ClamAV - Documentation is here: https://docs.clamav.net https://www.clamav.net/
Find a file
Val S. 92b4a3e291
Fix ZIP parser issue using central directory
The function which indexes a ZIP central directory is not advancing
to the next central directory record thus exceeding the max-files scan
limit for many ZIPs.

CLAM-2884
2025-10-13 15:09:36 -04:00
.devcontainer Add devcontainer (#1462) 2025-08-12 13:03:48 -04:00
.github FIPS-compliant CVD signing and verification 2025-03-26 19:33:25 -04:00
certs Add production CVD signing root public certificate 2025-08-19 11:41:24 -04:00
clamav-milter Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
clambc libclamav: scan-layer callback API functions 2025-08-14 22:39:14 -04:00
clamconf clamconf: run lsb_release on Hurd if available 2025-08-29 21:31:35 -04:00
clamd clamd: Fix valgrind test failure (#1570) 2025-09-09 13:07:34 -04:00
clamdscan Tests: Fix a couple of valgrind complaints (#1554) 2025-09-09 12:35:14 -04:00
clamdtop Fix static analysis code quality issues (#1582) 2025-10-02 11:46:14 -04:00
clamonacc Fix potential NULL pointer dereference (#1581) 2025-10-01 17:09:15 -04:00
clamscan Fix static analysis code quality issues; Fix old libjson-c support (#1574) 2025-09-26 18:26:00 -04:00
clamsubmit Windows: Fix issue printing unicode filenames (#1461) 2025-07-25 17:42:43 -04:00
cmake CMake: improve ncurses detection; separate TINFO_LIBRARY input 2025-08-27 14:24:27 -04:00
common Windows: fix number of arguments in function call (#1586) 2025-10-04 22:33:01 -04:00
COPYING CMake: CPack generate Windows installer with WIX 2021-02-25 11:41:27 -08:00
docs ClamsScan: add missing --json-store-extra-hashes option to help and manpage 2025-08-14 22:40:44 -04:00
etc FIPS & FIPS-like limits on hash algs for cryptographic uses 2025-08-14 22:39:15 -04:00
examples Windows: fix number of arguments in function call (#1586) 2025-10-04 22:33:01 -04:00
freshclam FIPS & FIPS-like limits on hash algs for cryptographic uses 2025-08-14 22:39:15 -04:00
fuzz libclamav: Fix compiler error on some Apple systems. 2025-05-30 12:41:45 -07:00
libclamav Fix ZIP parser issue using central directory 2025-10-13 15:09:36 -04:00
libclamav_rust Update generated sys.rs file 2025-08-18 12:27:22 -04:00
libclammspack Fix typos (no functional changes) 2024-01-19 09:08:36 -08:00
libclamunrar Solaris requires -z gnu-version-script-compat to be specified (#1569) 2025-09-07 14:34:45 -04:00
libclamunrar_iface Solaris requires -z gnu-version-script-compat to be specified (#1569) 2025-09-07 14:34:45 -04:00
libfreshclam Freshclam: Download missing .sign files for up-to-date .cvd's (#1587) 2025-10-05 17:42:59 -04:00
sigtool Fix static analysis code quality issues (#1582) 2025-10-02 11:46:14 -04:00
unit_tests Fix static analysis code quality issues; Fix old libjson-c support (#1574) 2025-09-26 18:26:00 -04:00
win32 FIPS & FIPS-like limits on hash algs for cryptographic uses 2025-08-14 22:39:15 -04:00
.clang-format Explicitly set clang-format version to 16 2024-04-03 16:35:23 -04:00
.dockerignore Docker: Fix build after CMake/CPack changes 2021-09-02 03:22:48 -07:00
.gitattributes Avoid altering signature for .cargo/vendor files 2023-03-08 19:40:35 -08:00
.gitignore Remove Cargo.lock file from .gitignore 2023-05-04 10:42:21 -07:00
Cargo.lock Example program: demonstrate more features and support scripted inputs 2025-08-14 22:40:45 -04:00
Cargo.toml cdiff: Replace cdiff-apply feature with Rust implementation 2022-01-10 12:18:33 -07:00
ChangeLog.md Documentation update and cleanup. Transition to MarkDown files for improved rendering on GitHub.com 2018-03-06 17:43:54 -05:00
clam-format clam-format script: also format Rust source 2024-04-15 10:03:02 -07:00
clamav-config.h.cmake.in Swap clean cache from MD5 to SHA2-256 2025-08-14 21:23:30 -04:00
clamav-config.in remove old CVS-stuff and make the repository look more like SVN 2007-02-17 19:02:20 +00:00
clamav-types.h.in Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
clamav-version.h.in Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
CMakeLists.txt Bump version for 1.6.0-devel; Increase FLEVEL to 240 (#1595) 2025-10-07 15:49:20 -04:00
CMakeOptions.cmake FIPS-compliant CVD signing and verification 2025-03-26 19:33:25 -04:00
CODE_OF_CONDUCT.md Create CODE_OF_CONDUCT.md 2021-05-21 10:05:52 -07:00
COPYING.txt CMake: CPack generate Windows installer with WIX 2021-02-25 11:41:27 -08:00
INSTALL-cross-linux-arm64.md CMake: improve ncurses detection; separate TINFO_LIBRARY input 2025-08-27 14:24:27 -04:00
INSTALL-cross-windows-arm64.md Docs: add ARM64 cross-compile instructions for Windows and Linux 2024-03-26 12:48:11 -04:00
INSTALL.md CMake: improve ncurses detection; separate TINFO_LIBRARY input 2025-08-27 14:24:27 -04:00
Jenkinsfile Bump version for 1.6.0-devel; Increase FLEVEL to 240 (#1595) 2025-10-07 15:49:20 -04:00
libclamav.pc.in Improve pkgconfig. Patch supplied by Andreas Cadhalpun. 2015-09-09 17:58:04 -04:00
logo.png GitHub Actions testing on Ubuntu, Mac, & Windows 2021-02-25 11:41:28 -08:00
NEWS.md Bump version for 1.6.0-devel; Increase FLEVEL to 240 (#1595) 2025-10-07 15:49:20 -04:00
platform.h.in FIPS-compliant CVD signing and verification 2025-03-26 19:33:25 -04:00
README.Docker.md Fix typos (no functional changes) 2024-01-19 09:08:36 -08:00
README.md Remove bundled tomfastmath library. 2023-03-29 15:10:25 -07:00
SECURITY.md Adds SECURITY.md policy file 2021-06-09 14:17:59 -07:00
target.h.cmake.in Add CMake build tooling 2020-08-13 00:25:34 -07:00

ClamAV

Maeve, the ClamAV mascot

ClamAV® is an open source antivirus engine for detecting trojans, viruses, malware & other malicious threats.

Documentation & FAQ

ClamAV documentation is hosted at docs.clamav.net. The source archive for each release also includes a copy of the documentation for offline reading.

You can contribute to the documentation by submitting improvements to Cisco-Talos/clamav-documentation

ClamAV News

For information about the features in this and prior releases, read the news.

Catch up on the latest about ClamAV by reading our blog and follow us on Twitter @clamav.

ClamAV Signatures

Anyone can learn to read and write ClamAV signatures. To get started, see our signature writing manual.

Installation Instructions

Using Docker

ClamAV can be run using Docker. For details, visit to the online manual under "Docker" and check out our images on Docker Hub.

Using a Package Manager

For help installing from a package manager, refer to the online manual under "Packages".

Using an Installer

The following install packages are available for download from clamav.net/downloads:

  • Linux - Debian and RPM packages for x86_64 and i686. New in v0.104.
  • macOS - PKG installer for x86_64 and arm64 (universal). New in v0.104.
  • Windows - MSI installers and portable ZIP packages for win32 and x64.

To learn how to use these packages, refer to the online manual under "Installing".

Build from Source

For step-by-step instructions, refer to the online manual:

The source archive for each release includes a copy of the documentation for offline reading.

A reference with all of the available build options can be found in the INSTALL.md file.

You can find additional advice for developers in the online manual under "For Developers".

Upgrading from a previous version

Visit the FAQ for tips on how to upgrade from a previous version.

Join the ClamAV Community

The best way to get in touch with the ClamAV community is to join our mailing lists.

You can also join the community on our ClamAV Discord chat server.

Want to make a contribution?

The ClamAV development team welcomes code contributions, improvements to our documentation, and also bug reports.

Thanks for joining us!

Licensing

ClamAV is licensed for public/open source use under the GNU General Public License, Version 2 (GPLv2).

See COPYING.txt for a copy of the license.

3rd Party Code

ClamAV contains a number of components that include code copied in part or in whole from 3rd party projects and whose code is not owned by Cisco and which are licensed differently than ClamAV. These include:

  • Yara: Apache 2.0 license
    • Yara has since switched to the BSD 3-Clause License; Our source is out-of-date and needs to be updated.
  • 7z / lzma: public domain
  • libclamav's NSIS/NulSoft parser includes:
    • zlib: permissive free software license
    • bzip2 / libbzip2: BSD-like license
  • OpenBSD's libc/regex: BSD license
  • file: BSD license
  • str.c: Contains BSD licensed modified-implementations of strtol(), stroul() functions, Copyright (c) 1990 The Regents of the University of California.
  • pngcheck (png.c): MIT/X11-style license
  • getopt.c: MIT license
  • Curl: license inspired by MIT/X, but not identical
  • libmspack: LGPL license
  • UnRAR (libclamunrar): a non-free/restricted open source license
    • Note: The UnRAR license is incompatible with GPLv2 because it contains a clause that prohibits reverse engineering a RAR compression algorithm from the UnRAR decompression code. For this reason, libclamunrar/libclamunrar_iface is not linked at all with libclamav. It is instead loaded at run-time. If it fails to load, ClamAV will continue running without RAR support.

See the COPYING directory for a copy of the 3rd party project licenses.

Acknowledgements

Credit for contributions to each release can be found in the News.

ClamAV is brought to you by the ClamAV Team