Article View: alt.comp.virus
Article #130Re: Win32/RAMNIT.A Anyone?
From: David Kaye
Date: Thu, 26 Aug 2010 07:31
Date: Thu, 26 Aug 2010 07:31
9 lines
2290 bytes
2290 bytes
John Navas <spamfilter1@navasgroup.com> wrote: >Best bet is to search for answers with Google Groups before posting, >and after posting to separate (the little) wheat from (lots of) chaff. Indeed. Of course, this is what I've always done before posting about such things. Unfortunately, I'm often/usually on the frontlines of malware infestations, so there's often not much to go on when I first see something I'm not familiar with.
Technical Details
Message-ID:
<i55588$mq8$2@news.eternal-september.org>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!nntp.club.cc.cmu.edu!feeder.erje.net!eternal-september.org!feeder.eternal-september.org!.POSTED!not-for-mailReferences:
<i2o1or01uos@news2.newsguy.com> <56e3916c-4af4-41a6-9f65-ea55a89369fa@i28g2000yqa.googlegroups.com> <i2o47d0214h@news2.newsguy.com> <dYP3o.40115$3%3.20843@newsfe23.iad> <tE74o.32165$OU6.25112@newsfe20.iad> <i2rksi028go@news3.newsguy.com> <Crj4o.33326$Bh2.32962@newsfe04.iad> <i2sopq01lhf@news4.newsguy.com> <L0p4o.32466$OU6.4877@newsfe20.iad> <Xns9DC6C5344186EHHI2948AJD832@69.16.185.247> <i540le$ev5$1@news.eternal-september.org> <i54i23$msv$1@news.eternal-september.org> <3clb76dv7989oc28h98fhs99f7uhumtl8t@4ax.com>Show Full Headers
Complete Article Headers
X-Google-Thread: fcd68,b851b95f3c6d1e77 X-Google-NewGroupId: yes X-Google-Thread: 111298,b851b95f3c6d1e77 X-Google-NewGroupId: yes X-Google-Thread: 115dc1,b851b95f3c6d1e77 X-Google-NewGroupId: yes X-Google-Thread: fa874,b851b95f3c6d1e77 X-Google-NewGroupId: yes X-Google-Attributes: gid67dc2eda8a,gide9d2b45abe,gidb181582988,gidaa617e85ca,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!nntp.club.cc.cmu.edu!feeder.erje.net!eternal-september.org!feeder.eternal-september.org!.POSTED!not-for-mail From: sfdavidkaye2@yahoo.com (David Kaye) Newsgroups: alt.comp.virus,alt.comp.anti-virus,microsoft.public.security.virus,ba.internet Subject: Re: Win32/RAMNIT.A Anyone? Date: Thu, 26 Aug 2010 07:31:22 GMT Organization: Disorganized Lines: 11 Message-ID: <i55588$mq8$2@news.eternal-september.org> References: <i2o1or01uos@news2.newsguy.com> <56e3916c-4af4-41a6-9f65-ea55a89369fa@i28g2000yqa.googlegroups.com> <i2o47d0214h@news2.newsguy.com> <dYP3o.40115$3%3.20843@newsfe23.iad> <tE74o.32165$OU6.25112@newsfe20.iad> <i2rksi028go@news3.newsguy.com> <Crj4o.33326$Bh2.32962@newsfe04.iad> <i2sopq01lhf@news4.newsguy.com> <L0p4o.32466$OU6.4877@newsfe20.iad> <Xns9DC6C5344186EHHI2948AJD832@69.16.185.247> <i540le$ev5$1@news.eternal-september.org> <i54i23$msv$1@news.eternal-september.org> <3clb76dv7989oc28h98fhs99f7uhumtl8t@4ax.com> Injection-Date: Thu, 26 Aug 2010 07:31:20 +0000 (UTC) Injection-Info: mx02.eternal-september.org; posting-host="5kwjWAiNJC2TRJ0Q5GTQpQ"; logging-data="23368"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19Wh2JidBAzPI+JQ+CZ/wABKdqH7FesiFI=" X-Newsreader: News Xpress 2.01 Cancel-Lock: sha1:q7TYLVzADHj7ZLuRKTLU3sHto0Q=