It’s now time to select the winner among the 10 finalists in each category.
Head over to Sourceforge website and cast your vote! Our project is listed under the Best tool for sysadmin category:

Vote for us!

We prepared a video message for all of you, to say thanks for everything you did to make this project grow: be it submit a malware sample, report a false positive, open a bug report, edit the wiki, or answer a message on our mailing-lists:

[Share it on Facebook]

Let us know if you enjoy the video :) maybe we’ll try to make more in the future.

More information on Sourceforge Community Choice Awards 2009 is available at http://sf.net/cca .

June 24 – 2:00pm
“ClamAV Basics, Common Usage, Tips & Tricks”

The presentation will provide a broad introduction to Clam AntiVirus, its main features and advantages. Tomasz will focus his remarks on the following aspects of ClamAV:
Software design and core components (libclamav, clamd, clamscan, clamdscan, freshclam);
Installation
Virus detection techniques
Detection of Phishing and Potentially Unwanted Applications
Clamscan, clamd & clamdscan in practice
Configuration tips and best practices
Troubleshooting

June 26 – 2:00pm
“Introduction to the ClamAV Engine and Signatures.”

The presentation, aimed toward System Administrators and advanced users, will be an introduction to ClamAV internals. Tomasz will discuss how the scan engine works and how to create various types of signatures, including phishing and logical signatures. Although the official virus databases are released on a regular basis by ClamAV Researchers, the ability to use in-house or 3rd party developed signatures makes the system highly flexible. Tomasz will also discuss the basic API and how it can be used to perform file scanning.

Register: http://www.dojosec.com/?page_id=37
Directions: http://www.capitol-college.edu/visit-campus/directions-campus

Abstract

About Alain Zidouemba

Alain Zidouemba was born in Ouagadougou, Burkina Faso. He studied Mathématiques Supérieures and Mathématiques Spéciales at the Lycée Jacques Amyot in France and Electrical and Computer Engineering at Howard University in the US. He worked in the area of network modelling and simulation at OPNET Technologies before taking a position at PestPatrol as a Spyware researcher. He later joined Computer Associates to work on intrusion prevention and behavioral malware analysis. Alain recently became part of the Vulnerability Research Team (VRT) at Sourcefire and performs research in the areas of intrusion prevention and anti-malware.

ClamAV detects Downadup, also known as Conficker, as Worm.Downadup. Once on a system it downloads components that ClamAV detects as members of the Trojan.Downloader- family of signatures.

The virus primarily exploits MS08-067; it can also spread through USB sticks. Since the virus is not spread by email we don’t expect to see much activity in our core user-base, which tends to use ClamAV to scan emails. We are, nevertheless, keeping an eye out for it through freshclam’s statistics gathering system – we are yet to see any obvious spike of activity from it. If we hear anything we’ll let you know.

684,777, 828, 832, 954, 1046, 1085, 1092, 1098, 1135, 1137, 1145, 1150 , 1154, 1155, 1157, 1158, 1160, 1162, 1165, 1174, 1179, 1181, 1184, 1185, 1186, 1187, 1189, 1192, 1196, 1197, 1199, 1201, 1203, 1204, 1205, 1210 , 1211, 1212, 1213, 1216, 1217, 1219, 1221

For more details, please refer to Whats New in 0.94.1.

The presentation, given by Török Edvin, will cover the best practices and common pitfalls in ClamAV deployment and upgrades.

Date: 3/12/08
Time: 18:00UTC
Presenter: Török Edvin
Title: Common Pitfalls in ClamAV
URL: https://sourcefire.webex.com/sourcefire/onstage/g.php?t=a&d=798925597

Phone Number: Call-in toll-free number (US/Canada) 866-469-3239, Call-in toll number 1-650-429-3300
Event Number: 798 925 597

Abstract

The presentation will cover common pitfalls in the deployment of ClamAV,
such as permissions, resource limits and build issues. It will then
recommend best practices for logging, scan limits, SMP systems, usage of
PUA, setting up freshclam, using ClamAV on more hosts on your network and
submitting detection statistics, followed by an overview of the engine
configuration flags found in 0.94.1.

Finally the presentation will describe a recommended upgrade procedure, showing best practices to avoid common pitfalls: reviewing configuration changes, testing the new version before deployment and restarting the daemons.

About The Speaker

Török Edvin, was born in 1985 in Timisoara, Romania. He is a Hungarian
developer who joined the ClamAV team in September 2006 as a coder, after
successfully completing the Google Summer of Code 2006 program where he
developed an anti-phishing module for ClamAV. He has been with Sourcefire
since May 2008, implementing features such as JavaScript normalization, and
working on portability, and unit testing for ClamAV. Prior to joining
Sourcefire he has worked at “Level 7 Software” as a Java developer. He has
graduated the “Bartok Béla” Theoretical High School in 2004, and is
currently a 5th year student at “Politehnica” University of Timisoara,
Automation and Computers Faculty.

He has presented about a research static analysis tool at the 2008 “Alpine Verification Meeting” in Semmering, Austria. Since March 2008 he has commit rights to the Low Level Virtual Machine open-source project. He has also experimented with compression algorithms, Linux kernel modules, and code optimization techniques for cache efficiency and branch prediction.

Miscellaneous Information

To view/hear the webinar visit the URL where you will receive an attendee ID.
Then call one of the above phone numbers quoting the event number and your attendee ID. You will hear Edwin’s talk via your phone (not the computer’s speakers) and be able to follow his slides and enter the Q&A session via your browser.

Slides from this webinar are available for download: PDF and ODP

This session will be recorded and archived on Sourcefire.com in the ClamAV® Webcast Series section.

A recording of this event is now available for download.

The slides used during the presentation are available for download in odp and ppt format.

The sources used during the livedemo are available for download as well.

The presentation, given by Török Edwin, will cover the new features of ClamAV 0.94, such as logical signatures and unit testing, and also its improvements
in areas such as anti-phishing and script scanning.

This will be followed by an overview of the evolution of anti-phishing and script malware detection technology in ClamAV from 0.90 to 0.94, and by a
live demonstration of how to use some of the new and improved features in 0.94 .

Registration Details for the live session:

Date: Wed 3rd September
Time: 1700GMT
Registration link:
https://sourcefire.webex.com/sourcefire/onstage/g.php?d=799008644&t=a

As always this session will be recorded and archived on ClamAV.net and Sourcefire.com.