Article View: alt.comp.virus
Article #205Re: Win32/RAMNIT.A Anyone?
From: David H. Lipman
Date: Wed, 04 Aug 2010 21:54
Date: Wed, 04 Aug 2010 21:54
41 lines
4026 bytes
4026 bytes
From: "FromTheRafters" <erratic@nomail.afraid.org> | "John Slade" <hhitman86@pacbell.net> wrote in message | news:G1j6o.53362$dx7.3611@newsfe21.iad... | [...] >> "Virus" is both a generic term and a specific term. >> Why do you think they call the software used to clean >> trojans and worms, "Anti-Virus" software? | Generally, they call it antimalware unless it is also effective against | viruses and worms (which are self-replicators). If it is effective | against viruses, they call it an antivirus. Antivirus programs can also | detect some non-replicating malware. >> I'm sure you don't think that they only clean viruses >> and leave trojans and worms alone. It's all a matter >> of semantics. | Of course it is, but semantics shouldn't be a dismissive word. The | meanings of words are *important* to effective communications. >> Just about all of the major anti-malware vendors have >> products that they call Anti-Virus. This is because it just >> stuck. You're a professional and you don't know this? | We all know this, and we don't like it one bit. The fact remains that | viruses are a special case requiring more than what many antimalware | applications are equipped to handle. Eactly and is why Malwarebytes' Anti Malware (MBAM) is not an "anti virus" product. MBAM can NOT remove viral code such as Virut and (in this thread) Ramnit from a file that has prepended, inserted or appended its code to the binary. -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
Technical Details
Message-ID:
<i3cnbv020fe@news4.newsguy.com>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!extra.newsguy.com!newsp.newsguy.com!news4References:
<i2lolb$s5r$1@news.eternal-september.org> <i2mveh$ogf$1@news.eternal-september.org> <i2nfok0tgi@news4.newsguy.com> <i2ns3d$ser$1@news.eternal-september.org> <i2nvud$mfo$4@news.eternal-september.org> <i2o1or01uos@news2.newsguy.com> <56e3916c-4af4-41a6-9f65-ea55a89369fa@i28g2000yqa.googlegroups.com> <i2o47d0214h@news2.newsguy.com> <dYP3o.40115$3%3.20843@newsfe23.iad> <tE74o.32165$OU6.25112@newsfe20.iad> <i2rksi028go@news3.newsguy.com> <Crj4o.33326$Bh2.32962@newsfe04.iad> <i2sopq01lhf@news4.newsguy.com> <L0p4o.32466$OU6.4877@newsfe20.iad> <Xns9DC6C5344186EHHI2948AJD832@69.16.185.247> <i32s10$653$1@news.eternal-september.org> <Xns9DC7745224A99HHI2948AJD832@69.16.185.247> <ILj5o.44119$4B7.2363@newsfe16.iad> <toGdnU4lcMazdsjRnZ2dnUVZ8hidnZ2d@bt.com> <Xyo5o.41721$OU6.25986@newsfe20.iad> <i358na$sbq$1@news.eternal-september.org> <8ND5o.33941$o27.31443@newsfe08.iad> <Xns9DC89344DF505HHI2948AJD832@69.16.185.247> <G1j6o.53362$dx7.3611@newsfe21.iad> <i3cmop$ia3$1@news.eternal-september.org>Show Full Headers
Complete Article Headers
X-Google-Thread: fcd68,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Thread: 111298,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Thread: 115dc1,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Thread: fa874,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Attributes: gid67dc2eda8a,gide9d2b45abe,gidb181582988,gidaa617e85ca,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!extra.newsguy.com!newsp.newsguy.com!news4
From: "David H. Lipman" <DLipman~nospam~@Verizon.Net>
Newsgroups: alt.comp.virus,alt.comp.anti-virus,microsoft.public.security.virus,ba.internet
Subject: Re: Win32/RAMNIT.A Anyone?
Date: Wed, 4 Aug 2010 17:54:49 -0400
Organization: DHL
Lines: 43
Message-ID: <i3cnbv020fe@news4.newsguy.com>
References: <i2lolb$s5r$1@news.eternal-september.org> <i2mveh$ogf$1@news.eternal-september.org> <i2nfok0tgi@news4.newsguy.com> <i2ns3d$ser$1@news.eternal-september.org> <i2nvud$mfo$4@news.eternal-september.org> <i2o1or01uos@news2.newsguy.com> <56e3916c-4af4-41a6-9f65-ea55a89369fa@i28g2000yqa.googlegroups.com> <i2o47d0214h@news2.newsguy.com> <dYP3o.40115$3%3.20843@newsfe23.iad> <tE74o.32165$OU6.25112@newsfe20.iad> <i2rksi028go@news3.newsguy.com> <Crj4o.33326$Bh2.32962@newsfe04.iad> <i2sopq01lhf@news4.newsguy.com> <L0p4o.32466$OU6.4877@newsfe20.iad> <Xns9DC6C5344186EHHI2948AJD832@69.16.185.247> <i32s10$653$1@news.eternal-september.org> <Xns9DC7745224A99HHI2948AJD832@69.16.185.247> <ILj5o.44119$4B7.2363@newsfe16.iad> <toGdnU4lcMazdsjRnZ2dnUVZ8hidnZ2d@bt.com> <Xyo5o.41721$OU6.25986@newsfe20.iad> <i358na$sbq$1@news.eternal-september.org> <8ND5o.33941$o27.31443@newsfe08.iad> <Xns9DC89344DF505HHI2948AJD832@69.16.185.247> <G1j6o.53362$dx7.3611@newsfe21.iad> <i3cmop$ia3$1@news.eternal-september.org>
NNTP-Posting-Host: pcc593831f4e067692c6f6060df5089a9d2b20942f8e33bc4.newsdawg.com
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.5931
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5931
X-Face: #!*YlHW<3BNQH,W(*HlLHp!!3C^o,W53`lH?w!P/BI9U&X#l41]a]{(_lFi9uvKIhejF;N7"3{((o^}#4TsAASuyib+4gO;T`p'iU-gC?0Lj'1MyYrhAWCVxHKD~0Jqt9=du~_{E+uqoYt4O$L?M:a>s4@)NMgJjld$%3QOzA[8
X-Comment-To: FromTheRafters
X-Debug: On
FL-Build: Fidolook 2007 (HV) 6.0.6000.97 - 24/12/2008 20:32:05