2
2
here may not be available in binary packages.
8
ClamAV 0.97 brings many improvements, including complete Windows support
9
(all major components compile out-of-box under Visual Studio), support for
10
signatures based on SHA1 and SHA256, better error detection, as well as
11
speed and memory optimizations. The complete list of changes is available
12
in the ChangeLog file. For upgrade notes and tips please see:
13
https://wiki.clamav.net/Main/UpgradeNotes097
15
With Sourcefire, Inc. acquisition of Immunet Corp., ClamAV for Windows
16
3.0 has been renamed Immunet 3.0, powered by ClamAV. This release
17
contains the fully integrated LibClamAV 0.97 engine for offline,
18
OnDemand, and OnAccess scanning. Immunet 3.0 users can now utilize
19
the full power of the LibClamAV engine, all the ClamAV signatures,
20
and creation of custom signatures on any platform running Immunet 3.0,
21
powered by ClamAV. If you run Windows systems in your environment and
22
need an AV solution to protect them, give Immunet 3.0, powered by ClamAV
23
a try; you can download it from http://www.clamav.net/about/win32
27
The ClamAV team (http://www.clamav.net/team)
33
ClamAV 0.96.5 includes bugfixes and minor feature enhancements, such as
34
improved handling of detection statistics, better file logging,
35
and support for custom database URLs in freshclam. Please refer to the
36
ChangeLog for details.
39
The ClamAV team (http://www.clamav.net/team)
45
ClamAV 0.96.4 is a bugfix release recommended for all users.
48
The ClamAV team (http://www.clamav.net/team)
53
This release fixes problems with the PDF parser and the internal bzip2
54
library. A complete list of changes is available in the Changelog file.
57
The ClamAV team (http://www.clamav.net/team)
62
ClamAV 0.96.2 brings a new PDF parser, performance and memory improvements,
63
and a number of bugfixes and minor enhancements. This upgrade is recommended
69
This is a bugfix release, please refer to the ChangeLog for the complete
73
The ClamAV team (http://www.clamav.net/team)
78
This release of ClamAV introduces new malware detection mechanisms and other
79
significant improvements to the scan engine. The key features include:
81
- The Bytecode Interpreter: the interpreter built into LibClamAV allows
82
the signature writers to create and distribute very complex detection
83
routines and remotely enhance the scanner's functionality
85
- Heuristic improvements: improve the PE heuristics detection engine by
86
adding support of bogus icons and fake PE header information. In a
87
nutshell, ClamAV can now detect malware that tries to disguise itself
88
as a harmless application by using the most common Windows program icons.
90
- Signature Improvements: logical signature improvements to allow more
91
detailed matching and referencing groups of signatures. Additionally,
92
improvements to wildcard matching on word boundaries and newlines.
94
- Support for new archives: 7zip, InstallShield and CPIO. LibClamAV
95
can now transparently unpack and inspect their contents.
97
- Support for new executable file formats: 64-bit ELF files and OS X
98
Universal Binaries with Mach-O files. Additionally, the PE module
99
can now decompress and inspect executables packed with UPX 3.0.
101
- Support for DazukoFS in clamd
103
- Performance improvements: overall performance improvements and memory
104
optimizations for a better overall resource utilization experience.
106
- Native Windows Support: ClamAV will now build natively under Visual
107
Studio. This will allow 3rd Party application developers on Windows
108
to easily integrate LibClamAV into their applications.
110
The complete list of changes is available in the ChangeLog file. For upgrade
111
notes and tips please see: https://wiki.clamav.net/Main/UpgradeNotes096
114
The ClamAV team (http://www.clamav.net/team)
119
ClamAV 0.95.3 is a bugfix release recommended for all users.
120
Please refer to the ChangeLog included in the source distribution
121
for the list of changes.
124
The ClamAV team (http://www.clamav.net/team)
129
This version improves handling of archives, adds support for --file-list
130
in clamscan and clamdscan, and fixes various issues found in previous
134
The ClamAV team (http://www.clamav.net/team)
139
This is a bugfix release only, please see the ChangeLog for details.
142
The ClamAV team (http://www.clamav.net/team)
147
ClamAV 0.95 introduces many bugfixes, improvements and additions. To make
148
the transition easier, we put various tips and upgrade notes on this page:
149
https://wiki.clamav.net/Main/UpgradeNotes095. For detailed list of changes
150
and bugfixes, please see the ChangeLog.
152
The following are the key features of this release:
154
- Google Safe Browsing support: in addition to the heuristic and signature
155
based phishing detection mechanisms already available in ClamAV, the
156
scanner can now make use of the Google's blacklists of suspected
157
phishing and malware sites. The ClamAV Project distributes a constantly
158
updated Safe Browsing database, which can be automatically fetched by
159
freshclam. For more information, please see freshclam.conf(5) and
160
http://safebrowsing.clamav.net.
162
- New clamav-milter: The program has been redesigned and rewritten from
163
scratch. The most notable difference is that the internal mode has been
164
dropped which means that now a working clamd companion is required.
165
The milter now also has its own configuration file.
167
- Clamd extensions: The protocol has been extended to lighten the load
168
that clamd puts on the system, solve limitations of the old protocol,
169
and reduce latency when signature updates are received. For more
170
information about the new extensions please see the official
171
documentation and the upgrade notes.
173
- Improved API: The API used to program ClamAV's engine (libclamav) has
174
been redesigned to use modern object-oriented techniques and solves
175
various API/ABI compatibility issues between old and new releases.
176
You can find more information in Section 6 of clamdoc.pdf and in
179
- ClamdTOP: This is a new program that allows system administrators to
180
monitor clamd. It provides information about the items in the clamd's
181
queue, clamd's memory usage, and the version of the signature database,
182
all in real-time and in nice curses-based interface.
184
- Memory Pool Allocator: Libclamav now includes its own memory pool
185
allocator based on memory mapping. This new solution replaces the
186
traditional malloc/free system for the copy of the signatures that
187
is kept in memory. As a result, clamd requires much less memory,
188
particularly when signature updates are received and the database is
191
- Unified Option Parser: Prior to version 0.95 each program in ClamAV's
192
suite of programs had its own set of runtime options. The new general
193
parser brings consistency of use and validation to these options across
194
the suite. Some command line switches of clamscan have been renamed
195
(the old ones will still be accepted but will have no effect and will
196
result in warnings), please see clamscan(1) and clamscan --help for
200
The ClamAV team (http://www.clamav.net/team)
206
This is a bugfix release, please refer to the ChangeLog for a complete
210
The ClamAV team (http://www.clamav.net/team)
216
ClamAV 0.94.1 fixes some issues that were found in previous releases and
217
includes one new feature, "Malware Statistics Gathering." This is an optional
218
feature that allows ClamAV users optionally to submit statistics to us about
219
what they detect in the field. We will then use these data to determine what
220
types of malware are the most detected in the field and in what geographic
221
area they are. It will also allow us to publish summary data on www.clamav.net
222
where our users will be able to monitor the latest threats. You can help us
223
by enabling SubmitDetectionStats in freshclam.conf.
225
For more details, please refer to the ChangeLog and
226
http://www.clamav.net/press/0.94.1-WhatsNew.pdf
229
The ClamAV team (http://www.clamav.net/team)
235
Sourcefire and the ClamAV team are pleased to announce the release of
236
ClamAV 0.94. The following are the key features and improvements of this
239
- Logical Signatures: The logical signature technology uses operators
240
such as AND, OR and NOT to allow the combination of more than one
241
signature into one entry in the signature database resulting in
242
more detailed and flexible pattern matching.
244
- Anti-phishing Technology: Users can now change the priority and reporting
245
of ClamAV's heuristic anti-phishing scanner within the detection engine
246
process. They can choose whether, when scanning a supicious file, ClamAV
247
should stop scanning and report the phish, or continue to scan in case the
248
file contains other malware (clamd: HeuristicScanPrecedence,
249
clamscan: --heuristic-scan-precedence)
251
- Disassembly Engine: The initial version of the disassembly engine improves
252
ClamAV's detection abilities.
254
- PUA Detection: Users can now decide which PUA signatures should be loaded
255
(clamd: ExcludePUA, IncludePUA; clamscan: --exclude-pua, --include-pua)
257
- Data Loss Prevention (DLP): This version includes a new module that, when
258
enabled, scans data for the inclusion of US formated Social Security
259
Numbers and credit card numbers (clamd: StructuredDataDetection,
260
clamscan: --detect-structured; additional fine-tuning options are available)
262
- IPv6 Support: Freshclam now supports IPv6
264
- Improved Scanning of Scripts: The normalization of scripts now covers
267
- Improved QA and Unit Testing: The improved QA process now includes
268
API testing and new library of test files in various formats that are
269
tested on a wide variety of systems (try running 'make check' in the source
272
For more details, please refer to http://www.clamav.net/press/0.94-WhatsNew.pdf
273
and to the ChangeLog.
275
You may need to run 'ldconfig' after installing this version.
277
** This version drops the special support for Cygwin. Our QA process showed
278
** serious problems with ClamAV builds under Cygwin due to some low-level
279
** incompatibilities in the POSIX compatibility layer, resulting in unreliable
283
The ClamAV team (http://www.clamav.net/team)
289
This release fixes a problem in handling of .cld files introduced in 0.93.2.
292
The ClamAV team (http://www.clamav.net/team)
297
This release fixes and re-enables the Petite unpacker, improves database
298
loading and solves some other minor issues.
304
This version improves handling of PDF, CAB, RTF, OLE2 and HTML files
305
and includes various bugfixes for 0.93 issues.
308
The ClamAV team (http://www.clamav.net/team)
314
This release introduces many new features and engine enhancements, please
315
see the notes below for the list of major changes. The most visible one
316
is the new logic in scan limits which affects some command line and config
317
options of clamscan and clamd. Please see clamscan(1) and clamd.conf(5)
318
and the example config file for more information on the new options.
320
Most important changes include:
323
- New logic in scan limits: provides much more efficient protection against
324
DoS attacks but also results in different command line and config options
325
to clamscan and clamd (see below)
326
- New/improved modules: unzip, SIS, cabinet, CHM, SZDD, text normalisator,
328
- Improved filetype detection; filetype definitions can be remotely updated
329
- Support for .cld containers (which replace .inc directories)
330
- Improved pattern matcher and signature formats
331
- More efficient scanning of HTML files
332
- Many other improvements
335
- NEW CONFIG FILE OPTIONS: MaxScanSize, MaxFileSize, MaxRecursion, MaxFiles
336
- ** THE FOLLOWING OPTIONS ARE NO LONGER SUPPORTED **: MailMaxRecursion,
337
ArchiveMaxFileSize, ArchiveMaxRecursion, ArchiveMaxFiles,
338
ArchiveMaxCompressionRatio, ArchiveBlockMax
341
- NEW CMDLINE OPTIONS: --max-filesize, --max-scansize
342
- REMOVED OPTIONS: --block-max, --max-space, --max-ratio
345
- NEW CONFIG OPTION CompressLocalDatabase
346
- NEW CMDLINE SWITCH --no-warnings
347
- main.inc and daily.inc directories are no longer used by ClamAV; please
348
remove them manually from your database directory
351
The ClamAV team (http://www.clamav.net/team)
357
This is a bugfix release, please refer to the ChangeLog for a complete
361
The ClamAV team (http://www.clamav.net/team)