๐Ÿš€ go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: alt.comp.virus
Article #137

Re: Win32/RAMNIT.A Anyone?

#137
From: John Navas
Date: Fri, 27 Aug 2010 23:43
51 lines
3360 bytes
On Thu, 26 Aug 2010 13:49:05 -0700, in
<6okd76lvg3mpl1j2a276oocr4rumo0p9nd@4ax.com>, John Navas
<spamfilter1@navasgroup.com> wrote:

>On Thu, 26 Aug 2010 16:34:33 -0400, in <i56j4q01q73@news2.newsguy.com>,
>"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote:
>
>>From: "John Navas" <spamfilter1@navasgroup.com>
>>
>>| On Thu, 26 Aug 2010 06:10:36 -0400, in <i55eiu0305m@news3.newsguy.com>,
>>| "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote:
>>
>>>>From: "John Navas" <spamfilter1@navasgroup.com>
>>
>>>>< snip >
>>
>>>>>>| Best bet is to search for answers with Google Groups before posting,
>>>>>>| and after posting to separate (the little) wheat from (lots of) chaff.
>>
>>>>>>Actually - No.
>>
>>>>>>Many searches are poisoned so one can end up downloading more malware.
>>
>>>>| I've yet to see any case of that.  Proof?
>>
>>>>http://www.bluecoat.com/blog/google-image-searches-lead-malware
>>>>http://www.infosecurity-magazine.com/blog/2010/6/30/red-button-seo-poisoning-and-
>>>>malware-campaign/180.aspx
>>>>http://www.downloadsquad.com/2010/04/20/gray-powells-unfortunate-legacy-seo-poisoning-
>>>>and-malware/
>>
>>
>>| There's nothing wrong with Google.
>>| These are just the usual malware sites.
>>| You might as well just give up on the Internet.
>>
>>The point is through SEO poisoning the infected user won't be able "...separate (the 
>>little) wheat from (lots of) chaff".
>
>No such problems here.
>
>"The lad doth protest too much, methinks!"  [with apologies to WS]

p.s.  "SEO poisoning" doesn't even apply to the kind of Google Groups
search (not Web search) I suggested.

-- 
John

"Assumption is the mother of all screw ups."
[Wethern๏ฟฝs Law of Suspended Judgement]
Technical Details
Message-ID: <k9jg769d2qbtrim4j73krgfc7ha8o2mvg0@4ax.com>
Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!npeer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!post02.iad.highwinds-media.com!newsfe12.iad.POSTED!84147782!not-for-mail
References: <i2sopq01lhf@news4.newsguy.com> <L0p4o.32466$OU6.4877@newsfe20.iad> <Xns9DC6C5344186EHHI2948AJD832@69.16.185.247> <i540le$ev5$1@news.eternal-september.org> <i54i23$msv$1@news.eternal-september.org> <3clb76dv7989oc28h98fhs99f7uhumtl8t@4ax.com> <i54lhk0240p@news7.newsguy.com> <dgob76tqj3dsj9rdrkfq9qe89n5t1cfasp@4ax.com> <i55eiu0305m@news3.newsguy.com> <i10d76tgtmh3af43bgqurcro10unmqo8gk@4ax.com> <i56j4q01q73@news2.newsguy.com> <6okd76lvg3mpl1j2a276oocr4rumo0p9nd@4ax.com>

Show Full Headers
Complete Article Headers
X-Google-Thread: fcd68,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Thread: 111298,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Thread: 115dc1,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Thread: fa874,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Attributes: gid67dc2eda8a,gide9d2b45abe,gidb181582988,gidaa617e85ca,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII
Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!npeer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!post02.iad.highwinds-media.com!newsfe12.iad.POSTED!84147782!not-for-mail
From: John Navas <spamfilter1@navasgroup.com>
Newsgroups: alt.comp.virus,alt.comp.anti-virus,microsoft.public.security.virus,ba.internet
Subject: Re: Win32/RAMNIT.A Anyone?
Message-ID: <k9jg769d2qbtrim4j73krgfc7ha8o2mvg0@4ax.com>
References: <i2sopq01lhf@news4.newsguy.com> <L0p4o.32466$OU6.4877@newsfe20.iad> <Xns9DC6C5344186EHHI2948AJD832@69.16.185.247> <i540le$ev5$1@news.eternal-september.org> <i54i23$msv$1@news.eternal-september.org> <3clb76dv7989oc28h98fhs99f7uhumtl8t@4ax.com> <i54lhk0240p@news7.newsguy.com> <dgob76tqj3dsj9rdrkfq9qe89n5t1cfasp@4ax.com> <i55eiu0305m@news3.newsguy.com> <i10d76tgtmh3af43bgqurcro10unmqo8gk@4ax.com> <i56j4q01q73@news2.newsguy.com> <6okd76lvg3mpl1j2a276oocr4rumo0p9nd@4ax.com>
X-Newsreader: Forte Agent 6.00/32.1186
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Lines: 51
X-Complaints-To: abuse@WWWSpace.NET
NNTP-Posting-Date: Fri, 27 Aug 2010 23:43:04 UTC
Date: Fri, 27 Aug 2010 16:43:10 -0700