Article View: alt.comp.virus
Article #151Re: Win32/RAMNIT.A Anyone?
From: John Navas
Date: Tue, 10 Aug 2010 21:33
Date: Tue, 10 Aug 2010 21:33
24 lines
2351 bytes
2351 bytes
On Tue, 10 Aug 2010 17:22:28 -0400, in <i3shk1080j@news6.newsguy.com>, "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote: >From: "John Navas" <spamfilter1@navasgroup.com> > >>>That ThreatExpert report is insuficient. > >>>Go back and read Ant's analysis based upon the Ramnit samples I provided him with. > >| In which of the 184 messages in this thread would those specifics be? > >Message-ID: <Z6mdnSdGNvB-rc_RnZ2dnUVZ8uCdnZ2d@brightview.co.uk> >Message-ID: <R_udnfUgK5IE2snRnZ2dnUVZ8jMAAAAA@brightview.co.uk> Thank you. That would seem to confirm what I wrote: It does NOT infect:- 1) Files in the windows directory and its subdirectories. -- John "Assumption is the mother of all screw ups." [Wethern๏ฟฝs Law of Suspended Judgement]
Technical Details
Message-ID:
<bah3669actrabr4a3jet26as38kvjnocge@4ax.com>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!npeer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!post01.iad.highwinds-media.com!newsfe01.iad.POSTED!84147782!not-for-mailReferences:
<6sf06692eci4c7r28qo4qkve353ldjvq3m@4ax.com> <i3ptfm01lcf@news6.newsguy.com> <rt0166tjlhegqvsd20m6hb70ljddhdh50m@4ax.com> <i3q4340h85@news4.newsguy.com> <8a5166l8harrijvc3lh42u24s9h0b8r01h@4ax.com> <i3q747$ago$1@news.eternal-september.org> <utd1665r4ab04coghfdir9rsn06cc3f5m8@4ax.com> <i3re5e$jkc$1@news.eternal-september.org> <3dp2669is92a9f58ai7nih728pi8164jpf@4ax.com> <i3sh5907nh@news6.newsguy.com> <kdg366hiklqj8tjm69hls23vgmq340a7e2@4ax.com> <i3shk1080j@news6.newsguy.com>Show Full Headers
Complete Article Headers
X-Google-Thread: fcd68,b851b95f3c6d1e77 X-Google-NewGroupId: yes X-Google-Thread: 111298,b851b95f3c6d1e77 X-Google-NewGroupId: yes X-Google-Thread: 115dc1,b851b95f3c6d1e77 X-Google-NewGroupId: yes X-Google-Thread: fa874,b851b95f3c6d1e77 X-Google-NewGroupId: yes X-Google-Attributes: gid67dc2eda8a,gide9d2b45abe,gidb181582988,gidaa617e85ca,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!npeer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!post01.iad.highwinds-media.com!newsfe01.iad.POSTED!84147782!not-for-mail From: John Navas <spamfilter1@navasgroup.com> Newsgroups: alt.comp.virus,alt.comp.anti-virus,microsoft.public.security.virus,ba.internet Subject: Re: Win32/RAMNIT.A Anyone? Message-ID: <bah3669actrabr4a3jet26as38kvjnocge@4ax.com> References: <6sf06692eci4c7r28qo4qkve353ldjvq3m@4ax.com> <i3ptfm01lcf@news6.newsguy.com> <rt0166tjlhegqvsd20m6hb70ljddhdh50m@4ax.com> <i3q4340h85@news4.newsguy.com> <8a5166l8harrijvc3lh42u24s9h0b8r01h@4ax.com> <i3q747$ago$1@news.eternal-september.org> <utd1665r4ab04coghfdir9rsn06cc3f5m8@4ax.com> <i3re5e$jkc$1@news.eternal-september.org> <3dp2669is92a9f58ai7nih728pi8164jpf@4ax.com> <i3sh5907nh@news6.newsguy.com> <kdg366hiklqj8tjm69hls23vgmq340a7e2@4ax.com> <i3shk1080j@news6.newsguy.com> X-Newsreader: Forte Agent 6.00/32.1186 MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit Lines: 24 NNTP-Posting-Date: Tue, 10 Aug 2010 21:33:11 UTC Date: Tue, 10 Aug 2010 14:33:12 -0700