Re: Win32/RAMNIT.A Anyone?

Article View: alt.comp.virus

Article #262

#262

From: Dustin
Date: Mon, 02 Aug 2010 18:27

35 lines
3708 bytes

John Slade <hhitman86@pacbell.net> wrote in
news:8ND5o.33941$o27.31443@newsfe08.iad: 

> On 8/1/2010 6:57 PM, FromTheRafters wrote:
>> "John Slade"<hhitman86@pacbell.net>  wrote in message
>> news:Xyo5o.41721$OU6.25986@newsfe20.iad...
>>
>> [...]
>>
>>>>> I don't know why you would find it funny because a virus writer
>>>>> will use anything to hide a virus. What smarter way is to hide
>>>>> them in each and every folder in "system volume information"?
>>
>>>      I didn't know Dustin Cook existed until he responded for you.
>>>      But I've 
>>> been reading some in alt.comp.viruses and I find it
>>> well...interesting... If he wrote viruses then he more than anyone
>>> should know that what I said happened is indeed possible.
>>
>> Because he understands true viruses, he knows that they don't need
>> to hide themselves in folders.
>>
>> I don't think he would have said what he said if you had said
>> worms, or malware, instead of viruses.
> 
>       Well "virus" is a generic term these days. I was talking 
> about worms and/or trojans, I was using "virus" as a generic 
> term. I guess that clears it up.

virus isn't a generic term, then or now. As a professional, I think it 
unwise of you to generalize what might be ailing the patient.

-- 
"I like your Christ. I don't like your Christians. They are so unlike 
your Christ."  - author unknown.

Technical Details

Message-ID: <Xns9DC89344DF505HHI2948AJD832@69.16.185.247>

Path:

arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!news1.google.com!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!post01.iad.highwinds-media.com!newsfe22.iad.POSTED!7564ea0f!not-for-mail

References:

<i2lolb$s5r$1@news.eternal-september.org> <i2mveh$ogf$1@news.eternal-september.org> <i2nfok0tgi@news4.newsguy.com> <i2ns3d$ser$1@news.eternal-september.org> <i2nvud$mfo$4@news.eternal-september.org> <i2o1or01uos@news2.newsguy.com> <56e3916c-4af4-41a6-9f65-ea55a89369fa@i28g2000yqa.googlegroups.com> <i2o47d0214h@news2.newsguy.com> <dYP3o.40115$3%3.20843@newsfe23.iad> <tE74o.32165$OU6.25112@newsfe20.iad> <i2rksi028go@news3.newsguy.com> <Crj4o.33326$Bh2.32962@newsfe04.iad> <i2sopq01lhf@news4.newsguy.com> <L0p4o.32466$OU6.4877@newsfe20.iad> <Xns9DC6C5344186EHHI2948AJD832@69.16.185.247> <i32s10$653$1@news.eternal-september.org> <Xns9DC7745224A99HHI2948AJD832@69.16.185.247> <ILj5o.44119$4B7.2363@newsfe16.iad> <toGdnU4lcMazdsjRnZ2dnUVZ8hidnZ2d@bt.com> <Xyo5o.41721$OU6.25986@newsfe20.iad> <i358na$sbq$1@news.eternal-september.org> <8ND5o.33941$o27.31443@newsfe08.iad>

Show Full Headers

Complete Article Headers

X-Google-Thread: fcd68,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Thread: 111298,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Thread: 115dc1,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Thread: fa874,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Attributes: gid67dc2eda8a,gide9d2b45abe,gidb181582988,gidaa617e85ca,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!news1.google.com!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!post01.iad.highwinds-media.com!newsfe22.iad.POSTED!7564ea0f!not-for-mail
Newsgroups: alt.comp.virus,alt.comp.anti-virus,microsoft.public.security.virus,ba.internet
Subject: Re: Win32/RAMNIT.A Anyone?
From: Dustin <bughunter.dustin@gmail.com>
References: <i2lolb$s5r$1@news.eternal-september.org> <i2mveh$ogf$1@news.eternal-september.org> <i2nfok0tgi@news4.newsguy.com> <i2ns3d$ser$1@news.eternal-september.org> <i2nvud$mfo$4@news.eternal-september.org> <i2o1or01uos@news2.newsguy.com> <56e3916c-4af4-41a6-9f65-ea55a89369fa@i28g2000yqa.googlegroups.com> <i2o47d0214h@news2.newsguy.com> <dYP3o.40115$3%3.20843@newsfe23.iad> <tE74o.32165$OU6.25112@newsfe20.iad> <i2rksi028go@news3.newsguy.com> <Crj4o.33326$Bh2.32962@newsfe04.iad> <i2sopq01lhf@news4.newsguy.com> <L0p4o.32466$OU6.4877@newsfe20.iad> <Xns9DC6C5344186EHHI2948AJD832@69.16.185.247> <i32s10$653$1@news.eternal-september.org> <Xns9DC7745224A99HHI2948AJD832@69.16.185.247> <ILj5o.44119$4B7.2363@newsfe16.iad> <toGdnU4lcMazdsjRnZ2dnUVZ8hidnZ2d@bt.com> <Xyo5o.41721$OU6.25986@newsfe20.iad> <i358na$sbq$1@news.eternal-september.org> <8ND5o.33941$o27.31443@newsfe08.iad>
Organization: Core Technologies
Message-ID: <Xns9DC89344DF505HHI2948AJD832@69.16.185.247>
User-Agent: Xnews/5.04.25
X-Face: ")a1c1@v4695TOAAGDV"2*Q?\^40C9=M@Fw'c:YhY])Sb=T`-ev$|P|4Kff_BGW@l:=$o}Ivdx{blP|(XC-zAtj&8NNuo3Ie[v{NUwjU9Bf>sb*ylTx=^QUWZ|z\=w>zy<!.+?7@yh&_[]A?j_\OV-Rf7+Wv3r3.!>eQ=2pWPz5M%]9-UrUud}+
Lines: 35
NNTP-Posting-Host: pmnhnenpacjmifcigddbhoidbeoljelo
X-Trace: mihnlfichcpjolhnhajekhgjjdgmjengffgdlcmpllnccdlipmnhnenpacjmifcifihnbjpgcfpjdbfjakpahdkebhcfjaggdcpodapiedebfacbnebmginlileiglemplepgefcpbbnokgh
NNTP-Posting-Date: Mon, 02 Aug 2010 18:27:02 UTC
Date: Mon, 02 Aug 2010 18:27:02 GMT

Reply to Parent Message