Sigil

a free malware scanner for Windows

Point it at a file, a folder, or your whole drive — it tells you what's clean and what isn't. No installer, no account, no nagging.

Download for Windows Command-line version

Over 1.6 million known threatsChecked against a large, current signature set that updates itself automatically.

Looks inside archivesOpens zip, 7z, rar, cab, tar and gzip — even archives hidden inside other archives.

Not fooled by a renameIdentifies files by what they really are, not by their extension.

Quarantine and undoMove something suspect aside, and put it right back if it turns out to be fine. Nothing's deleted behind your back.

For the technically inclined

Get it & verify it

One file, nothing to install: download sigil.exe and run it — it's the window you point at files and folders. If you'd rather script or schedule scans, there's an optional command-line build, sigil-cmd.exe; you don't need it for everyday use.

Neither is code-signed yet, so Windows SmartScreen shows a blue box on first run — click More info → Run anyway. Check the SHA-256 first:

sigil.exe 0e82c25b83073d3139d027c13cf7246485655431ff4998de5d5781ee0e161ece
sigil-cmd.exe b68e131c74bb0bbaee63f7b68214d557899d2019a2c5b87e1eb2ceeeab26387e

Command line

sigil-cmd scan C:\Users\me\Downloads
sigil-cmd scan D:\ --json > report.jsonl
sigil-cmd update --url https://av.ai-ministries.com
sigil-cmd selftest

scan — check a path; each file is clean, suspicious, or infected.
update — fetch the latest signatures, verified against a key built into the program, so a tampered mirror is rejected.
selftest — confirm your copy detects its own test set.

Beta software, provided as is, with no warranty of any kind. You use it at your own risk. Free for personal home use.
Signature data includes the open-source ClamAV database (GPL, a project of Cisco Systems) and the MalwareBazaar corpus from abuse.ch (CC0). Sigil is an independent project, not affiliated with or endorsed by either.