Folks, nosirrah had a brilliant idea of creating another forum just for mirt handler sample attachments:

/f269-Malware_Listserv.html

All subsequent MIRT handler posts will be there, and then sent out across the wire periodically.

This means the current unknown files forum will continue to be used as before, by anyone who wants to submit an unknown file. In that case, the posts won't get lost and will be attended to by mirt handlers, security experts, et al.

Thank you all.

I think I'm starting to lose track of how things work here... LOL!

One question: are all files uploaded in the Unknown Files forum now automatically forwarded to all developers, if they're confirmed malware?

_________________
Tony CLSID List

Paul, would you like me to move all the applicable threads over to the new forum?

Edit: Oops, I see that has already been done.

MIRT handlers will evaluate what is submitted here (unknown file forum) .

The handlers will resubmit the malware samples here : /f269-Malware_Listserv.html .

Twice a day samples from the new Malware Listserv will be distributed to all vendors via software Paul has coded .

Thank you. Now I know what not to submit to vendors myself.

_________________
Tony CLSID List

Thanks for answering Bruce. Yes Tony, we're moving to an hourly distribution, but not yet. We've got 154 subscribers to the listserv at the moment. Plus starting this week we are ftp'ing the files to three locations. There has also been requests for XML feeds.

We're going to move MIRT Handlers to a similar system as PIRT uses. But at the moment we're taking baby steps.

So developers and SEs have access to both download sections as well.

This way we can get back to using unknown files as it was used prior to MIRT, and OP logs/files won't be lost in the fray.

Thank you Paul. I did subscribe myself, but I gather that, as long as I'm monitoring both forums, the Listserv will not provide me with more files than the ones uploaded here.

I may just disable that List option then, as I'm getting quite enough mail already as it is...

_________________
Tony CLSID List

The listserv will be receiving the pirt malware attachments. Something the forum may not see.

Ah, OK...

_________________
Tony CLSID List