Thursday, December 17, 2015

We'd like to extend a huge thank you to our ClamAV community for helping us make ClamAV 0.99 the largest launch of ClamAV ever!

We generally average around 8,000 downloads a week of ClamAV, since 0.99 has launched (two weeks ago), we've had over 20,000 downloads a week.  

We're pretty happy with this number and can't wait until 0.99 is in everyone's hands, so that all of our millions of users can use the latest detection and features. 

If you haven't updated to ClamAV 0.99, we encourage you to do so as soon as possible, help us keep the momentum going, and keep breaking records!

Tuesday, December 1, 2015

Please join us in welcoming ClamAV 0.99 to the family! The following are the 0.99 release notes:

ClamAV 0.99 contains major new features and changes. YARA rules,
Perl Compatible Regular Expressions, revamped on-access scanning
for Linux, and other new features join the many great features of ClamAV:


  • Processing of YARA rules (some limitations- see signatures.pdf).
  • Support in ClamAV logical signatures for many of the features added for YARA, such as Perl Compatible Regular Expressions, alternate strings, and YARA string attributes. See signatures.pdf for full details.
  • New and improved on-access scanning for Linux. See the recent blog post and clamdoc.pdf for details on the new on-access capabilities.
  • A new ClamAV API callback function that is invoked when a virus is found. This is intended primarily for applications running in all-match mode. Any applications using all-match mode must use the new callback function to record and report detected viruses.
  • Configurable default password list to attempt zip file decryption.
  • TIFF file support.
  • Upgrade Windows pthread library to 2.9.1.
  • A new signature target type for designating signatures to run against files with unknown file types.
  • Improved fidelity of the "data loss prevention" heuristic algorithm. Code supplied by Bill Parker.
  • Support for LZMA decompression within Adobe Flash files.
  • Support for MSO attachments within Microsoft Office 2003 XML files.
  • A new sigtool option(--ascii-normalize) allowing signature authors to more easily generate normalized versions of ascii files.
  • Windows installation directories changed from \Program Files\Sourcefire\ClamAV to \Program Files\ClamAV or \Program Files\ClamAV-x64.


PLEASE NOTE: If you are using clamd on-access scanning or have applications
using all-match mode, you will want to review the changes and make any necessary
adjustments before using ClamAV 0.99. Users of windows binaries need to be
aware of the change of installation directories.

As always ClamAV can be downloaded from the ClamAV Downloads page on ClamAV.net!  Please provide your feedback via the ClamAV Mailing Lists!

Thank you to the ClamAV community members who sent patches and bug reports
included for ClamAV 0.99:

Steve Basford
Sebastian Andrzej Siewior
Bill Parker
Andreas Schulze
Yann E. Morin
Andreas Cadhalpun
Dmitry Marakasov
Michael Pelletier
Felix Groebert