ClamAV 0.102.2

Как его запустить?

Исправление основных ошибок.

Состоялся релиз свободного антивирусного пакета ClamAV 0.99.1, в котором добавлена возможность извлечения и сканирования объектов, встроенных в офисные файлы пакета Hancom Office (HWP). Добавлены дополнительные опции для сканирования форматов на основе XML (MSXML, OOXML, HWPML, HWP3), улучшена логика определения формата OOXML. Кроме того, сообщается, что ClamAV 0.99.1 будет последним релизом, доступным для загрузки через SourceForge.net, в дальнейшем новые выпуски будут распространяться только напрямую с сайта ClamAV.net.


Wed, 24 Feb 2016 18:45:00 -0500 (Steven Morgan)
------------------------------------------
* ClamAV 0.99.1 release build.

Wed, 24 Feb 2016 13:29:42 -0500 (Kevin Lin)
------------------------------------------
* hwp5.x: fix for streams without names

Sat, 20 Feb 2016 15:53:48 +0100 (Sebastian Andrzej Siewior)
------------------------------------------
* libclamav: yara: avoid unaliged access to 64bit variable

Thu, 11 Feb 2016 15:56:47 -0500 (Mickey Sola)
------------------------------------------
* bb11455 - patch by Mark Allan to add show-progress option to freshclam.

Tue, 16 Feb 2016 14:15:18 -0500 (Kevin Lin)
------------------------------------------
* added 'CustomXML' as trigger for likely OOXML

Tue, 3 Feb 2016 17:30:00 -0500 (Steven Morgan)
------------------------------------------
* ClamAV 0.99.1 beta1 release.

Tue, 2 Feb 2016 14:23:13 -0500 (Kevin Lin)
------------------------------------------
* add scanning options for scanning xml-based documents
(MSXML, OOXML, HWPML) and HWP3

Fri, 29 Jan 2016 16:17:40 -0500 (Kevin Lin)
------------------------------------------
* add dconfs for XDP, MBR, GPT, APM, OOXML, MSXML, and HWP formats

Tue, 2 Feb 2016 12:38:27 -0500 (Kevin Lin)
------------------------------------------
* hwp: scan decompressed data on limits exceeded

Sun, 31 Jan 2016 15:41:54 -0500 (Steven Morgan)
------------------------------------------
* Fix for signature name length<3 in .ign & .ign2 CVD files.

Fri, 29 Jan 2016 11:21:46 -0500 (Steven Morgan)
------------------------------------------
* Change RTF file magic from '{\rtf' to '{\rt'

Wed, 27 Jan 2016 14:17:47 -0500 (Mickey Sola)
------------------------------------------
* bb11444 - zeroing out buffer at allocation to avoid writing uninitialized
bytes to a file

Wed, 20 Jan 2016 16:21:58 -0500 (Mickey Sola)
------------------------------------------
* bb11446 - adding check for compressed input stream

Wed, 13 Jan 2016 14:56:46 -0500 (Kevin Lin)
------------------------------------------
* clean up and boost accuracy to detecting OOXML documents

Thu, 14 Jan 2016 17:01:01 -0500 (Steven Morgan)
------------------------------------------
* 11477 - Fix crash when using pcre statistics due to inconsistent memory
management function calls

Thu, 14 Jan 2016 15:31:02 -0500 (Mickey Sola)
------------------------------------------
* bb11444: adding check to verify a valid number of rounds for rijndael aes
encryption/decryption

Wed, 13 Jan 2016 13:18:01 -0500 (Mickey Sola)
------------------------------------------
* bb11441 - fixing edge case revealed by unit testing

Tue, 12 Jan 2016 17:20:26 -0500 (Steven Morgan)
------------------------------------------
* bb11466 - let html be scanned raw when --scan-html=no is in effect.

Tue, 12 Jan 2016 16:14:40 -0500 (Steven Morgan)
------------------------------------------
* bb11475: fix crash due to memory overlay with crafted 7z files.

Tue, 12 Jan 2016 14:30:41 -0500 (Mickey Sola)
------------------------------------------
* bb11441 - fixing off by one OOB write in htmlnorm

Mon, 11 Jan 2016 14:47:30 -0500 (Mickey Sola)
------------------------------------------
* bb11446 - fixing autoit OOB bufferread

Wed, 6 Jan 2016 14:57:48 -0500 (Mickey Sola)
------------------------------------------
* sigtool: adding support for decoding cdb sigs

Tue, 5 Jan 2016 13:13:47 -0500 (Steven Morgan)
------------------------------------------
* bb11467 - fix embedded http links.

Tue, 22 Dec 2015 19:04:42 -0500 (Steven Morgan)
------------------------------------------
* bb11451 - fix guard macro name collision on AIX.

Tue, 22 Dec 2015 13:36:51 -0500 (Steven Morgan)
------------------------------------------
* fix regression crash on sid 1005597703 due to uninitialzed
(i.e., garbage initialized) structure.

Mon, 21 Dec 2015 17:39:47 -0500 (Steven Morgan)
------------------------------------------
* bb11456 - corrects mso stream prefix value for big endian processors.
Patch by Jim Morris.

Thu, 17 Dec 2015 16:16:55 -0500 (Kevin Lin)
------------------------------------------
* ooxml_hwp: add support for filetyping and preclassification

Thu, 17 Dec 2015 11:04:00 -0500 (Kevin Lin)
------------------------------------------
* hwpole2: new filetype and handler for hwp embedded ole2 files

Thu, 17 Dec 2015 12:46:38 -0500 (Mickey Sola)
------------------------------------------
* bb11443 - fixing possible oob dereference when parsing mbox files

Tue, 15 Dec 2015 16:12:01 -0500 (Mickey Sola)
------------------------------------------
* bb11442 - adding explicit wwunpack oob checks

Tue, 15 Dec 2015 10:53:05 -0500 (Mickey Sola)
------------------------------------------
* bb11445 - fixing edge case where a null terminator was unintentionally
written into an adjacent buffer.

Wed, 16 Dec 2015 16:13:05 -0500 (Kevin Lin)
------------------------------------------
* hwpml: use msxml_parser callback scanner for binary data

Wed, 16 Dec 2015 16:12:20 -0500 (Kevin Lin)
------------------------------------------
* msxml_parser: add callback-based scanning mechanism

Tue, 15 Dec 2015 13:01:40 -0500 (Kevin Lin)
------------------------------------------
* HWPML: added hwpml_keys for hwpml parsing

Tue, 15 Dec 2015 10:54:20 -0500 (Kevin Lin)
------------------------------------------
* add HMPML filetype, tab fixes in filetype.c

Mon, 14 Dec 2015 16:34:11 -0500 (Kevin Lin)
------------------------------------------
* Hwp3.x: inflate compressed segment and offset tracking

Fri, 11 Dec 2015 17:50:40 -0500 (Kevin Lin)
------------------------------------------
* Hwp3.x file header parsing and preclass

Wed, 16 Dec 2015 14:56:56 -0500 (Kevin Lin)
------------------------------------------
* pcre: fixed minimum pcre version check

Fri, 11 Dec 2015 17:41:38 -0500 (Steven Morgan)
------------------------------------------
* bb11452 - endianess correction for swf files on sparc -
patch supplied by Jim Morris.

Wed, 9 Dec 2015 12:15:16 -0500 (Mickey Sola)
------------------------------------------
* bb11424 - correcting buffer alignemnt for riff detection on sparc systems;
patch by Jim Morris

Wed, 9 Dec 2015 00:17:41 +0100 (Andreas Cadhalpun)
------------------------------------------
* fix detection of libcheck without pkg-config file

Wed, 9 Dec 2015 11:43:35 -0500 (Kevin Lin)
------------------------------------------
* add HWP5 filetype tracking to preclassification

Tue, 8 Dec 2015 15:05:30 -0500 (Kevin Lin)
------------------------------------------
* add HWP 3.x internal filetypes

Tue, 8 Dec 2015 14:47:12 -0500 (Kevin Lin)
------------------------------------------
* add hwp5 contents to preclass set

Fri, 4 Dec 2015 11:55:52 -0500 (Kevin Lin)
------------------------------------------
* proper identification of HWP file format

Tue, 8 Dec 2015 18:36:48 -0500 (Steven Morgan)
------------------------------------------
* bb11438 - strengthen file typing for OOXML.

Wed, 2 Dec 2015 14:06:32 -0500 (Mickey Sola)
------------------------------------------
* bb-11099 - normalization of whitelist signatures

Wed, 2 Dec 2015 16:23:48 -0500 (Steven Morgan)
------------------------------------------
* github issue #9 - wrong length & offset.

ClamAV 0.99 contains major new features and changes. YARA rules, Perl Compatible Regular Expressions, revamped on-access scanning for Linux, and other new features join the many great features of ClamAV:
• Processing of YARA rules(some limitations- see signatures.pdf).
• Support in ClamAV logical signatures for many of the features added for YARA, such as Perl Compatible Regular Expressions, alternate strings, and YARA string attributes. See signatures.pdf for full details.
• New and improved on-access scanning for Linux. See the recent blog post and clamdoc.pdf for details on the new on-access capabilities
• A new ClamAV API callback function that is invoked when a virus is found. This is intended primarily for applications running in all-match mode. Any applications using all-match mode must use the new callback function to record and report detected viruses.
• Configurable default password list to attempt zip file decryption.
• TIFF file support.
• Upgrade Windows pthread library to 2.9.1.
• A new signature target type for designating signatures to run against files with unknown file types.
• Improved fidelity of the "data loss prevention" heuristic algorithm. Code supplied by Bill Parker.
• Support for LZMA decompression within Adobe Flash files.
• Support for MSO attachments within Microsoft Office 2003 XML files.
• A new sigtool option(--ascii-normalize) allowing signature authors to more easily generate normalized versions of ascii files.

bb11420 - fix preclass/cache interaction.
bb11419 - fix valgrind-detected uninitialized value when caching is disabled.
bb11418 - fix clamdscan segfault when using stream(stdin) input.
bb#11421 - CUD digital signature verification and empty files
change unknown database default to skip from .db
use pkg-config to determine CHECK_LIBS
bb#11015(2) - refactor automated pwdb target assignment for tdb
fix error reporting for pwdb signature loading
fix crash in clamd scan callback function.
fix for openssl build with specific openssl location
onas: adding better feedback for users attempting to use fanotify prevention on kernels with unsupported configurations.
onas: adding throttling to notifications when handling fanotify errors on large files.
onas: adding optional extra scanning for inotify events
onas: improving handling of fanotify read errors for large files.

Improved support for YARA rules including private rules, referencing other rules, and YARA "include" files.
Configurable default password list to attempt zip file decryption.
TIFF support. ./configure options for YARA. upgrade Windows pthread library to 2.9.1. a new signature target type for uncategorized files.
ClamAV 0.99 contains major new features and changes. Particularly, if you are using clamd on-access scanning or have applications using all-match mode, you will want to review the changes and make any necessary
adjustments before using ClamAV 0.99.
Processing of YARA rules(some limitations- see signatures.pdf).
Support in ClamAV logical signatures for many of the features added for YARA, such as Perl compatible Regular Expressions, alternate strings, and YARA string attributes. See signatures.pdf for full details.
post and clamdoc.pdf for details on the new on-access capabilities.
A new ClamAV API callback function that is invoked when a virus is found. This is intended primarily for applications running in all-match mode. Any applications using all-match mode must use the new callback function to record and report detected viruses.
Configurable default password list to attempt zip file decryption.
TIFF file support.
Upgrade Windows pthread library to 2.9.1.
A new signature target type for designating signatures to run against files with unknown file types.
Improved fidelity of the "data loss prevention" heuristic algorithm. Code supplied by Bill Parker.
Support for LZMA decompression within Adobe Flash files.
Support for MSO attachments within Microsoft Office 2003 XML files.
A new sigtool option(--ascii-normalize) allowing signature authors to more easily generate normalized versions of ascii files.

- Improvements to PDF processing: decryption, escape sequence
handling, and file property collection.
- Scanning/analysis of additional Microsoft Office 2003 XML format.
- Fix infinite loop condition on crafted y0da cryptor file. Identified
and patch suggested by Sebastian Andrzej Siewior. CVE-2015-2221.
- Fix crash on crafted petite packed file. Reported and patch
supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
- Fix false negatives on files within iso9660 containers. This issue
was reported by Minzhuan Gong.
- Fix a couple crashes on crafted upack packed file. Identified and
patches supplied by Sebastian Andrzej Siewior.
- Fix a crash during algorithmic detection on crafted PE file.
Identified and patch supplied by Sebastian Andrzej Siewior.
- Fix an infinite loop condition on a crafted "xz" archive file.
This was reported by Dimitri Kirchner and Goulven Guiheux.
CVE-2015-2668.
- Fix compilation error after ./configure --disable-pthreads.
Reported and fix suggested by John E. Krokes.
- Apply upstream patch for possible heap overflow in Henry Spencer's
regex library. CVE-2015-2305.
- Fix crash in upx decoder with crafted file. Discovered and patch
supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
- Fix segfault scanning certain HTML files. Reported with sample by
Kai Risku.
- Improve detections within xar/pkg files.

жуткий нонсос получился.

Есть и гуи версия этого антивируса, но толку от него нету. Ни видит он вирусы в упор

А для одноразового сканирования достаточно просто и намного надежнее скачать бесплатные сканеры от серьезных производителей.

library shared object revisions.
installation issues on some Mac OS X and FreeBSD platforms.
includes a patch from Sebastian Andrzej Siewior making ClamAV pid files compatible with systemd.
Fix a heap out of bounds condition with crafted Yoda's crypter files. This issue was discovered by Felix Groebert of the Google Security Team.
Fix a heap out of bounds condition with crafted mew packer files. This issue was discovered by Felix Groebert of the Google Security Team.
Fix a heap out of bounds condition with crafted upx packer files. This issue was discovered by Kevin Szkudlapski of Quarkslab.
Fix a heap out of bounds condition with crafted upack packer files. This issue was discovered by Sebastian Andrzej Siewior. CVE-2014-9328.
Compensate a crash due to incorrect compiler optimization when handling crafted petite packer files. This issue was discovered by Sebastian Andrzej Siewior.

Ох ты йоптыть =))) Давно на помойке работает с почтой, но там fedora, даже и не предполагал, что под NT есть =))
Не, реально удивился...

- Support for the XDP file format and extracting, decoding, and
scanning PDF files within XDP files.
- Addition of shared library support for LLVM versions 3.1 - 3.5
for the purpose of just-in-time(JIT) compilation of ClamAV
bytecode signatures. Andreas Cadhalpun submitted the patch
implementing this support.
- Enhancements to the clambc command line utility to assist
ClamAV bytecode signature authors by providing introspection
into compiled bytecode programs.
- Resolution of many of the warning messages from ClamAV compilation.
- Improved detection of malicious PE files.
- Security fix for ClamAV crash when using 'clamscan -a'. This issue
was identified by Kurt Siefried of Red Hat.
- Security fix for ClamAV crash when scanning maliciously crafted
yoda's crypter files. This issue, as well as several other bugs
fixed in this release, were identified by Damien Millescamp of
Oppida.
- ClamAV 0.98.5 now works with OpenSSL in FIPS compliant mode.
Thanks to Reinhard Max for supplying the patch.
- Bug fixes and other feature enhancements. See Changelog or
git log for details.

Support for common raw disk image formats using 512 byte sectors, specifically GPT, APM, and MBR partitioning.
Experimental support of OpenIOC files. ClamAV will now extract file hashes from OpenIOC files residing in the signature database location, and generate ClamAV hash signatures. ClamAV uses no other OpenIOC features at this time. No OpenIOC files will be delivered through freshclam. See openioc.org and iocbucket.com for additional information about OpenIOC.
All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan, clamdtop) now support IPV6 addresses and configuration parameters.
Use OpenSSL file hash functions for improved performance. OpenSSL is now prerequisite software for ClamAV 0.98.2.
Improved detection of malware scripts within image files.
Change to circumvent possible denial of service when processing icons within specially crafted PE files. Icon limits are now in place with corresponding clamd and clamscan configuration parameters.
Improvements to the fidelity of the ClamAV pattern matcher.
Opt-in collection of statistics. Statistics collected are: sizes and MD5 hashes of files, PE file section counts and section MD5 hashes, and names and counts of detected viruses. Enable statistics collection with the --enable-stats clamscan flag or StatsEnabled clamd configuration parameter.
Improvements to ClamAV build process, unit tests, and platform support.
Patch by Arkadiusz Miskiewicz to improve error handling in freshclam.
ClamAV 0.98.2 also includes miscellaneous bug fixes and documentation improvements.