Article View: alt.comp.virus
Article #201Re: Win32/RAMNIT.A Anyone?
From: John Slade
Date: Wed, 04 Aug 2010 19:20
Date: Wed, 04 Aug 2010 19:20
58 lines
4365 bytes
4365 bytes
On 8/2/2010 2:46 PM, FromTheRafters wrote:
> "John Slade"<hhitman86@pacbell.net> wrote in message
> news:8ND5o.33941$o27.31443@newsfe08.iad...
>> On 8/1/2010 6:57 PM, FromTheRafters wrote:
>>> "John Slade"<hhitman86@pacbell.net> wrote in message
>>> news:Xyo5o.41721$OU6.25986@newsfe20.iad...
>>>
>>> [...]
>>>
>>>>>> I don't know why you would find it funny because a virus writer
>>>>>> will use
>>>>>> anything to hide a virus. What smarter way is to hide them in each
>>>>>> and
>>>>>> every folder in "system volume information"?
>>>
>>>> I didn't know Dustin Cook existed until he responded for you.
>>>> But I've
>>>> been reading some in alt.comp.viruses and I find it
>>>> well...interesting...
>>>> If he wrote viruses then he more than anyone should know that what I
>>>> said
>>>> happened is indeed possible.
>>>
>>> Because he understands true viruses, he knows that they don't need to
>>> hide
>>> themselves in folders.
>>>
>>> I don't think he would have said what he said if you had said worms,
>>> or
>>> malware, instead of viruses.
>>
>> Well "virus" is a generic term these days. I was talking about
>> worms and/or trojans, I was using "virus" as a generic term. I guess
>> that clears it up.
>
> Yep, clear as rain. You don't know the terminology, don't care, yet we
> are supposed to believe that you know what you are talking about.
>
> That's it, huh?
>
>
"Virus" is both a generic term and a specific term. Why do
you think they call the software used to clean trojans and
worms, "Anti-Virus" software? I'm sure you don't think that they
only clean viruses and leave trojans and worms alone. It's all a
matter of semantics. Just about all of the major anti-malware
vendors have products that they call Anti-Virus. This is because
it just stuck. You're a professional and you don't know this?
I know exactly what I'm talking about. So tell me what
tools do you use to remove worms and trojans from computers? Are
any of them called "Anti-Virus" software?
I also know that words can have dual meanings.
John
Technical Details
Message-ID:
<J3j6o.48696$3%3.27633@newsfe23.iad>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!post01.iad.highwinds-media.com!newsfe23.iad.POSTED!839ee1e6!not-for-mailReferences:
<i2lolb$s5r$1@news.eternal-september.org> <i2mveh$ogf$1@news.eternal-september.org> <i2nfok0tgi@news4.newsguy.com> <i2ns3d$ser$1@news.eternal-september.org> <i2nvud$mfo$4@news.eternal-september.org> <i2o1or01uos@news2.newsguy.com> <56e3916c-4af4-41a6-9f65-ea55a89369fa@i28g2000yqa.googlegroups.com> <i2o47d0214h@news2.newsguy.com> <dYP3o.40115$3%3.20843@newsfe23.iad> <tE74o.32165$OU6.25112@newsfe20.iad> <i2rksi028go@news3.newsguy.com> <Crj4o.33326$Bh2.32962@newsfe04.iad> <i2sopq01lhf@news4.newsguy.com> <L0p4o.32466$OU6.4877@newsfe20.iad> <Xns9DC6C5344186EHHI2948AJD832@69.16.185.247> <i32s10$653$1@news.eternal-september.org> <Xns9DC7745224A99HHI2948AJD832@69.16.185.247> <ILj5o.44119$4B7.2363@newsfe16.iad> <toGdnU4lcMazdsjRnZ2dnUVZ8hidnZ2d@bt.com> <Xyo5o.41721$OU6.25986@newsfe20.iad> <i358na$sbq$1@news.eternal-september.org> <8ND5o.33941$o27.31443@newsfe08.iad> <i37ec5$2pa$1@news.eternal-september.org>Show Full Headers
Complete Article Headers
X-Google-Thread: fcd68,b851b95f3c6d1e77 X-Google-NewGroupId: yes X-Google-Thread: 111298,b851b95f3c6d1e77 X-Google-NewGroupId: yes X-Google-Thread: 115dc1,b851b95f3c6d1e77 X-Google-NewGroupId: yes X-Google-Thread: fa874,b851b95f3c6d1e77 X-Google-NewGroupId: yes X-Google-Attributes: gid67dc2eda8a,gide9d2b45abe,gidb181582988,gidaa617e85ca,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!post01.iad.highwinds-media.com!newsfe23.iad.POSTED!839ee1e6!not-for-mail From: John Slade <hhitman86@pacbell.net> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.11) Gecko/20100711 Thunderbird/3.0.6 MIME-Version: 1.0 Newsgroups: alt.comp.virus,alt.comp.anti-virus,microsoft.public.security.virus,ba.internet Subject: Re: Win32/RAMNIT.A Anyone? References: <i2lolb$s5r$1@news.eternal-september.org> <i2mveh$ogf$1@news.eternal-september.org> <i2nfok0tgi@news4.newsguy.com> <i2ns3d$ser$1@news.eternal-september.org> <i2nvud$mfo$4@news.eternal-september.org> <i2o1or01uos@news2.newsguy.com> <56e3916c-4af4-41a6-9f65-ea55a89369fa@i28g2000yqa.googlegroups.com> <i2o47d0214h@news2.newsguy.com> <dYP3o.40115$3%3.20843@newsfe23.iad> <tE74o.32165$OU6.25112@newsfe20.iad> <i2rksi028go@news3.newsguy.com> <Crj4o.33326$Bh2.32962@newsfe04.iad> <i2sopq01lhf@news4.newsguy.com> <L0p4o.32466$OU6.4877@newsfe20.iad> <Xns9DC6C5344186EHHI2948AJD832@69.16.185.247> <i32s10$653$1@news.eternal-september.org> <Xns9DC7745224A99HHI2948AJD832@69.16.185.247> <ILj5o.44119$4B7.2363@newsfe16.iad> <toGdnU4lcMazdsjRnZ2dnUVZ8hidnZ2d@bt.com> <Xyo5o.41721$OU6.25986@newsfe20.iad> <i358na$sbq$1@news.eternal-september.org> <8ND5o.33941$o27.31443@newsfe08.iad> <i37ec5$2pa$1@news.eternal-september.org> In-Reply-To: <i37ec5$2pa$1@news.eternal-september.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Antivirus: avast! (VPS 100804-0, 08/04/2010), Outbound message X-Antivirus-Status: Clean Lines: 58 Message-ID: <J3j6o.48696$3%3.27633@newsfe23.iad> NNTP-Posting-Date: Wed, 04 Aug 2010 19:20:09 UTC Date: Wed, 04 Aug 2010 12:20:08 -0700