (bb#2298)
Mon Oct 18 13:23:42 CEST 2010 (acab)
------------------------------------
* libclamav/scanners.c: mark embpes as unreliable (bb#2307)
Mon Oct 18 14:16:11 EEST 2010 (edwin)
-------------------------------------
* clamconf/clamconf.c, libclamav/others.c: warn about zlib version mismatches (bb #2072)
Mon Oct 18 13:55:17 EEST 2010 (edwin)
-------------------------------------
* libclamav/pdf.c: bb #2295
Mon Oct 18 13:46:59 EEST 2010 (edwin)
-------------------------------------
* libclamav/builtin_bytecodes.h: disable JIT on CPUs without CMOV (bb #2327).
Mon Oct 18 12:52:25 EEST 2010 (edwin)
-------------------------------------
* libclamav/pdf.c: keep parsing after %%EOF (bb #2264).
Mon Oct 18 11:30:01 CEST 2010 (tk)
----------------------------------
* clamdscan: fix name parsing in normal mode (bb#2328)
Mon Oct 18 11:10:14 CEST 2010 (tk)
----------------------------------
* libclamav/others.h: bump f-level
Mon Oct 18 11:27:16 EEST 2010 (edwin)
-------------------------------------
* configure: fix bytecode and autoit for Apple-style universal builds (bb #2030)
Mon Oct 18 10:46:25 EEST 2010 (edwin)
-------------------------------------
* libclamav: test mode for bytecode (bb #2101)
Sat Oct 16 18:23:17 CEST 2010 (acab)
------------------------------------
* clamav-milter: send FILDES early (bb#2321)
Fri Oct 15 17:48:00 CEST 2010 (acab)
------------------------------------
* libclamav/pe_icons.c: make sure all ref points are initted (bb#2291)
Fri Oct 15 16:13:27 CEST 2010 (tk)
----------------------------------
* freshclam/manager.c: don't mix IPv4 and IPv6 addresses while randomizing (bb#2319)
Thu Oct 14 19:43:09 CEST 2010 (acab)
------------------------------------
* libclamav: add pool based hastabs so we don't frag on md5 sizes (bb#2185)
Thu Oct 14 16:14:01 CEST 2010 (acab)
------------------------------------
* libclamav/fmap.c: properly check for pread errors (bb#2306)
Thu Oct 14 16:06:06 CEST 2010 (acab)
------------------------------------
* clamd: properly terminate zSTATS (bb#2286)
Thu Oct 14 15:36:06 CEST 2010 (acab)
------------------------------------
* freshclam: undefine qcompare if HAVE_GETADDRINFO is unset (bb#2289)
Mon Oct 11 13:49:29 CEST 2010 (tk)
----------------------------------
* clamdscan: fix parsing of virus names in extended mode (bb#2311)
Fri Oct 8 15:38:56 CEST 2010 (tk)
----------------------------------
* clamscan/manager.c: return errors for stdin scan failures (bb#2317)
Fri Oct 8 15:22:22 CEST 2010 (tk)
----------------------------------
* libclamav/elf.c: shutdown error message (bb#2318)
Fri Oct 8 14:23:24 CEST 2010 (tk)
----------------------------------
* libclamav/readdb.c: fix handling of Engine attrib (bb#2297)
Tue Oct 5 18:14:59 EEST 2010 (edwin)
-------------------------------------
* libclamav/pdf.c: Fix 'Unknown error code ERROR'(bb #2296).
Tue Oct 5 17:03:43 EEST 2010 (edwin)
-------------------------------------
* libclamav/pdf.c: Fix crash on 64-bit Solaris Intel (bb #2314).
Tue Sep 28 16:25:03 EEST 2010 (edwin)
-------------------------------------
* libclamav/c++: allow building with external LLVM 2.8rc2.
Tue Sep 28 13:05:53 EEST 2010 (edwin)
-------------------------------------
* libclamav/bytecode.c: fix memory leak in runlsig (bb #2291)
Tue Sep 28 13:01:19 EEST 2010 (edwin)
-------------------------------------
* libclamav/scanners.c: fix VI memory leak (bb #2291)
Tue Sep 28 12:42:01 EEST 2010 (edwin)
-------------------------------------
* libclamav/pdf.c: fix mmap failed(2) on 32-bit FreeBSD (bb #2300).
Thu Sep 23 17:59:26 CEST 2010 (acab)
------------------------------------
* m4/acinclude: add alarm(10) to the CVE-2010-0405 check so we don't
infloop on SUSE libbz2 1.0.5
Tue Sep 21 20:19:41 EEST 2010 (edwin)
-------------------------------------
* libclamav/c++: improve bytecode load time, and optimization (bb #2278)
Tue Sep 21 16:32:22 CEST 2010 (tk)
----------------------------------
* sigtool/sigtool.c: don't use of sizeof() for malloc'ed buffer (bb#2283)
Tue Sep 21 16:19:41 CEST 2010 (tk)
----------------------------------
* clamdscan/proto.c: fix error path memleak (bb#2282)
Tue Sep 21 16:13:27 CEST 2010 (tk)
----------------------------------
* shared/cdiff.c, sigtool/sigtool.c: fix error path double frees
(bb#2280, bb#2281)
Mon Sep 20 17:09:37 CEST 2010 (tk)
----------------------------------
This maintenance release updates ClamAV scanning engine and fixes these issues:
fixed problems with the bytecode engine
Improved hash matching
Other bugfixes and improvements
I am building ClamAV from the original sources, to make freely available my optimized compiles. I am not modifying original code, but applying a different build chain to gather a better executables, in terms of native x64 support as well as regular x86; faster execution speed; smaller executable size; and lower memory footprint. Of course, the rest of features, should be exactly the same as in official ClamAV.
To prevent any possible confusion, my releases are groupped under the ClamAVOpt name, as an acronym of "ClamAV x86/x64 Optimized Builds".
Just released is version 0.97.3 of ClamAV. The following changes are noted in the ChangeLog distributed with the package:
Mon Oct 10 14:41:48 CEST 2011 (tk)
----------------------------------
freshclam/manager.c: fix error when compiling without DNS support (bb#3056)
Sat Oct 8 12:19:49 EEST 2011 (edwin)
-------------------------------------
libclamav/pdf.c: flag and dump PDF objects with /Launch (bb #3514)
Sat Oct 8 12:10:13 EEST 2011 (edwin)
-------------------------------------
libclamav/bytecode.c,bytecode_api.c: fix recursion level crash (bb #3706).
Tue Aug 2 17:03:33 CEST 2011 (tk)
----------------------------------
docs: clarify behavior of <del>-scan</del><strong>/Scan</strong> options (bb#3134)
Mon Jul 25 16:09:19 EEST 2011 (edwin)
-------------------------------------
libclamav/bytecode_vm.c: fix opcode 20 error (bb #3100)
Thu Sep 15 14:44:11 CEST 2011 (tk)
----------------------------------
freshclam: fix pidfile removal (bb#3499)
Sun Aug 21 17:05:24 EEST 2011 (edwin)
-------------------------------------
libclamav/pdf.c: fix incorrect blocking of some encrypted PDF with empty user passwords. (bb #3364)
Wed Aug 3 15:41:28 CEST 2011 (tk)
----------------------------------
sigtool/sigtool.c: fix calculation of max signature length---------------------------------
* V 0.97.4
Wed Feb 29 18:35:45 CET 2012 (acab)
-----------------------------------
* libclamav/bytecode.c: reset to BYTECODE_AUTO mode at db reload so that
we don't fail to re-enable or re-disable it again
(bb#3789)
Tue Jan 17 11:15:57 CET 2012 (acab)
-----------------------------------
* misc: performance improvement for HP-UX PA-RISC - patch from
Michael Pelletier <michael.v.pelletier*raytheon.com> (bb#3926)
Fri Nov 4 00:52:21 CET 2011 (acab)
-----------------------------------
* libclamav/pe.c: parse vinfo where varfileinfo occours before stringfileinfo
(bb#3062)
Fri Mar 2 19:48:36 CET 2012 (tk)
---------------------------------
* clamd: add support for on-access scanning on OS X with ClamAuth (beta)
Wed Feb 29 17:02:18 EET 2012 (edwin)
------------------------------------
* libclamav/bytecode_api*: Fix Sparc crash (bb #4324)
Tue Feb 7 23:23:48 CET 2012 (tk)
---------------------------------
* libclamav: fix bytecode whitelisting
Wed Jan 25 18:56:44 CET 2012 (tk)
---------------------------------
* libclamav: fix macro detection in OLE2BlockMacros (bb#4269)
Thu Dec 1 15:07:49 CET 2011 (tk)
---------------------------------
* libclamav/readdb.c: allow comments in all db files (bb#3930)
Fri Nov 18 15:23:50 CET 2011 (tk)
---------------------------------
* libclamav/scanners.c: use lsigs when scanning vba data (bb#3922)
Fri Nov 18 15:48:59 EET 2011 (edwin)
-----------------------------------
* libclamav/matcher-hash.c: Fix SIGBUS on PA-RISC (big-endian) architectures (bb #3894).
Mon Oct 17 18:04:30 CEST 2011 (tk)0.97.5
------
ClamAV 0.97.5 addresses possible evasion cases in some archive formats (CVE-2012-1457, CVE-2012-1458, CVE-2012-1459). It also addresses stability issues in portions of the bytecode engine. This release is recommended for all users.
This maintenance release updates ClamAV scanning engine and provides the following improvements:
Scanning code optimizations
---------------------------------
* Bug reported by Felix Groebert, Mateusz Jurczyk and Gynvael Coldwind of the
Google Security Team.
Mon Sep 6 12:32:00 EDT 2012 (dar)
---------------------------------
* libclamav: bb#5751 - cl_scansis() may returan a file descriptor instead
of a valid return code
Mon Jul 2 10:40:50 EDT 2012 (dar)
----------------------------------
* libclamav: bb#5252 - update #4, CL_EUNPACK and caching
Fri Jun 29 14:43:43 EDT 2012 (dar)
----------------------------------
* libclamav: bb#5252 - update #3, more return code tweaks
Tue Jun 26 12:23:44 EDT 2012 (dar)
----------------------------------
* libclamav: bb#5252 - Limit exits on scanraw return codes
Fri Jun 22 16:58:21 EDT 2012 (dar)
----------------------------------
* libclamav: bb#5325 - Quiet Minix warning
Mon Jun 18 17:51:49 EDT 2012 (dar)
----------------------------------
* libclamav: bb#5252 - Update magic_scandesc filtering of scanraw return codes
Thu Jun 14 16:05:53 EDT 2012 (judge)
----------------------------------
* win32: Add MSI projects.
Wed Jun 13 12:00:55 EDT 2012 (olney)
----------------------------------This maintenance release updates ClamAV scanning engine and patches more security vulnerabilities.
ClamAV 0.98 includes many new features, across many different components
of ClamAV. There are new scanning options, extensions to the libclamav API,
support for additional filetypes, and internal upgrades.
– Signature improvements: New signature targets have been added for
PDF files, Flash files and Java class files. (NOTE: Java archive files
(JAR) are not part of the Java target.) Hash signatures can now specify
a ’*’ (wildcard) size if the size is unknown. Using wildcard size
requires setting the minimum engine FLEVEL to avoid backwards
compatibility issues. For more details read the ClamAV Signatures
guide.
– Scanning enhancements: New filetypes can be unpacked and scanned,
including ISO9660, Flash, and self-extracting 7z files. PDF
handling is now more robust and better handles encrypted PDF files.
– Authenticode: ClamAV is now aware of the certificate chains when
scanning signed PE files. When the database contains signatures for
trusted root certificate authorities, the engine can whitelist
PE files with a valid signature. The same database file can also
include known compromised certificates to be rejected! This
feature can also be disabled in clamd.conf (DisableCertCheck) or
the command-line (nocerts).
– New options: Several new options for clamscan and clamd have been
added. For example, ClamAV can be set to print infected files and
error files, and suppress printing OK results. This can be helpful
when scanning large numbers of files. This new option is ”-o” for
clamscan and “LogClean” for clamd. Check clamd.conf or the clamscan
help message for specific details.
– New callbacks added to the API: The libclamav API has additional hooks
for developers to use when wrapping ClamAV scanning. These function
types are prefixed with “clcb_” and allow developers to add logic at
certain steps of the scanning process without directly modifying the
library. For more details refer to the clamav.h file.
– More configurable limits: Several hardcoded values are now configurable
parameters, providing more options for tuning the engine to match your
needs. Check clamd.conf or the clamscan help message for specific
details.
– Performance improvements: This release furthers the use of memory maps
during scanning and unpacking, continuing the conversion started in
prior releases. Complex math functions have been switched from
libtommath to tomsfastmath functions. The A/C matcher code has also
been optimized to provide a speed boost.
– Support for on-access scanning using Clamuko/Dazuko has been replaced
with fanotify. Accordingly, clamd.conf settings related to on-access
scanning have had Clamuko removed from the name. Clamuko-specific
configuration items have been marked deprecated and should no longer
be used.
There are also fixes for other minor issues and code quality changes. Please
see the ChangeLog file for details.This release updates ClamAV scanning engine and brings a number of significant improvements:
New virus signature targets enable detection of PDF, Flash, and Java class files.
New filetypes supported in the scanner include ISO9660, Flash and 7-zip self-extracting archives.
Performance and memory management improvements.
This release updates ClamAV scanning engine to the latest version and brings important improvements:
Heuristic detection improvements
Improvements in detection and processing of archived files
Other important bug fixes