@@ -1,41 +1,8 @@

-0.96

+0.96.1

+------

-This release of ClamAV introduces new malware detection mechanisms and other

-significant improvements to the scan engine. The key features include:

-

-    - The Bytecode Interpreter: the interpreter built into LibClamAV allows

-      the signature writers to create and distribute very complex detection

-      routines and remotely enhance the scanner's functionality

-

-    - Heuristic improvements: improve the PE heuristics detection engine by

-      adding support of bogus icons and fake PE header information. In a

-      nutshell, ClamAV can now detect malware that tries to disguise itself

-      as a harmless application by using the most common Windows program icons.

-

-    - Signature Improvements: logical signature improvements to allow more

-      detailed matching and referencing groups of signatures. Additionally,

-      improvements to wildcard matching on word boundaries and newlines.

-

-    - Support for new archives: 7zip, InstallShield and CPIO. LibClamAV

-      can now transparently unpack and inspect their contents.

-

-    - Support for new executable file formats: 64-bit ELF files and OS X

-      Universal Binaries with Mach-O files. Additionally, the PE module

-      can now decompress and inspect executables packed with UPX 3.0.

-

-    - Support for DazukoFS in clamd

-

-    - Performance improvements: overall performance improvements and memory

-      optimizations for a better overall resource utilization experience.

-

-    - Native Windows Support: ClamAV will now build natively under Visual

-      Studio. This will allow 3rd Party application developers on Windows

-      to easily integrate LibClamAV into their applications.

-

-The complete list of changes is available in the ChangeLog file. For upgrade

-notes and tips please see: https://wiki.clamav.net/Main/UpgradeNotes096

+This is a bugfix release, please refer to the ChangeLog for the complete

+list of changes.

 --

 The ClamAV team (http://www.clamav.net/team)

-

@@ -2,6 +2,16 @@ Note: This README/NEWS file refers to the source tarball. Some things described

 here may not be available in binary packages.

 --

+

+0.96.1

+------

+

+This is a bugfix release, please refer to the ChangeLog for the complete

+list of changes.

+

+--

+The ClamAV team (http://www.clamav.net/team)

+

 0.96

 ----

@@ -71,7 +71,7 @@

     \vspace{3cm}

     \begin{flushright}

 	\rule[-1ex]{8cm}{3pt}\\

-	\huge Clam AntiVirus 0.96\\

+	\huge Clam AntiVirus 0.96.1\\

 	\huge \emph{User Manual}\\

     \end{flushright}

@@ -127,7 +127,7 @@

 	\item{POSIX compliant, portable}

 	\item{Fast scanning}

 	\item{Supports on-access scanning (Linux and FreeBSD only)}

-	\item{Detects over 750.000 viruses, worms and trojans, including

+	\item{Detects over 775.000 viruses, worms and trojans, including

 	      Microsoft Office macro viruses, mobile malware, and other threats}

 	\item{Built-in bytecode interpreter allows the ClamAV signature writers

 	      to create and distribute very complex detection routines and

@@ -812,6 +812,9 @@ N * * * *	/usr/local/bin/freshclam --quiet

 	\item PDF

 	\item HTML

     \end{itemize}

+    In the case of Office, RTF and PDF files, libclamav will only extract the

+    embedded objects and will not decode the text data itself. The text

+    decoding and normalization is only performed for HTML files.

     \subsubsection{Data Loss Prevention}

     Libclamav includes a DLP module which can detect credit card and

@@ -56,7 +56,7 @@ original version by:  Nikos Drakos, CBLU, University of Leeds

 <BR>

 <BR>

     <DIV ALIGN="RIGHT">

-<BR>	<BIG CLASS="HUGE">Clam AntiVirus 0.96

+<BR>	<BIG CLASS="HUGE">Clam AntiVirus 0.96.1

 <BR>	<BIG CLASS="HUGE"><SPAN  CLASS="textit">User Manual</SPAN>

 <BR>    

 </BIG></BIG></DIV>

@@ -227,7 +227,7 @@ original version by:  Nikos Drakos, CBLU, University of Leeds

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -56,7 +56,7 @@ original version by:  Nikos Drakos, CBLU, University of Leeds

 <BR>

 <BR>

     <DIV ALIGN="RIGHT">

-<BR>	<BIG CLASS="HUGE">Clam AntiVirus 0.96

+<BR>	<BIG CLASS="HUGE">Clam AntiVirus 0.96.1

 <BR>	<BIG CLASS="HUGE"><SPAN  CLASS="textit">User Manual</SPAN>

 <BR>    

 </BIG></BIG></DIV>

@@ -227,7 +227,7 @@ original version by:  Nikos Drakos, CBLU, University of Leeds

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -157,7 +157,7 @@ Contents</A>

  SRC="img2.png"

  ALT="\begin{boxedminipage}[b]{\textwidth}

 ClamAV User Manual,

-\copyright  2007 - 2...

+\copyright \ 2007 - 2...

 ... Franklin Street, Fifth Floor, Boston,

 MA 02110-1301, USA.

 \end{boxedminipage}">

@@ -182,7 +182,7 @@ ClamAV and Clam AntiVirus are trademarks of Sourcefire, Inc.

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -61,7 +61,7 @@ Binary packages</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -81,7 +81,7 @@ Installation</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -133,7 +133,7 @@ the package for these compilers are usually called: gcc, g++, or gcc-c++.

 <!--End of Navigation Panel-->

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -75,7 +75,7 @@ Installing on shell account</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -69,7 +69,7 @@ Adding new system user and group</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -75,7 +75,7 @@ Compilation of base package</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -65,7 +65,7 @@ Compilation with clamav-milter enabled</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -142,7 +142,7 @@ All 4 tests passed

 <!--End of Navigation Panel-->

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -96,7 +96,7 @@ $ CK_FORK=no ./libtool --mode=execute valgrind unit_tests/check-clamav

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -87,7 +87,7 @@ Configuration</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -79,7 +79,7 @@ Introduction</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -79,7 +79,7 @@ clamd</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -90,7 +90,7 @@ On-access scanning</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -70,7 +70,7 @@ clamav-milter</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -75,7 +75,7 @@ Testing</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -140,7 +140,7 @@ N * * * *	/usr/local/bin/freshclam --quiet

 <!--End of Navigation Panel-->

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -77,7 +77,7 @@ Closest mirrors</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -108,7 +108,7 @@ The only private data that is transferred is an IP address, which is used

 <!--End of Navigation Panel-->

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -80,7 +80,7 @@ Usage</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -230,7 +230,7 @@ Scan stream: clamd will return a new port number you should

 <!--End of Navigation Panel-->

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -76,7 +76,7 @@ Clam<SPAN  CLASS="textbf">d</SPAN>scan</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -67,7 +67,7 @@ Features</A>

 </LI>

 <LI>Supports on-access scanning (Linux and FreeBSD only)

 </LI>

-<LI>Detects over 750.000 viruses, worms and trojans, including

+<LI>Detects over 775.000 viruses, worms and trojans, including

 	      Microsoft Office macro viruses, mobile malware, and other threats

 </LI>

 <LI>Built-in bytecode interpreter allows the ClamAV signature writers

@@ -195,7 +195,7 @@ Features</A>

 <!--End of Navigation Panel-->

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -92,7 +92,7 @@ SIGTERM signal. In other case you can lose access

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -70,7 +70,7 @@ Output format</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -79,7 +79,7 @@ clamscan</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -83,7 +83,7 @@ Error messages are printed in the following format:

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -129,7 +129,7 @@ LibClamAV</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -63,7 +63,7 @@ Licence</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -79,7 +79,7 @@ Supported formats and features</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -87,7 +87,7 @@ Executables</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -62,7 +62,7 @@ Mail files</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -98,7 +98,7 @@ Archives and compressed files</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -86,7 +86,7 @@ Alternatively you can try asking on the <code>#clamav</code> IRC channel - launc

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -68,12 +68,15 @@ Documents</A>

 </LI>

 </UL>

+    In the case of Office, RTF and PDF files, libclamav will only extract the

+    embedded objects and will not decode the text data itself. The text

+    decoding and normalization is only performed for HTML files.

 <P>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -62,7 +62,7 @@ Data Loss Prevention</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -75,7 +75,7 @@ Others</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -91,7 +91,7 @@ API</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -64,7 +64,7 @@ Header file</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -73,7 +73,7 @@ Initialization</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -125,7 +125,7 @@ Load bytecode.

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -69,7 +69,7 @@ Error handling</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -75,7 +75,7 @@ Engine structure</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -79,7 +79,7 @@ const char *cl_engine_get_str(const struct cl_engine *engine,

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -65,7 +65,7 @@ Virus submitting</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -103,7 +103,7 @@ Database checks</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -213,7 +213,7 @@ Allow heuristic match to take precedence. When enabled, if

 <!--End of Navigation Panel-->

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -63,7 +63,7 @@ Memory</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -65,7 +65,7 @@ Forking daemons</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -67,7 +67,7 @@ clamav-config</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -65,7 +65,7 @@ Example</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -82,7 +82,7 @@ Verification OK.

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -613,7 +613,7 @@ Contributors</A>

 <!--End of Navigation Panel-->

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -459,7 +459,7 @@ Donors</A>

 <!--End of Navigation Panel-->

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -63,7 +63,7 @@ Graphics</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -78,7 +78,7 @@ Base package</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -62,7 +62,7 @@ OpenAntiVirus</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -134,7 +134,7 @@ Role: coder

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -64,11 +64,11 @@ Mathematics Department, Macquarie University, Sydney.

 The command line arguments were: <BR>

  <STRONG>latex2html</STRONG> <TT>-local_icons clamdoc.tex</TT>

 <P>

-The translation was initiated by Tomasz Kojm on 2010-03-10

+The translation was initiated by Tomasz Kojm on 2010-05-19

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -69,7 +69,7 @@ Supported platforms</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -77,7 +77,7 @@ UNIX</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>

@@ -60,7 +60,7 @@ Windows</A>

 <BR><HR>

 <ADDRESS>

 Tomasz Kojm

-2010-03-10

+2010-05-19

 </ADDRESS>

 </BODY>

 </HTML>