Download

Source code

Download the official source code using the links below. We recommend running the ClamAV Stable Version on production systems.
Not the right format for your operating system? Find Win32, MacOS X, Linux & BSD signatures in the Alternate Versions section.

The latest stable release is 0.99.2

file	Modified	Size
clamav-0.99.2.tar.gz	2016-05-03 17:30:19 UTC	15.4 MB
clamav-0.99.2.tar.gz.sig	2016-05-03 17:30:26 UTC	72 bytes

Beta Version (0.99.3)

file	Modified	Size
clamav-0.99.3-beta2.tar.gz.sig	2017-12-15 14:39:59 UTC	543 bytes
ClamAV-0.99.3-beta2-windows.zip	2017-12-15 14:39:45 UTC	9.3 MB
clamav-0.99.3-beta2.tar.gz	2017-12-15 14:39:25 UTC	15.9 MB

Virus Database

For ClamAV to work properly, both the ClamAV engine and the ClamAV Virus Database (CVD) must be kept up to date.

Freshclam should perform these updates automatically. Instructions for setting up Freshclam can be found in the ClamAV Manual or in the documentation section.
If your network is segmented or the end hosts are unable to reach the Internet, you should investigate setting up a private local mirror. If this is not viable, you may use these direct download links: main.cvd | daily.cvd | bytecode.cvd

Upgrading

Be sure to read the Upgrade Instructions prior to updating ClamAV. Sign up for notifications regarding newest stable releases and betas, by subscribing to the clamav-announce mailing list.

Development Releases

Release Candidates

There are currently no release candidates available for download.

Beta Versions

Official ClamAV betas are found in the downloads above.

Changelog

The ChangeLog lists all recent fixes and improvements.

Clone the Git Repository under UNIX with one of these commands:

Smart-HTTP Protocol (Git 1.7+) $ git clone https://github.com/vrtadmin/clamav-devel
Git Native Prococol (Git < 1.7) $ git clone git://github.com/vrtadmin/clamav-devel
Windows users may want to install Git on Windows

Previous Stable Releases

You can find previous releases on sourceforge

Refer to the Upgrade Instructions for reference.

Bytecode Compiler

Git 1.7+
$ git clone git://github.com/vrtadmin/clamav-bytecode-compiler

Git < 1.7
$ git clone https://github.com/vrtadmin/clamav-bytecode-compiler

Talos PGP Public Key

Alternate Versions of ClamAV

Various third parties have developed versions of ClamAV to work on a variety of operating systems. Several of these are listed below. Installation instructions for many operating systems can be found in the documentation.

Windows Signatures

Win32

ClamAV downloads for Win32

file	Modified	Size
clamav-0.99.2-win32.zip.sig	2016-05-03 17:28:41 UTC	72 bytes
clamav-0.99.2-win32.msi	2016-05-03 17:29:51 UTC	4.7 MB
clamunrar-0.99.2-win32.zip.sig	2016-05-03 17:28:17 UTC	72 bytes
clamunrar-0.99.2-win32.zip	2016-05-03 17:29:01 UTC	34.1 kB
clamav-0.99.2-win32.zip	2016-05-03 17:29:20 UTC	3.8 MB
clamav-0.99.2-win32.msi.sig	2016-05-03 17:29:34 UTC	72 bytes

Win64

ClamAV downloads for Win64

file	Modified	Size
clamav-0.99.2-x64.zip.sig	2016-05-03 17:28:47 UTC	72 bytes
clamav-0.99.2-x64.msi	2016-05-03 17:30:03 UTC	5.4 MB
clamunrar-0.99.2-x64.zip.sig	2016-05-03 17:28:55 UTC	72 bytes
clamav-0.99.2-x64.msi.sig	2016-05-03 17:29:41 UTC	72 bytes
clamunrar-0.99.2-x64.zip	2016-05-03 17:29:07 UTC	37.8 kB
clamav-0.99.2-x64.zip	2016-05-03 17:29:27 UTC	4.4 MB

Windows Antivirus

Immunet, powered by ClamAV is a fast, fully featured Windows desktop Anti-Virus (AV) solution that utilizes the power of advanced cloud based detection techniques and the strength of the time tested ClamAV engine. This unique combination of technologies allows for a highly effective approach to today’s fast moving malware threats.

Features

Real-time Detection
Scheduled Scanning
Intelligent Scanning - Fast and configurable smart scans
Custom Detection - Using the standard ClamAV signature language
Advanced Archive and Packer Support
Fast and Light System Footprint
Quarantine

Visit the Immunet website:

Linux Signatures

Ubuntu

Installing

ClamAV can be found for Ubuntu in the apt repository. Run this command to install ClamAV:

apt-get install clamav

If you need clamd, you may also want to run:

apt-get install clamav-daemon

If you require support for scanning compressed RAR files you first need to enable the non-free archive, and then you can install the RAR-plugin using:

apt-get install libclamunrar6

There are two classes of clamav packages available for Ubuntu users:

Released Set

The released set (release, *-updates, and *-security) are patched for security updates. Following extensive testing of clamav and the packages that use it in the backports repository, they may be updated to a newer version. These are official Ubuntu packages and supported by community developers.

Backports

The Ubuntu backports repository will contain the newest clamav version that has been at least lightly tested to work with that version. These packages can be installed by enabling the backports repository on your system.
Ubuntu packages are maintained by Ubuntu MOTU Developers.

Debian

ClamAV can be found in the apt repository. Run this command to install ClamAV:

apt-get install clamav

If you need clamd, you may also want to run:

apt-get install clamav-daemon

For the stable release, the packages are updated via the StableUpdates mechanism.

If you require support for scanning compressed RAR files you first need to enable the non-free archive and then you can install the RAR-plugin using:

apt-get install libclamunrar6

To test the installation, you can try to scan the test files in the clamav-testfiles package.

The package maintainers can be reached at clamav-devel at lists.alith.debian.org. More info at tracker.debian.org/pkg/clamav.

SuSE

ClamAV is included in the openSuSE distribution and in Novell’s SuSE Linux Enterprise products. To use these packages, pick the subdirectory for your SuSE version from the openSuSe website

Use the update variant for openSuSE, add it to your installation as another repository using YaST or zypper and give it a higher priority (lower number) than the repository that delivers the official updates.
RPMs of new ClamAV versions for existing SuSE products are provided through the respective online update channels.As these packages have to go through QA, it usually takes some time for a new ClamAV source release to appear as an official RPM. For those who want the newest version, packages are available from the security project in the openSuSE Build Service.

SuSE packages are maintained by Reinhard Max.

RedHat & Fedora

RedHat & Fedora packages can be found at https://src.fedoraproject.org/rpms/clamav

Make sure to read the FAQ before attempting to install the package.

Fedora & EPEL

EPEL writes ClamAV packages for Fedora (as well as EPEL-enabled CentOS and RHEL).

To install run:

yum install clamav

For more information on EPEL, visit their wiki.

Mandriva

Official Mandriva packages are available through the software package manager or urpmi:

urpmi.update-update

urpmi-update-autoclamd

Officla Mandriva packages are maintained by Oden Erikkson.

Gentoo

ClamAV is available in portage under

/usr/portage/app-antivirus/clamav

If you run

emerge clamav

Install the version of ClamAV that Gentoo considers stable.

Pardus

You can install ClamAV directly from the Package Manager, or run:

sudo pisi it clamav

Official packages are maintained by Ali Erdinc Koroglu.

BSD Signatures

FreeBSD

There are two versions of ClamAV for FreeBSD available, clamav and clamav-devel.

Find both versions under /usr/ports/security/

The official FreeBSD port is maintained by Renato Botelho.

OpenBSD

ClamAV is part of the official ports tree starting from the 3.7 release.

The port is maintained by Marc Balmer.

Solaris Signatures

OpenCSW

OpenCSW is a community software project for Solaris 8+ on both Sparc and x86. It packages more than 2000 popular open source titles and they can all easily be installed with dependency handling via pkgutil which is modeled after Debians apt-get.

# pkgutil -i clamav

More info on OpenCSW can be found on their website.

Mac OS X Signatures

ClamXav

ClamXav for Mac OS X is available for purchase at ClamXav. ClamXav can be set up as passive or active: scan only the files you tell it to or your entire hard drive. You can also choose to activate Sentry to monitor your hard drive and scan new files as they arrive.

Please visit ClamXav for more information.

Third Party ClamAV Tools

The software listed in this section is authored by third parties and not by the ClamAV Team. Compatibility may vary.

Generic Mail Transfer Agents

amavisd-new | clamd, clamscan

amavisd-new is a rewritten version of amavis maintained by Mark Martinec. clamscan is enabled automatically if clamscan binary is found at amavisd-new startup time. clamd is activated by uncommenting its entry in the @av_scanners list, file /etc/amavisd.conf. You can generate some nifty stats from amavisd log files using”:[amavis-stats [amavis-stats | get amavisd-new

Sendmail

clamav-milter | libclamav

clamav-milter is a very fast email scanner designed for Sendmail. It’s written entirely in C and only depends on libclamav or clamd. | get clamav-milter

smtp-vilter | clamd

smtp-vilter is a high performance content filter for sendmail using the milter API. The software scans e-mail messages for viruses and drops or marks infected messages. The backend to use for the actual filtering is configurable, we currently have support for ClamAV and the Symantec Anti Virus Scan Engine (savse). The backends are realised as shared libraries that are loaded dynamically when smtp-vilter starts. | get smtp-vilter

MIMEDefang | clamscan, clamd

MIMEDefang is an efficient mail scanner for Sendmail/milter. | get MIMEDefang

Smart Sendmail Filter | clamd

smf-clamd is a lightweight filter for Sen. | get smf-clamd

Qmail

qmail-scanner | clamd

Qmail-Scanner is an add-on that enables a Qmail email server to scan all gateway-ed email for certain characteristics (i.e. a content scanner). It is typically used for its anti-virus protection functions, in which case it is used in conjunction with external virus scanners. but also enables a site (at a server/site level) to react to email that contains specific strings in particular headers, or particular attachment filenames or types (e.g. *.VBS attachments). | get qmail-scanner

simscan | clamd

Simscan is a simple program enables qmail-smtpd to reject viruses, spam and block attachments during the SMTP conversation so the email never makes it into your computers. It is completely open source and uses other open source compoments (see below). Very efficent and written in C. | get simscan

Qscanq | clamscan

Qscanq replaces qmail-queue. It initiates a scan (using clamscan or clamdscan) on an incoming email, and returns the exit status of the scanner or of qmail-queue to the caller. | get Qscanq

Qsheff | clamscan

Qsheff is a new spam and antivirus wrapper. It can be used as a drop in replacement for qscanq. It’s more flexible and has got a few more features. | get Qsheff

ClamdMail | clamd

Clamdmail is a qmail-queue replacement that allows mail to be filtered, greylisted, or rejected before queuing based on connection information and message content by providing an interface for programs like clamd-greylist, clamdscan and SpamAssassin. | get Clamdmail

Postfix

ClamSMTP | clamd

ClamSMTP is an SMTP filter for Postfix and other mail servers that checks for viruses using the ClamAV anti-virus software. It aims to be lightweight, reliable, and simple rather than have a myriad of options. Written in C without major dependencies. | get ClamSMTP

Clapf | libclamav

Clapf is a clamav based virus scanning and anti-spam content filter for Postfix. | get clapf

Exim

Exim | clamd

Starting with release 4.50, Exim natively supports ClamAV. | get exim

Others

Mail Avenger | clamscan

Mail Avenger is a highly-configurable SMTP server. It allows you to reject spam during mail transactions, before spooling messages in your local mail queue. You can specify site-wide default policies for filtering mail, but individual users can also craft their own policies by creating avenger scripts in their home directories. | get Mail Avenger

Mail Scanner | clamscan

MailScanner scans all e-mail for viruses, spam and attacks against security vulnerabilities. It is not tied to any particular virus scanner, but can be used with any combination of 14 different virus scanners, allowing sites to choose the best of breed virus scanner. | get Mail Scanner

Maverix | clamscan

Maverix is AOLserver module that implements SMTP protocol and acts as a SMTP proxy with anti-spam and anti-virus capabilities. | get Maverix

Sagator | clamscan, clamd, libclamav

Sagator is an email antivirus/antispam gateway. Its modular architecture can use any combination of antivirus/spamchecker according to configuration. | get Sagator

SMTP-gated | clamd

Smtp-gated is a transparent SMTP proxy supporting: NAT on Linux (netfilter), NAT on FreeBSD (ipfw and others getsockopt-compatible), or dedicated mode (separate/external machine). DATA traffic is spooled in write-thru mode and then scanned for viruses or spam. The program is transparent for TLS connections. | get SMTP-gated

ZMscanner | libclamav

Zmscanner is an extensible modular content filter for Zmailer and Sendmail. It is designed to be fast and efficient and thus suitable for high traffic mail systems. | get Zmscanner

Courier-MTA | libclamav, clamavd

Courier MTA includes four filers.

courier-pythonfilter by Gordon Messner. Included in a Python filter suite, it uses pyClamAV (libclamav with python)

Courier::Filter::Module::ClamAVd by Julian Mehnle. A Perl module for use with Courier::Filter, using clamavd.

ClamCour by Tony Di Monaco. A C++ (with Boost) multithreaded filter using libclamav

avfilter by Alessandro Vesely. A C forking filter using libclamav.

| get Courier-MTA

Haraka | clamd

Haraka is a robust MTA written in node.js, with a modular architecture that lets plugins control nearly every aspect of the SMTP conversation. There is a large selection of included plugins, including a clamav plugin (docs, source) that filters messages using clamd.

Haraka is attractive to two audiences:

Anyone managing mail systems with thousands or tens-of-thousands of concurrent incoming SMTP connections (like Craigslist) and wants to do with it fewer racks of servers.
Developers who need more control over mail routing, filtering, and processing than can be easily or efficiently handled with traditional (milter-based) MTAs.

| get Haraka

Post Office Protocol Tools

P3Scan | clamscan

P3Scan is a fullly-transparent proxy server for POP3-Clients. It runs on a Linux box with iptables (for port re-direction). It can be used to provide POP3 email scanning from the internet to any internal network and is ideal for helping protect your Other OS LAN from harm, especially when used in conjunction with a firewall and other Internet Proxy servers. P3Scan is designed to enable scanning of incoming email messages for Virus’s, Worms, Trojans, Spam (read as Un-solicited Bulk Email), and harmfull attachments. Because viewing HTML mail can enable a Spammer to validate an email address (by the email client automatically reaching out and touching the web host), it can also provide HTML stripping. P3Scan is a derived work of:[POP3VScan [pop3vscan]]. | get P3Scan

Web & FTP Tools

HAVP | libclamav

HAVP is a proxy with an antivirus filter. It does not cache or filter content. At the moment the complete traffic is scanned. A reason for that is the chance of malicious code in nearly every filetypes e.g. HTML (JavaScript) or Jpeg. | HAVP

mod_clamav | libclamav, clamd

mod_clamav is an Apache virus scanning filter. It was written and is currently maintained by Andreas Müller. The project is very well documented and the installation is quite easy. | get mod_clamav

mod_streamav | libclamav

mod_streamav is designed as an Apache 2 filter, which scans the content of Apache Brigades, using the Clamav virus scanning engine. Different from mod_clamav, mod_streamav is a scanning engine based on streaming mode. | get mod_streamav

phpMussel | clamav

A PHP-based script based upon ClamAV signatures designed to detect trojans, viruses, malware and other threats within files uploaded to your system wherever the script is hooked. Written by Maikuolan | get phpMussel

Filesystem & On-Access Scanning

ClamFS | clamd

ClamFS is a FUSE-based user-space file system for Linux with on-access anti-virus file scanning through clamd daemon. The LRU cache is used to provide fast access to files already scanned when multiple open requests are preformed. ClamFS support three logging methods (stdout, file, and syslog) and sends e-mail notification when virus is found. | get ClamFS

Avfs | ClamAV

Avfs, a true on-access anti-virus file system that incrementally scans files and prevents infected data from being committed to disk. Avfs is a stackable file system and therefore can add virus detection to any other file system: Ext3, NFS, etc. Avfs supports forensic modes that can prevent a virus from reaching the disk or automatically create versions of potentially infected files to allow safe recovery. Avfs can also quarantine infected files on disk and isolate them from user processes. | get Avfs

Dazuko | clamuko

This project provides a kernel module, which provides 3d-party applications an interface for file access control. It was originally developed by H+BEDV Datentechnik GmbH to be used for on-access virus scanning. Other uses include a file-access monitor/logger or external security implementations. It operates by intercepting file-access calls and passing the file information to a 3rd-party application. The 3rd-party application then has the opportunity to tell the kernel module to allow or deny the file-access. The 3rd-party application also receives information about the file, type of access, process id, and user id. | get Dazuko

samba-vscan | clamd

samba-vscan provides on-access scanning of Samba shares with ClamAV, FRISK F-Prot Daemon, Kaspersky AntiVirus, OpenAntiVirus.org ScannerDaemon, mks AntiVirus, Sophos Sweep (via Sophie), Symantec AntiVirus Engine (via ICAP), and Trend Micro (via Trophie). It supports Samba 2.2.x/3.0 with working virtual file system (VFS) support. | get samba-vscan

Mail User Agents

Kmail | clamscan

KMail is a fully-featured email client that fits nicely into the K Desktop Environment, KDE. It supports attachment scanning with clamscan. | get Kmail

Open Webmail modules | clamscan

Open WebMail by default can use ClamAV as the external viruscheck module to scan messages fetched from pop3 servers or all incoming messages. If a message or its attachments is found to have virus, Open WebMail will move the message from INBOX to the VIRUS folder automatically. | get Open Webmail

ClamAssassin | clamscan

ClamAssassin is a simple script for virus scanning an e-mail message as a filter. If a message is virus infected, the X-Virus-Status header is set to Yes and the X-Virus-Report header is set to the virus(es) found. If the message is fine, it is passed through with X-Virus-Status set to No. This is intended to act much like spamassassin does. This makes it easy to plug it into a procmail or other filter quite easily. If you’ve already set up a system to use spamassassin, you can easily use similiar procedures to implement clamassassin. | get ClamAssassin

SoftlabsAV | clamscan

Softlabs AntiVirus is a generic anti-virus filter for incoming mail servers on Unix, running as plugin for procmail. In addition, it plugs to the ClamAV if available. | get SoftlabsAV

Qclam | clamscan

QClam is a simple program to plug ClamAV antivirus to your Qmail mailbox. It runs from your ~/.qmail file. It receives incoming messages from Qmail and scans them using clamscan. If a virus found, it returns 99 to Qmail telling it that the message should not be processed (and it just gets removed). If no virus found, or there was an error calling clamscan, QClam returns 0 to QMail and it delivers message as usually. QClam also writes results of scanning into log file. It’s written in C++ and doesn’t require any other software to run. Its size is just about 7k. | get QClam

QMVC - Qmail Mail & Virus Control | clamdscan, clamscan

QMVC is an unidirectional mail filter for Qmail. It works in conjunction with the dot-qmail mechanism for qmail-local and is entirely designed for Qmail (no additional patches required). | get QMVC

ClamAV Bindings

ClamAV# | clamscan

Mono binding for ClamAV | get ClamAV#

Clamson | clamscan

Clamson provides a simple C# API to the ClamAV daemon (clamd) via TCP. | get Clamson

ClamAV::Client | clamd

A Perl client class for clamd | get ClamAV::Client

SharpClam | libclamav

A tiny libclamav binding for .NET (C# and VB.NET). | get SharpClam

ClamAVPlugin | libclamav

A ClamAV plug in fpr SpamAssassin 3.X | get ClamAVPlugin

ClamAV gem | libclamav

Ruby binding for ClamAV | get ClamAV gem

File::Scan::ClamAV | clamd

Scan files and control clamd directly from Perl | get File::Scan::ClamAV

Mail::ClamAV | libclamav

Perl extension for the ClamAV virus scanner. | get Mail::ClamAV

PHP ClamAV Lib | libclamav

PHP ClamAV Lib is a PHP extension that allows incorporation of virus canning features in PHP scripts. | get PHP ClamAV Lib

PYClamAV | libclamav

Python binding for ClamAV | get PYClamAV

pyClamd | clamd

Add virus detection capabilities to your python software in an efficient and easy way. | get pyClamd

Miscellaneous Tools

clamd.monitor | clamd

A clamd monitor compatible with the mon software. | get clamd.monitor

clamd-stream-cl | clamd

This is a modified version of clamdscan. It can stream a file to an intstance of clamd running on another host, via TCP socket. | get clamd-stream-cl

IPCop | ClamAV

IPCop Linux is a complete Linux Distribution whose sole purpose is to protect the networks it is installed on. ClamAV is included. | get IPCop

INSERT | ClamAV

INSERT (the Inside Security Rescue Toolkit) aims to be a multi-functional, multi-purpose disaster recovery and network analysis system. It boots from a credit card-sized CD-ROM and is basically a stripped-down version of Knoppix. It features good hardware detection, fluxbox, emelfm, links-hacked, ssh, tcpdump, nmap, chntpwd, and much more. It provides full read-write support for NTFS partitions (using captive), and the ClamAV virus scanner (including the signature database). | get INSERT

Endian Firewall | ClamAV

Endian Firewall is a turn-key linux security distribution based on IPCop that turns every system into a full featured security appliance. The software has been designed with usability in mind and is very easy to install, use and mange, without loosing its flexibility. The features include a stateful packet inspection firewall, application level proxies for variuos protocols (HTTP, POP3, SMTP) with antivirus support, virus and spamfiltering for email traffic (POP and SMTP), content filtering of Web traffic and a hassle free VPN solution based on OpenVPN. | get Endian Firewall

qmailmrtg7 | ClamAV

qmailmrtg7 utilizes qmail and tcpserver/multilog’s extensive logging capabilities to create mrtg graphs. It efficiently processes the log files and can graph viruses found by ClamAV. | get qmailmrtg7

Redwall Firewall | ClamAV

RedWall is a bootable CD-ROM firewall which focuses on web-based reporting of the firewall’s status. It supports virus filtering with amavisd-new and ClamAV. | get Redwall Firewall

Scan Log Analyzer | ClamAV

Scan analyzer allows you to plot and view graphical representation of log data from virus logs of RAV, ClamAV and Vexira. | get Scan Log Analyzer

Submit ClamAV Tools

If you have written software that can make use of ClamAV, please notify the Community Manager. Be sure to include the name of the program, a short description, the URL of home site, and the author's email address. Please note that we will only review software that is released under an OSI license.