# Install clamav with Homebrew, apk, chocolatey, apt, dnf, MacPorts, Nix, pacman, scoop, winget, zypper Anti-virus software. Version 1.5.3 via Homebrew; verified 2026-07-01. ## Install ```sh sudo av install brew:clamav ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install clamav ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install clamav ``` Evidence: MacPorts ports tree: sysutils/clamav/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add clamav ``` Evidence: Alpine Linux edge package indexes: clamav from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install clamav ``` Evidence: Debian stable package indexes: clamav from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install clamav ``` Evidence: Fedora Rawhide package metadata: clamav from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#clamav ``` Evidence: nixpkgs package indexes: pkgs/by-name/cl/clamav/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S clamav ``` Evidence: Arch Linux sync databases: clamav from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install clamav ``` Evidence: openSUSE Tumbleweed package metadata: clamav from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ### Windows - Chocolatey (92%): ```sh choco install clamav ``` Evidence: Chocolatey community package catalog: clamav from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','chocolatey-preinstaller-checks.extension' - Scoop (92%): ```sh scoop install extras/clamav ``` Evidence: Scoop official bucket manifest trees: bucket/clamav.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id Cisco.ClamAV -e ``` Evidence: Windows Package Manager source index: Cisco.ClamAV from https://cdn.winget.microsoft.com/cache/source.msix ## Package facts - **Package key:** brew:clamav - **Package manager:** Homebrew - **Package manager page:** - **Version:** 1.5.3 - **Source summary:** Anti-virus software - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** GPL-2.0-or-later - **Source archive:** - **Last updated:** 2026-07-01T18:14:11Z - **Generated:** 2026-07-08T18:08:21+00:00 ## Executables - clamav-config (cli) - clambc (cli) - clamconf (cli) - clamd (cli) - clamdscan (cli) - clamdtop (cli) - clamonacc (cli) - clamscan (cli) - clamsubmit (cli) - freshclam (cli) - sigtool (cli) - clamav-config (alias) - clambc (alias) - clamconf (alias) - clamd (alias) - clamdscan (alias) - clamdtop (alias) - clamonacc (alias) - clamscan (alias) - clamsubmit (alias) - freshclam (alias) - sigtool (alias) ## Dependencies - json-c - openssl@3 - pcre2 - yara ## Build dependencies - cmake - pkgconf - rust ## Uses from macOS - bzip2 - curl - libxml2 - ncurses ## Install behavior - Post-install hook: not defined - Service: declared - Caveats: To finish installation & run clamav you will need to edit the example conf files at $HOMEBREW_PREFIX/etc/clamav/ - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 1.5.3 - Package-manager updated: 2026-07-01 - Local data: ok - Upstream repository: https://github.com/Cisco-Talos/clamav - info: No cached GitHub release or tag data was available. ## Project history and usage ClamAV is a long-running open source antivirus engine and command-line toolkit for detecting trojans, viruses, malware, and other threats. In package-manager terms, it is the classic installable antivirus stack: clamscan for one-shot scans, clamd for daemonized scanning, freshclam for signature updates, and supporting tools for signatures and configuration. ### Project history The current official repository is maintained under Cisco Talos. The README points to docs.clamav.net, the bundled NEWS file, source builds, package-manager installation, Docker images, and official installers for Linux, macOS, and Windows. ### Adoption history The supplied package-manager data shows ClamAV packaged across Alpine, Debian, Ubuntu, Fedora/DNF, Arch, openSUSE, Nix, MacPorts, Homebrew, Chocolatey, Scoop, winget, and zypper. That breadth reflects its role as the default open source antivirus engine available through OS and language-adjacent package ecosystems. ### How it is used Users typically install the engine and signature tools, update databases with freshclam, scan files with clamscan or clamdscan, and run clamd for service-style scanning. The official sample configurations document clamd.conf and freshclam.conf options such as database directories, logging, official signature handling, and CVD certificate directories. ### Why package nerds care ClamAV is significant because it is both an end-user CLI package and infrastructure plumbing. Package maintainers care about its daemon, database update cadence, bundled signature tooling, optional components, distro-specific config paths, and the difference between upstream official packages and third-party binary packages. ### Timeline - 2012: Cisco-Talos/clamav GitHub repository created. - 2021: v0.104 line introduced official Debian/RPM packages, macOS PKG installers, and updated Windows packaging according to the README. - 2022: ClamAV 1.0.0 released. - 2025: ClamAV 1.0.9 release published on the 1.0 LTS line. - 2026: Main branch NEWS documents ongoing 1.5 and 1.6 development. ### Related projects - Related components include libclamav, clamd, clamdscan, freshclam, sigtool, clamav-milter, the ClamAV documentation repository, official Docker images, and signature database infrastructure. ### Sources - - - - - - ## Security Notes formula declares a Homebrew service. - **Geiger risk:** orange / medium - formula declares a Homebrew service ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Linux: /etc/clamav/freshclam.conf, /etc/clamav/clamd.conf - macOS: /usr/local/etc/clamav/freshclam.conf, /usr/local/etc/clamav/clamd.conf, /opt/local/etc/freshclam.conf, /opt/local/etc/clamd.conf - Unix: /usr/local/etc/freshclam.conf, /usr/local/etc/clamd.conf, /usr/local/etc/clamav-milter.conf - Windows: HKEY_LOCAL_MACHINE/Software/ClamAV/ConfDir, C:\Program Files\ClamAV, C:\ClamAV ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** clamav - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Debian apt - clamav - 1.4.3+dfsg-1: normalized package name match | Debian stable package indexes: clamav from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | anti-virus utility for Unix - command-line interface | https://www.clamav.net/ - Debian apt - clamav-base - 1.4.3+dfsg-1: normalized package name match | Debian stable package indexes: clamav-base from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | anti-virus utility for Unix - base package | https://www.clamav.net/ - Debian apt - clamav-daemon - 1.4.3+dfsg-1: normalized package name match | Debian stable package indexes: clamav-daemon from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | anti-virus utility for Unix - scanner daemon | https://www.clamav.net/ - Debian apt - clamav-doc - 1.4.3+dfsg-1: normalized package name match | Debian stable package indexes: clamav-doc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | anti-virus utility for Unix - documentation | https://www.clamav.net/ - Debian apt - clamav-docs - 1.4.3+dfsg-1: normalized package name match | Debian stable package indexes: clamav-docs from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | anti-virus utility for Unix - documentation | https://www.clamav.net/ - Debian apt - clamav-freshclam - 1.4.3+dfsg-1: normalized package name match | Debian stable package indexes: clamav-freshclam from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | anti-virus utility for Unix - virus database update utility | https://www.clamav.net/ - Debian apt - clamav-milter - 1.4.3+dfsg-1: normalized package name match | Debian stable package indexes: clamav-milter from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | anti-virus utility for Unix - sendmail integration | https://www.clamav.net/ - Debian apt - clamav-testfiles - 1.4.3+dfsg-1: normalized package name match | Debian stable package indexes: clamav-testfiles from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | anti-virus utility for Unix - test files | https://www.clamav.net/ - Debian apt - clamdscan - 1.4.3+dfsg-1: normalized package name match | Debian stable package indexes: clamdscan from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | anti-virus utility for Unix - scanner client | https://www.clamav.net/ - Debian apt - libclamav-dev - 1.4.3+dfsg-1: normalized package name match | Debian stable package indexes: libclamav-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | anti-virus utility for Unix - development files | https://www.clamav.net/ - Debian apt - libclamav12 - 1.4.3+dfsg-1: normalized package name match | Debian stable package indexes: libclamav12 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | anti-virus utility for Unix - library | https://www.clamav.net/ - Nix - clamav: normalized package name match | nixpkgs package indexes: pkgs/by-name/cl/clamav/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - clamav - 1.0.5+dfsg-1.1ubuntu3: normalized package name match | Ubuntu 24.04 LTS package indexes: clamav from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | anti-virus utility for Unix - command-line interface | https://www.clamav.net/ - Ubuntu apt - clamav-base - 1.0.5+dfsg-1.1ubuntu3: normalized package name match | Ubuntu 24.04 LTS package indexes: clamav-base from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | anti-virus utility for Unix - base package | https://www.clamav.net/ - Ubuntu apt - clamav-daemon - 1.0.5+dfsg-1.1ubuntu3: normalized package name match | Ubuntu 24.04 LTS package indexes: clamav-daemon from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | anti-virus utility for Unix - scanner daemon | https://www.clamav.net/ - Ubuntu apt - clamav-docs - 1.0.5+dfsg-1.1ubuntu3: normalized package name match | Ubuntu 24.04 LTS package indexes: clamav-docs from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | anti-virus utility for Unix - documentation | https://www.clamav.net/ ## Related links - [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [openssl@3](https://www.automicvault.com/pkg/brew/openssl-3/) - Runtime dependency declared by Homebrew. - [pcre2](https://www.automicvault.com/pkg/brew/pcre2/) - Runtime dependency declared by Homebrew. - [yara](https://www.automicvault.com/pkg/brew/yara/) - Runtime dependency declared by Homebrew. - [cmake](https://www.automicvault.com/pkg/brew/cmake/) - Build dependency declared by Homebrew. - [pkgconf](https://www.automicvault.com/pkg/brew/pkgconf/) - Build dependency declared by Homebrew. - [rust](https://www.automicvault.com/pkg/brew/rust/) - Build dependency declared by Homebrew. - [chkrootkit](https://www.automicvault.com/pkg/brew/chkrootkit/) - Shares av.db curated category or tags: cli, malware-detection, security. - [rkhunter](https://www.automicvault.com/pkg/brew/rkhunter/) - Shares av.db curated category or tags: cli, malware-detection, security. - [knock](https://www.automicvault.com/pkg/brew/knock/) - Shares av.db curated category or tags: cli, daemon, security. - [sigsum-go](https://www.automicvault.com/pkg/brew/sigsum-go/) - Shares av.db curated category or tags: cli, security, signatures. - [aide](https://www.automicvault.com/pkg/brew/aide/) - Shares av.db curated category or tags: cli, security. - [aircrack-ng](https://www.automicvault.com/pkg/brew/aircrack-ng/) - Shares av.db curated category or tags: cli, security. - [amass](https://www.automicvault.com/pkg/brew/amass/) - Shares av.db curated category or tags: cli, security. - [anubis](https://www.automicvault.com/pkg/brew/anubis/) - Shares av.db curated category or tags: cli, security. - [pompelmi](https://www.automicvault.com/pkg/npm/pompelmi/) - Security-sensitive metadata or terminology overlaps. Shared terms: antivirus, clamav, clamd, clamscan, cli. - [hydra](https://www.automicvault.com/pkg/brew/hydra/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, openssl, openssl-3, pcre2, security. ## Combined YAML source View the package source record on GitHub. [combined/clamav.yml](https://github.com/automic-vault/db/blob/main/combined/clamav.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph