ClamShield - Windows GUI for ClamAV

Features

• Automatic ClamAV engine download and setup on Windows.
• One-click FreshClam signature updates.
• Optional SecuriteInfo third-party signatures using an account-specific FreshClam URL stored with Windows encryption.
• Optional SaneSecurity signatures downloaded from public rsync mirrors and verified with the provider's official GPG key.
• Optional VirusTotal Cloud second-opinion layer for Results refinement, real-time Shield cloud checks, and user-controlled unknown-file uploads with configurable size limits.
• Optional Microsoft Defender compatibility exclusions for ClamShield YARA folders and quarantine storage.
• Optional Windows DNS protection using public, account-free filtering resolvers from Cloudflare, AdGuard, CleanBrowsing, or Control D, with saved settings for restoration.
• Optional YARA scanning powered by ready-to-use YARA Forge rule packages.
• YARA Forge Core rules are enabled by default, with Extended and Full profiles available for advanced coverage.
• Separate update controls for ClamAV, SecuriteInfo, SaneSecurity, YARA Forge, and ClamShield releases.
• Persistent weekly or monthly scheduled scans with saved disk, directory, and running-process targets.
• Optional idle-only scheduling based on Windows keyboard and mouse inactivity; an active scheduled scan stops when activity resumes.
• Manual full system, folder, file, and memory scans.
• Windows process scan checks executable images used by running processes.
• Low-impact real-time shield for watched folders.
• Automatic detection of custom Desktop, Documents, Downloads, and browser download folders.
• Shield cache to avoid repeatedly scanning unchanged files.
• SQLite-backed shield cache to avoid large JSON cache files and startup stalls.
• User-controlled shield depth and concurrent scan count.
• Quarantine management and threat action prompts.
• Exceptions list for trusted files and folders.
• Results page actions for per-file quarantine, exception, VirusTotal cloud checks, MD5 hash reports, and user-controlled VirusTotal upload checks.
• One-click false-positive reporting helpers for exceptions with provider-specific routing for ClamAV, SecuriteInfo, SaneSecurity, and YARA Forge detections.
• Tray app with background monitoring and threat popup alerts.
• Clean NSIS installer and uninstaller.

Follow ClamShield - Windows GUI for ClamAV

ClamShield - Windows GUI for ClamAV Web Site