ClamAV (Clam AntiVirus) is a free software, cross-platform antimalware toolkit able to detect many types of malware, including viruses. It was developed for Unix and has third party versions available for AIX, BSD, HP-UX, Linux, macOS, OpenVMS, OSF (Tru64), Solaris and Haiku. As of version 0.97.5, ClamAV builds and runs on Microsoft Windows. Both ClamAV and its updates are made available free of charge. One of its main uses is on mail servers as a server-side email virus scanner.
ClamAV was initially released with version 0.10 on 8 May 2002, by Polish university student Tomasz Kojm. In 2007, it was acquired by Sourcefire, which in turn was acquired by Cisco in 2013 and now operates under its Talos cybersecurity division.
In 2008, Barracuda Networks was sued by Trend Micro for its distribution of ClamAV as part of a security package. Trend Micro claimed that Barracuda's utilization of ClamAV infringes on a software patent for filtering viruses on an Internet gateway. The free software community responded in part by calling for a boycott against Trend Micro. The boycott was also endorsed by the Free Software Foundation. Barracuda Networks counter-sued with IBM-obtained patents in July 2008. On 19 May 2011, the U.S. Patent and Trademark Office issued a Final Rejection (a determination by the patent examiner that the claims in a patent application are unpatentable, which is follo
What is ClamAV?
ClamAV is an open-source antivirus & anti-malware program for Windows from Cisco Systems, Inc. (developed by Cisco). It ranks 1st by popularity among antivirus & anti-malware in this catalogue. The first release dates back to 2001. It is written in C++ and C. Besides Windows, it is available for cross-platform.
Installation and requirements
Official installers exist for 64-bit, ARM64 and 32-bit as MSI. Installation asks for administrator rights. The installer supports unattended (silent) installation. An MSI package is available for deployment with Group Policy, Intune or Configuration Manager.
Updates and version history
The current version is 1.5.4, released on August 7, 2026. 10 versions are listed since July 5, 2022, each with links to its own installer files. That is about 2.4 releases a year.
Popularity and file types
The Chocolatey package has been downloaded 29,978 times. The source code on GitHub (Cisco-Talos/clamav) has 7,418 stars. Wikipedia has an article about it in 22 of our languages. Similar programs include YARA, Malwarebytes and FLOSS.
Project description on GitHub: “ClamAV - Documentation is here: https://docs.clamav.net”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Native ARM64 build for Windows on Arm
- MSI package for managed deployment
- Documented silent install
- Also runs on cross-platform
- Large user base
- Mature project (since 2001)
Cons
- Installation needs administrator rights
In short: ClamAV is an open-source antivirus & anti-malware tool for 64-bit, ARM64 and 32-bit PCs. Administrators can deploy it unattended.
Screenshots
Is ClamAV safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
A025FA23A4B9D64FCE448D5A211AFCF30DC26BA6528186E6223D1B945F9D95D6· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Recent versions
All 10 versions ›10 versions over 4 years · about 2.4 a year
| Version | Date | Size | Files |
|---|---|---|---|
| 1.5.4Latest | August 7, 2026 | — | 32-bit MSIARM64 MSI64-bit MSI |
| 1.5.3 | July 1, 2026 | — | 32-bit MSIARM64 MSI64-bit MSI |
| 1.5.2 | March 4, 2026 | — | 32-bit MSIARM64 MSI64-bit MSI |
| 1.5.1 | October 15, 2025 | — | ARM64 MSI32-bit MSI64-bit MSI |
| 1.5.0 | October 6, 2025 | — | ARM64 MSI32-bit MSI64-bit MSI |
| 1.4.2 | January 22, 2025 | — | 64-bit MSI |
| 1.3.1 | April 17, 2024 | — | 64-bit MSI |
| 1.3.0 | February 7, 2024 | — | 64-bit MSI |
Release cycle and support
Version 1.5.4 belongs to the 1.5 release line, still supported, with no end date announced.
| Release line | Released | Support ends | Latest version | Status |
|---|---|---|---|---|
| 1.5 | October 7, 2025 | not announced | 1.5.4 | Supported |
| 1.4 (LTS)LTS | August 15, 2024 | August 15, 2027 | 1.4.6 | Supported |
| 1.3 | February 7, 2024 | February 7, 2026 | 1.3.2 | End of life |
| 1.2 | August 27, 2023 | December 15, 2024 | 1.2.3 | End of life |
| 1.1 | May 1, 2023 | June 7, 2024 | 1.1.3 | End of life |
| 1.0 (LTS)LTS | November 28, 2022 | November 28, 2025 | 1.0.9 | End of life |
| 0.105 | May 4, 2022 | September 1, 2023 | 0.105.2 | End of life |
| 0.104 | September 2, 2021 | March 28, 2023 | 0.104.4 | End of life |
Install from the command line
Silent install ›winget install --id Cisco.ClamAV -echoco install clamav -ymsiexec /i clamav-1.5.4.win.x64.msi /qn /norestartmsiexec /x {D9F136C1-3691-47E3-9079-4FE9C9010504} /qn /norestartRelated guide: How to use winget: install and update apps
Information
- Publisher
- Cisco Systems, Inc.
- Developer
- Cisco and Sourcefire
- Category
- Antivirus & anti-malware
- Licence
- GPL-2.0
- Price
- Free
- Source code
- github.com/Cisco-Talos/clamav
- Written in
- C++ and C
- Requires
- Windows 11 / 10
- Architecture
- 64-bit, ARM64, 32-bit
- Installer
- MSI
- Other platforms
- cross-platform
- Version
- 1.5.4
- Released
- August 7, 2026
- First release
- 2001
- Added to the catalogue
- July 5, 2022
- Versions listed
- 10
- Updates / year
- 2.4
- Chocolatey downloads
- 29,978
- Downloads on ExeAtlas
- 9
- GitHub stars
- 7,418
- GitHub forks
- 939
- Website
- github.com
- winget ID
- Cisco.ClamAV
- Chocolatey package
- clamav
- MSI product code
- {D9F136C1-3691-47E3-9079-4FE9C9010504}
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to ClamAV
See all ›-
Open source101.1K ↓ -
Proprietary10.6M ↓ -
Open source3K ↓ -
Proprietary229.8K ↓ -
ESET Endpoint Antivirus13.1.2036.0ESET Endpoint Antivirus is a complete security solution produced from our long-term effort to combine maximum protection and a minimal system footprint.Proprietary168.7K ↓ -
Free198.7K ↓ -
Free★ 1.6K -
Velociraptor0.65.3Velociraptor is a tool for collecting host based state information using The Velociraptor Query Language (VQL) queries.Open source★ 4.4K
Frequently asked questions
Is ClamAV free?
Yes. ClamAV is open-source software under the GPL-2.0 licence.
Is ClamAV safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install ClamAV with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Can ClamAV be installed silently?
Yes. The silent install page lists the exact command for each installer, including msiexec for the MSI package.
Does ClamAV run on ARM (Windows on Arm)?
Yes, there is a native ARM64 installer.
Where can I download an older version of ClamAV?
The versions page lists all 10 versions with links to their official installer files, back to July 5, 2022.
What are alternatives to ClamAV?
YARA, Malwarebytes, FLOSS, SUPERAntiSpyware and ESET Endpoint Antivirus. The alternatives page compares them.
