Penguin
Note: You are viewing an old revision of this page. View the current version.

ClamAV is a Free (GPL) Virus scanner for Linux, Solaris, *BSD, AIX, MacOSX, Cygwin B20 on multiple architectures such as Intel, Alpha, SPARC, Cobalt MIPS boxes, PowerPC and RISC 6000. It started as a C-based reimplementation of the abandoned Java !OpenAntiVirus?. Signature updates are available in an open FileFormat.

ClamAV comes with a tool called freshclam which updates the virus database automatically: it downloads the database from !http://database.clamav.net/ (a round robin record that tries to equally balance the traffic between all the database mirrors) which is split into two files called main.cvd and daily.cvd. daily.cvd is updated frequently and occasionally is merged with main.cvd.

In issue 8/2004 (April 5, 2004), the German computer magazine c't published a comparative review of a number of virus scanners, in which they reported that ClamAV's signature updates are provided far too slowly to adequately cope with the contemporary appearance rate of new mail worms, of which new mutations sometimes follow each other within hours. On the other hand, a lot of people appear to have had experiences to the contrary. That article also mentions that ClamAV lacks "code emulation", an easy way to identify variations of a PolyMorphicVirus.

Anyway, you can see ClamAV's response times by yourself at http://news.gmane.org/gmane.comp.security.virus.clamav.virusdb I suggest you check them out before you say ClamAV doesn't suit your needs. You could be surprised.

ClamAV can be used by ContentScanners to scan Emails on many MTAs. The ClamAV package includes one written by Nigel Horne for SendMail called clamav-milter. Another one is smtp-vilter. They both use the SendMail "milter" API. Other ContentScanners known to work with ClamAV are Amavis / Amavis-ng, AMaViS-New, Exiscan, MailScanner, QmailScanner.

You can also use ClamAV to scan all POP3 traffic with pop3vscan. See ClamAvPopVscan.

In fact you can even use ClamAV to scan your incoming mail in Outlook: just get ClamWin and install the Outlook Plugin!


User Wishlist

;; !RexSter? : ** local update server. so other clients on a LAN wont have to download from the internet (NOTE: It's already possible, just read the FAQ) ** also clean worms, keyloggers, dialers, and other junks... (NOTE: ClamAV already recognizes most common ones)

;; Travis van Dame : ** Client Management Tool to manage ClamAV installed on network computers

;; Eric Carter : ** On Access Scanner for Windows (ClamWin?)

;; Lars Jonsson : ** ICAP support in ClamAV


See also:

The following authors of this page have not agreed to the WlugWikiLicense. As such copyright to all content on this page is retained by the original authors.
  • ChrisLowth
  • GaetanoAndreaCallea
The following authors of this page have agreed to the WlugWikiLicense.

PHP Warning

lib/blame.php:177: Warning: Invalid argument supplied for foreach()

lib/plugin/WlugLicense.php:99: Warning: Invalid argument supplied for foreach()

lib/plugin/WlugLicense.php:111: Warning: in_array() [<a href='function.in-array'>function.in-array</a>]: Wrong datatype for second argument