🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: alt.comp.virus
Article #304

Re: Win32/RAMNIT.A Anyone?

#304
From: ~BD~
Date: Tue, 27 Jul 2010 17:09
15 lines
2330 bytes
jcdill wrote:
> David Kaye wrote:
>> Sorry about the crosspost to ba.internet, but I know there are malware
>> experts out there.
>> Does anybody have EXPERIENCE with Win32/RAMNIT.A ?
>
> No experience, but if I were in your shoes I'd start here:
>
> <http://www.experts-exchange.com/Virus_and_Spyware/HijackThis/Q_26343474.html>
>
>
> jc

I saw no answer to the 'Question' - but I did copy and paste the HJT log 
into www.hijackthis.de - there were six questionable entries highlighted.
Technical Details
Message-ID: <apSdnbbKfudfj9LRnZ2dnUVZ8qSdnZ2d@bt.com>
Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!Xl.tags.giganews.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local2.nntp.dca.giganews.com!nntp.bt.com!news.bt.com.POSTED!not-for-mail
References: <i2lolb$s5r$1@news.eternal-september.org> <i2mveh$ogf$1@news.eternal-september.org>

Show Full Headers
Complete Article Headers
X-Google-Thread: fcd68,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Thread: 111298,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Thread: 115dc1,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Thread: fa874,b851b95f3c6d1e77
X-Google-NewGroupId: yes
X-Google-Attributes: gid67dc2eda8a,gide9d2b45abe,gidb181582988,gidaa617e85ca,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!Xl.tags.giganews.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local2.nntp.dca.giganews.com!nntp.bt.com!news.bt.com.POSTED!not-for-mail
NNTP-Posting-Date: Tue, 27 Jul 2010 12:09:22 -0500
Date: Tue, 27 Jul 2010 18:09:22 +0100
From: ~BD~ <BoaterDave~no.spam~@hotmail.co.uk>
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.1.11) Gecko/20100701 SeaMonkey/2.0.6
MIME-Version: 1.0
Newsgroups: alt.comp.virus,alt.comp.anti-virus,microsoft.public.security.virus,ba.internet
Subject: Re: Win32/RAMNIT.A Anyone?
References: <i2lolb$s5r$1@news.eternal-september.org> <i2mveh$ogf$1@news.eternal-september.org>
In-Reply-To: <i2mveh$ogf$1@news.eternal-september.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Message-ID: <apSdnbbKfudfj9LRnZ2dnUVZ8qSdnZ2d@bt.com>
Lines: 15
X-Usenet-Provider: http://www.giganews.com
X-AuthenticatedUsername: NoAuthUser
X-Trace: sv3-H3k9NPMFcMMypKLRLPBzobzwwyWSIU3s7V4Dm2gmIurse4YGIDXmfLr/nksQuhWDgb6xNmlulJc+fg5!hyDoQedJ/rvDw+i+UcFN76u9COpdUY0EZU+T+W/tm3kwe7bNTlOJlS9fVafl6QdYvvCfPl5tUHI=
X-Complaints-To: abuse@btinternet.com
X-DMCA-Complaints-To: abuse@btinternet.com
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly
X-Postfilter: 1.3.40