Article View: alt.comp.virus
Article #181Re: Win32/RAMNIT.A Anyone?
From: RJK
Date: Fri, 06 Aug 2010 12:13
Date: Fri, 06 Aug 2010 12:13
101 lines
6331 bytes
6331 bytes
This is a multi-part message in MIME format. ------=_NextPart_000_0029_01CB3569.22879460 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable >>> I know exactly what I'm talking about. So tell me what tools do >>> you use to remove worms and trojans from computers? Are any of them >>> called "Anti-Virus" software? >> >> Yes, but that is beside the point. > > No that's the point entirely. The word "virus" is acceptable to=20 > just about everyone except a few anal retentive people who love to go=20 > around correcting everyone. ...and ignorant people will still call themselves professionals I=20 suppose. Talk about anal.=20 Now I've been trying to follow this thread, and I may have got the = wrong end of the stick somehere but, I would like to point out that I = fully respect David H Lipmans' persistance in clarifying malware = terminology / categrisation, indeed, I've found it VERY useful on several occasions. And for those other malware "professionals" out there, I'd like to point = out that David H Lipman is held in the highest esteem by many people = inc. myself, ...and who also consider him to be one of the foremost = authorities in the field of malware, so much so that when I have an = interest in a specific variant, and I'm wading through a thread, there's = only a few I need to read - David H Lipman first - and a few others. I = particularly avoid reading posts by one or two particular "know-all's" = because of their condescending and ignorant attitude. enough said :-) regards, Richard ------=_NextPart_000_0029_01CB3569.22879460 Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META content=3D"text/html; charset=3Dwindows-1252" = http-equiv=3DContent-Type> <META name=3DGENERATOR content=3D"MSHTML 8.00.6001.18928"> <STYLE></STYLE> </HEAD> <BODY background=3D"" bgColor=3D#ffffff> <DIV><FONT face=3DArial>>>> I = know exactly=20 what I'm talking about. So tell me what tools do<BR>>>> you use = to=20 remove worms and trojans from computers? Are any of them<BR>>>> = called=20 "Anti-Virus" software?<BR>>><BR>>> Yes, but that is beside = the=20 point.<BR>><BR>> No that's the point = entirely. The=20 word "virus" is acceptable to <BR>> just about everyone except a few = anal=20 retentive people who love to go <BR>> around correcting=20 everyone.<BR><BR>...and ignorant people will still call themselves = professionals=20 I <BR>suppose.<BR><BR>Talk about anal. <BR><BR><BR>Now I've been trying = to=20 follow this thread, and I may have got the wrong end of the stick = somehere=20 but, I would like to point out that I fully respect David H Lipmans' = persistance=20 in clarifying malware terminology / categrisation,</FONT></DIV> <DIV><FONT face=3DArial>indeed, I've found it VERY useful = on several=20 occasions.</FONT></DIV> <DIV><FONT face=3DArial></FONT> </DIV> <DIV><FONT face=3DArial>And for those other malware "professionals" out = there, I'd=20 like to point out that David H Lipman is held in the highest = esteem by=20 many people inc. myself, ...and who also consider him to be one of = the=20 foremost authorities in the field of malware, so much so that when I = have an=20 interest in a specific variant, and I'm wading through a thread, = there's=20 only a few I need to read - David H Lipman first - and a few = others. =20 I particularly avoid reading posts by one or two particular = "know-all's"=20 because of their condescending and ignorant attitude.</FONT></DIV> <DIV><FONT face=3DArial></FONT> </DIV> <DIV><FONT face=3DArial>enough said :-)</FONT></DIV> <DIV><FONT face=3DArial></FONT> </DIV> <DIV><FONT face=3DArial>regards, Richard</FONT></DIV></BODY></HTML> ------=_NextPart_000_0029_01CB3569.22879460--
Technical Details
Message-ID:
<z%S6o.38753$F%7.1854@newsfe10.iad>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!post01.iad.highwinds-media.com!newsfe10.iad.POSTED!a12e2051!not-for-mailReferences:
<i2lolb$s5r$1@news.eternal-september.org> <i2ns3d$ser$1@news.eternal-september.org> <i2nvud$mfo$4@news.eternal-september.org> <i2o1or01uos@news2.newsguy.com> <56e3916c-4af4-41a6-9f65-ea55a89369fa@i28g2000yqa.googlegroups.com> <i2o47d0214h@news2.newsguy.com> <dYP3o.40115$3%3.20843@newsfe23.iad> <tE74o.32165$OU6.25112@newsfe20.iad> <i2rksi028go@news3.newsguy.com> <Crj4o.33326$Bh2.32962@newsfe04.iad> <i2sopq01lhf@news4.newsguy.com> <L0p4o.32466$OU6.4877@newsfe20.iad> <Xns9DC6C5344186EHHI2948AJD832@69.16.185.247> <i32s10$653$1@news.eternal-september.org> <Xns9DC7745224A99HHI2948AJD832@69.16.185.247> <ILj5o.44119$4B7.2363@newsfe16.iad> <toGdnU4lcMazdsjRnZ2dnUVZ8hidnZ2d@bt.com> <Xyo5o.41721$OU6.25986@newsfe20.iad> <i358na$sbq$1@news.eternal-september.org> <8ND5o.33941$o27.31443@newsfe08.iad> <i37ec5$2pa$1@news.eternal-september.org> <J3j6o.48696$3%3.27633@newsfe23.iad> <i3cn81$k51$1@news.eternal-september.org> <ElF6o.53526$dx7.52083@newsfe21.iad> <i3fmk7$4p2$1@news.eternal-september.org>Show Full Headers
Complete Article Headers
X-Google-Thread: fcd68,b851b95f3c6d1e77 X-Google-NewGroupId: yes X-Google-Thread: 111298,b851b95f3c6d1e77 X-Google-NewGroupId: yes X-Google-Thread: 115dc1,b851b95f3c6d1e77 X-Google-NewGroupId: yes X-Google-Thread: fa874,b851b95f3c6d1e77 X-Google-NewGroupId: yes X-Google-Attributes: gid67dc2eda8a,gide9d2b45abe,gidb181582988,gidaa617e85ca,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!post01.iad.highwinds-media.com!newsfe10.iad.POSTED!a12e2051!not-for-mail From: "RJK" <nosuch@hotmail.com> Newsgroups: alt.comp.virus,alt.comp.anti-virus,microsoft.public.security.virus,ba.internet References: <i2lolb$s5r$1@news.eternal-september.org> <i2ns3d$ser$1@news.eternal-september.org> <i2nvud$mfo$4@news.eternal-september.org> <i2o1or01uos@news2.newsguy.com> <56e3916c-4af4-41a6-9f65-ea55a89369fa@i28g2000yqa.googlegroups.com> <i2o47d0214h@news2.newsguy.com> <dYP3o.40115$3%3.20843@newsfe23.iad> <tE74o.32165$OU6.25112@newsfe20.iad> <i2rksi028go@news3.newsguy.com> <Crj4o.33326$Bh2.32962@newsfe04.iad> <i2sopq01lhf@news4.newsguy.com> <L0p4o.32466$OU6.4877@newsfe20.iad> <Xns9DC6C5344186EHHI2948AJD832@69.16.185.247> <i32s10$653$1@news.eternal-september.org> <Xns9DC7745224A99HHI2948AJD832@69.16.185.247> <ILj5o.44119$4B7.2363@newsfe16.iad> <toGdnU4lcMazdsjRnZ2dnUVZ8hidnZ2d@bt.com> <Xyo5o.41721$OU6.25986@newsfe20.iad> <i358na$sbq$1@news.eternal-september.org> <8ND5o.33941$o27.31443@newsfe08.iad> <i37ec5$2pa$1@news.eternal-september.org> <J3j6o.48696$3%3.27633@newsfe23.iad> <i3cn81$k51$1@news.eternal-september.org> <ElF6o.53526$dx7.52083@newsfe21.iad> <i3fmk7$4p2$1@news.eternal-september.org> Subject: Re: Win32/RAMNIT.A Anyone? Lines: 102 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0029_01CB3569.22879460" X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2900.5931 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5931 Message-ID: <z%S6o.38753$F%7.1854@newsfe10.iad> NNTP-Posting-Date: Fri, 06 Aug 2010 12:13:19 UTC Date: Fri, 6 Aug 2010 13:13:17 +0100