Notifications of ClamAV signature updates are now available via our
Twitter feed at http://twitter.com/clamav. The notifications include information about the number of signatures added and the total number of signatures in the ClamAV database.
We hope to include other information on that feed later so please feel free to let us know
suggestions, but remember that “twittiquette” means that we don’t wish to flood the feed with
too much information.

There is one new feature in this release. This feature allows ClamAV users optionally to submit statistics to us about what they detect in the field. We will then use this data to determine what types of Malware/Viruses are the most detected in the field and in what geographic area they are.
It closes the following bugs from http://bugs.clamav.net:

684,777, 828, 832, 954, 1046, 1085, 1092, 1098, 1135, 1137, 1145, 1150 , 1154, 1155, 1157, 1158, 1160, 1162, 1165, 1174, 1179, 1181, 1184, 1185, 1186, 1187, 1189, 1192, 1196, 1197, 1199, 1201, 1203, 1204, 1205, 1210 , 1211, 1212, 1213, 1216, 1217, 1219, 1221

For more details, please refer to Whats New in 0.94.1.

The next ClamAV users webcast will be Wednesday 3rd December at 1800UTC (1900CEST; 1300EDT).

The presentation, given by Török Edvin, will cover the best practices and common pitfalls in ClamAV deployment and upgrades.

Date: 3/12/08
Time: 18:00UTC
Presenter: Török Edvin
Title: Common Pitfalls in ClamAV
URL: https://sourcefire.webex.com/sourcefire/onstage/g.php?t=a&d=798925597

Phone Number: Call-in toll-free number (US/Canada) 866-469-3239, Call-in toll number 1-650-429-3300
Event Number: 798 925 597
(more…)

An interesting article on how to write logical signatures is available on Alain’s blog at http://www.snort.org/pub-bin/vrtnews.cgi#38.
Logical signatures have been introduced in the latest stable release of ClamAV.

On Wednesday 3rd September 2008, ClamAV developer Edvin Torok gave a presentation covering the new features of ClamAV 0.94, such as logical signatures and unit testing, and also its improvements in areas such as anti-phishing and script scanning.

A recording of this event is now available for download.

The slides used during the presentation are available for download in odp and ppt format.

The sources used during the livedemo are available for download as well.

Sourcefire is pleased to announce the industry’s first-ever IT security conference dedicated to promoting leading open source security (OSS) technologies and the commercial products that embrace them. BOSS brings together passionate OSS advocates and innovative Sourcefire customers and partners under the same roof to share ideas and experiences.

Register by November 30th – Save $200!

Registration is now open! Sourcefire is offering an early bird discount to those who register by September 30, 2008. To register, or to learn more about the conference, please visit www.bossconference.com. We hope you will join us in Las Vegas for this compelling IT security event!

February 8-10, 2009 – Flamingo Las Vegas

What better place to launch this exciting new conference than the historic Flamingo Las Vegas! Positioned at the center of the Las Vegas Strip, the Flamingo started it all. And Las Vegas itself provides a fitting venue, reflecting the excitement, innovation and growth of the OSS community.

The conference is open to everyone and the open source track will feature vendor independent sessions dedicated to open source security technology. Part of this morning’s announcement is an open call for speakers to take part in the conference. To submit a speaker application visit: www.bossconference.com

The next ClamAV users webcast will be Wednesday 3rd September at 1700GMT (1800BST; 1900CEST; 1300EDT).

The presentation, given by Török Edwin, will cover the new features of ClamAV 0.94, such as logical signatures and unit testing, and also its improvements
in areas such as anti-phishing and script scanning.

This will be followed by an overview of the evolution of anti-phishing and script malware detection technology in ClamAV from 0.90 to 0.94, and by a
live demonstration of how to use some of the new and improved features in 0.94 .

Registration Details for the live session:

Date: Wed 3rd September
Time: 1700GMT
Registration link:
https://sourcefire.webex.com/sourcefire/onstage/g.php?d=799008644&t=a

As always this session will be recorded and archived on ClamAV.net and Sourcefire.com.

We just wanted to remind everyone that the deadline to submit a speaking application for the BOSS Conference www.bossconference.com is coming up on July 15. We’ve received some outstanding proposals to date – keep them coming in. The speaker application is available at: http://www.bossconference.com/speakers.html

We hope to see you in Vegas!

On Wednesday 11th June 2008, ClamAV author and Sourcefire’s ClamAV CTO, Tomasz Kojm, gave the first in what we hope will be the first in a series of ClamAV webinars presented by members of the ClamAV team within Sourcefire.

A recording of this event is now available for download.

The slides used during the presentation are available for download.

The presentation lasts approximately one hour and covers:

1. An overview of ClamAV
2. Architecture
3. Deployment and installation
4. The detection mechanism
5. Troubleshooting
6. Q&A

ClamAV 0.93.1 was released today. This version improves handling of PDF, CAB, RTF, OLE2 and HTML files and includes various bugfixes for 0.93 issues.
You can download it from the usual location.