CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

MIRT Submits Files to which Vendors?

 
Post new topic   Reply to topic       All -> FavForums -> MIRT Discussion [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
Paul

CastleCops Founder


Joined: Feb 22, 2002
Posts: 27351

Administrators Firetrust Forums Admin MIRT Moderators MVP Phishing Squad Premium Team CC Committee

PostPosted: Wed Jan 03, 2007 12:00 am    Post subject: MIRT Submits Files to which Vendors?
Reply with quote

The malware samples we find or that are sent to us reach over 60 vendors. They also go out to various AV watch groups, CERTs, and individuals within the antivirus community. If you are a vendor interested in receiving such a feed, contact me directly.

If you are interested in joining the MIRT Hunters, please contact nosirrah.


_________________
Paul Laudanski - http://www.laudanski.com
http://www.linkedin.com/pub/1/49a/17b
Back to top
View users profile Send private message Send email Visit posters website
fatdcuk

MIRT Hunter
Premium Member

Joined: Oct 31, 2006
Posts: 2986
Location: Uk
MIRT Premium

PostPosted: Thu Jan 04, 2007 8:24 pm    Post subject:
Reply with quote

Hi Paul

You have quantified a figure,listed sub-groups but no mention of "which vendors" as such Laughing

I am of course very interested to know which commercial bodies are benefiting from MIRT's activities specifically related to malware listserve.

If it is not breaking any confidentiality agreements would it be possible to post the list in this closed forum for inspection.

TIA

Ade


_________________
Malware hunter....Got Bot ?
http://www.castlecops.com/f269-Malware_Listserv.html
Back to top
View users profile Send private message Visit posters website
suzicat

Microsoft MVP
Premium Member

Joined: Sep 10, 2004
Posts: 416

MVP Premium

PostPosted: Tue Jan 09, 2007 3:23 am    Post subject:
Reply with quote

Quote:
I am of course very interested to know which commercial bodies are benefiting from MIRT's activities specifically related to malware listserve.


Does it matter? This is a service that benefits the entire internet community, not just "commercial bodies". Or don't you see it that way? I think I read some where you posted you only submit to vendors that you "have agreements with".

Back to top
View users profile Send private message Visit posters website
suzicat

Microsoft MVP
Premium Member

Joined: Sep 10, 2004
Posts: 416

MVP Premium

PostPosted: Tue Jan 09, 2007 3:27 am    Post subject:
Reply with quote

There is a list here, which has been posted for a long time now.

CastleCops Link/t170714-.html

Back to top
View users profile Send private message Visit posters website
Paul

CastleCops Founder


Joined: Feb 22, 2002
Posts: 27351

Administrators Firetrust Forums Admin MIRT Moderators MVP Phishing Squad Premium Team CC Committee

PostPosted: Tue Jan 09, 2007 3:37 am    Post subject:
Reply with quote

Yah I could post it, but I have to find the cycles and extract the names from the mailing list.


_________________
Paul Laudanski - http://www.laudanski.com
http://www.linkedin.com/pub/1/49a/17b
Back to top
View users profile Send private message Send email Visit posters website
fatdcuk

MIRT Hunter
Premium Member

Joined: Oct 31, 2006
Posts: 2986
Location: Uk
MIRT Premium

PostPosted: Tue Jan 09, 2007 7:40 pm    Post subject:
Reply with quote

suzicat wrote:
Does it matter?



To me obviously or i would'nt have asked the question in the first place Rolling Eyes

suzicat wrote:
This is a service that benefits the entire internet community, not just "commercial bodies". Or don't you see it that way?


Soley with reference to malware listserve(my area of MIRT contribution) i see it as a double edged sword.Vendors on the subsription list and their customers benefit from this service.
Not all netcitizens by any stretch of the imagination equally benefit from this part of the MIRT operation.


suzicat wrote:
I think I read some where you posted you only submit to vendors that you "have agreements with".


Once apon a time i voluntary supplied samples fastrack and product tested to a number of vendors until time constraints ment the field got narrowed to the one that was more greatful for my time&efforts.

I was recruited to MIRT by Nossirah at the SUPERAntiSpyware forums whilst doing product specific testing as a voluntery act.

No formal/informal arrangement existed but the truth be told i done this work freely and after a while the respective vendor gave me thanks and software Lic's as a reward for my contributions towards that product.

Every once in a while i would put in a request for various tools/info and they were *sometimes* fullfilled but never has a formal/informal arrangement or agreement been made todate.
With that i'm still doing voluntary work with testing that product and making fasttrack submissions to Nick S and probaly will as long as they provide a free fully functioning detection & cleaning engine Smile

Sorry to bore you with the detail but now you got it in black&white so there should be no grey area to enter into Smile

BTW Just for the record Suzi the 500+ malware files that i have uploaded to malware listserve database for vendor distribution are not governed by any *arrangements* with the end recipients.

Thanks for the links peeps:)


_________________
Malware hunter....Got Bot ?
http://www.castlecops.com/f269-Malware_Listserv.html
Back to top
View users profile Send private message Visit posters website
nosirrah

Security Expert
Special Response Team

Joined: Apr 19, 2006
Posts: 6301
Location: USA
MIRT MVP Premium Rootkit Responders Security Experts SRT

PostPosted: Tue Jan 09, 2007 8:24 pm    Post subject:
Reply with quote

Quote:
Does it matter?


Quote:
To me obviously or i would'nt have asked the question in the first place


Don't make me separate you two . Razz

Quote:
Soley with reference to malware listserve(my area of MIRT contribution) i see it as a double edged sword.Vendors on the subsription list and their customers benefit from this service.
Not all netcitizens by any stretch of the imagination equally benefit from this part of the MIRT operation.


If a vendor wants on the list , they get on the list . If there is ever a legit vendor found that is not on the list let us know and we will invite them .

On the flip side there is absolutely nothing we can do about the vendors themselves . If a user chooses a crummy product that is on our list then obviously they will be less protected than if they choose one of the top antimalware products that is also on the list .

Equality is a guideline but making a difference is the goal .

Back to top
View users profile Send private message Send email
suzicat

Microsoft MVP
Premium Member

Joined: Sep 10, 2004
Posts: 416

MVP Premium

PostPosted: Tue Jan 09, 2007 9:31 pm    Post subject:
Reply with quote

Quote:
Soley with reference to malware listserve(my area of MIRT contribution) i see it as a double edged sword.Vendors on the subsription list and their customers benefit from this service.
Not all netcitizens by any stretch of the imagination equally benefit from this part of the MIRT operation.


Perhaps you are forgetting that there are a number of free anti-virus and free anti-spyware programs that *are* available to anyone and everyone on the net.

MIRT is a service to all because the more companies and products, free or commercial, have the malware from MIRT in their definitions, the less money the malware pushers make, the less likely the malware is to spread, the less likely users become part of botnets, etc.

It's not all just about money. IMO, It's about helping users be free of malware, no matter if it's by commercial companies, or by vendors who offer their apps free.

Back to top
View users profile Send private message Visit posters website
StephenR

Cadet
Cadet


Joined: Jan 10, 2007
Posts: 4
Location: UK

PostPosted: Wed Jan 10, 2007 10:53 am    Post subject: List of vendors notified
Reply with quote

suzicat wrote:
There is a list here, which has been posted for a long time now.

CastleCops Link/t170714-.html


This link is dead.

Back to top
View users profile Send private message
nosirrah

Security Expert
Special Response Team

Joined: Apr 19, 2006
Posts: 6301
Location: USA
MIRT MVP Premium Rootkit Responders Security Experts SRT

PostPosted: Wed Jan 10, 2007 12:21 pm    Post subject:
Reply with quote

Nope , you just don't have access .

PM me if you want to join MIRT .

Back to top
View users profile Send private message Send email
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> MIRT Discussion All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You cannot download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer