On Jun 29, 2011, at 7:58 AM, polloxx wrote: > On Wed, Jun 29, 2011 at 12:49 PM, Joel Esler <jes...@sourcefire.com> wrote: >> If you have a sample of the file, submitting it through ClamAV's submission >> interface makes it "bubble up" so the rule writers can get to it faster. >> >> (instead of waiting for it to come through Virustotal) >> > > Joel, > > > I did that yesertday.
If you are using winnow malware rules (part of sanesecurity's distrobution) you can also send a sample to virus_samples at oitc.com. We release temp sigs quickly until clamav folks provides a formal sig. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml