🚀 go-pugleaf

  To: alt.comp.virus,alt.comp.a
On 8/1/2010 2:46 PM, ~BD~ wrote:
> John Slade wrote:
>> On 8/1/2010 8:24 AM, Dustin wrote:
>>> John Slade<hhitman86@pacbell.net> wrote in
>>> news:i32s10$653$1@news.eternal-september.org:
>>>
>>>> On 7/31/2010 4:21 PM, Dustin wrote:
>>>>> John Slade<hhitman86@pacbell.net> wrote in
>>>>> news:L0p4o.32466$OU6.4877@newsfe20.iad:
>>>>>
>>>>>> On 7/29/2010 1:40 PM, David H. Lipman wrote:
>>>>>>> From: "John Slade"<hhitman86@pacbell.net>
>>>>>>>
>>>>>>> | On 7/29/2010 3:24 AM, David H. Lipman wrote:
>>>>>>>>> From: "John Slade"<hhitman86@pacbell.net>
>>>>>>>
>>>>>>>>> | On 7/27/2010 11:17 PM, RJK wrote:
>>>>>>>
>>>>
>>>>>
>
>>> In more recent times, I developed an antimalware scanner (that's why I
>>> found your description on how they worked amusing. hehehe) called
>>> BugHunter. I did a stint as a malware researcher for an app called
>>> Malwarebytes antimalware..
>>>
>>
>> I don't know why you would find it funny because a virus writer will use
>> anything to hide a virus. What smarter way is to hide them in each and
>> every folder in "system volume information"? I do believe that what the
>> system had was a variant of the Virtumonde trojan. If you did research
>> on malware then you know virus writers will take existing malware and
>> modify it. I found one thing to be true in the world of malware, NOBODY
>> knows everything about every malware variant out there. You can believe
>> me or not, it doesn't matter.
>>
>> John
>
> You do appreciate that Dustin Cook was once a virus writer himself,
> don't you, John?
>

     I didn't know Dustin Cook existed until he responded for 
you. But I've been reading some in alt.comp.viruses and I find 
it well...interesting... If he wrote viruses then he more than 
anyone should know that what I said happened is indeed possible.

> There is school of thought that suggests that once a computer has been
> compromised, one can never be *certain* that it is clean - and that it
> is always best to re-install the operating system ...... on a formatted
> hard disk, wiping out all partitions first.

         That school of thought is pretty common but I've found 
that the vast majority of infected systems can be saved without 
reformatting and installing. It all depends on what the malware 
is and how much damage has been done. If formatting every 
infected HD at the sign of malware, very little data would be 
saved unless you backup important data.

>
> I'm just a user - but that's how I think too! ;-)
>

      I'm a user and I find that backups save me a lot of 
trouble. I know my HD will fail. As a repair tech, I know my 
customer's HD will fail so I backup. Some of my customers want 
to save the data so I backup before I remove malware. Some don't 
care and ask me to format and install.

      I've been reading some in alt.comp.virus and it's pretty 
amusing.... I'm starting to understand more and more why I'm 
getting the responses I'm getting... ;)

John

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24