Article View: alt.comp.virus
Article #134Re: Win32/RAMNIT.A Anyone?
From: David H. Lipman
Date: Thu, 26 Aug 2010 20:34
Date: Thu, 26 Aug 2010 20:34
36 lines
3174 bytes
3174 bytes
From: "John Navas" <spamfilter1@navasgroup.com> | On Thu, 26 Aug 2010 06:10:36 -0400, in <i55eiu0305m@news3.newsguy.com>, | "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote: >>From: "John Navas" <spamfilter1@navasgroup.com> >>< snip > >>>>| Best bet is to search for answers with Google Groups before posting, >>>>| and after posting to separate (the little) wheat from (lots of) chaff. >>>>Actually - No. >>>>Many searches are poisoned so one can end up downloading more malware. >>| I've yet to see any case of that. Proof? >>http://www.bluecoat.com/blog/google-image-searches-lead-malware >>http://www.infosecurity-magazine.com/blog/2010/6/30/red-button-seo-poisoning-and- >>malware-campaign/180.aspx >>http://www.downloadsquad.com/2010/04/20/gray-powells-unfortunate-legacy-seo-poisoning- >>and-malware/ | There's nothing wrong with Google. | These are just the usual malware sites. | You might as well just give up on the Internet. The point is through SEO poisoning the infected user won't be able "...separate (the little) wheat from (lots of) chaff". -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
Technical Details
Message-ID:
<i56j4q01q73@news2.newsguy.com>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!news2.google.com!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!extra.newsguy.com!newsp.newsguy.com!news2References:
<tE74o.32165$OU6.25112@newsfe20.iad> <i2rksi028go@news3.newsguy.com> <Crj4o.33326$Bh2.32962@newsfe04.iad> <i2sopq01lhf@news4.newsguy.com> <L0p4o.32466$OU6.4877@newsfe20.iad> <Xns9DC6C5344186EHHI2948AJD832@69.16.185.247> <i540le$ev5$1@news.eternal-september.org> <i54i23$msv$1@news.eternal-september.org> <3clb76dv7989oc28h98fhs99f7uhumtl8t@4ax.com> <i54lhk0240p@news7.newsguy.com> <dgob76tqj3dsj9rdrkfq9qe89n5t1cfasp@4ax.com> <i55eiu0305m@news3.newsguy.com> <i10d76tgtmh3af43bgqurcro10unmqo8gk@4ax.com>Show Full Headers
Complete Article Headers
X-Google-Thread: fcd68,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Thread: 111298,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Thread: 115dc1,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Thread: fa874,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Attributes: gid67dc2eda8a,gide9d2b45abe,gidb181582988,gidaa617e85ca,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!news2.google.com!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!extra.newsguy.com!newsp.newsguy.com!news2
From: "David H. Lipman" <DLipman~nospam~@Verizon.Net>
Newsgroups: alt.comp.virus,alt.comp.anti-virus,microsoft.public.security.virus,ba.internet
Subject: Re: Win32/RAMNIT.A Anyone?
Date: Thu, 26 Aug 2010 16:34:33 -0400
Organization: DHL
Lines: 38
Message-ID: <i56j4q01q73@news2.newsguy.com>
References: <tE74o.32165$OU6.25112@newsfe20.iad> <i2rksi028go@news3.newsguy.com> <Crj4o.33326$Bh2.32962@newsfe04.iad> <i2sopq01lhf@news4.newsguy.com> <L0p4o.32466$OU6.4877@newsfe20.iad> <Xns9DC6C5344186EHHI2948AJD832@69.16.185.247> <i540le$ev5$1@news.eternal-september.org> <i54i23$msv$1@news.eternal-september.org> <3clb76dv7989oc28h98fhs99f7uhumtl8t@4ax.com> <i54lhk0240p@news7.newsguy.com> <dgob76tqj3dsj9rdrkfq9qe89n5t1cfasp@4ax.com> <i55eiu0305m@news3.newsguy.com> <i10d76tgtmh3af43bgqurcro10unmqo8gk@4ax.com>
NNTP-Posting-Host: p9952e48d7f6bf8a8f460dc88d0250dac5ce7296283a502c8.newsdawg.com
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.5931
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5931
X-Face: #!*YlHW<3BNQH,W(*HlLHp!!3C^o,W53`lH?w!P/BI9U&X#l41]a]{(_lFi9uvKIhejF;N7"3{((o^}#4TsAASuyib+4gO;T`p'iU-gC?0Lj'1MyYrhAWCVxHKD~0Jqt9=du~_{E+uqoYt4O$L?M:a>s4@)NMgJjld$%3QOzA[8
X-Comment-To: John Navas
FL-Build: Fidolook 2007 (HV) 6.0.6000.97 - 24/12/2008 20:32:05
X-Debug: On