Win32/RAMNIT.A Anyone?
in [Anti-Virus]
|
From: TBerk on 12 Aug 2010 03:31 On Aug 10, 4:55 pm, John Navas <spamfilt...(a)navasgroup.com> wrote: > On Tue, 10 Aug 2010 20:44:55 -0400, in > <i3srqb$fk...(a)news.eternal-september.org>, "FromTheRafters" > > > > <erra...(a)nomail.afraid.org> wrote: > >"John Navas" <spamfilt...(a)navasgroup.com> wrote in message > >news:3dp2669is92a9f58ai7nih728pi8164jpf(a)4ax.com... > >> On Tue, 10 Aug 2010 07:45:46 -0400, in > >> <i3re5e$jk...(a)news.eternal-september.org>, "FromTheRafters" > >> <erra...(a)nomail.afraid.org> wrote: > > >>>"John Navas" <spamfilt...(a)navasgroup.com> wrote in message > >>>news:utd1665r4ab04coghfdir9rsn06cc3f5m8(a)4ax.com... > >>>> On Mon, 9 Aug 2010 20:39:32 -0400, in > >>>> <i3q747$ag...(a)news.eternal-september.org>, "FromTheRafters" > >>>> <erra...(a)nomail.afraid.org> wrote: > > >>>>>"John Navas" <spamfilt...(a)navasgroup.com> wrote in message > >>>>>news:8a5166l8harrijvc3lh42u24s9h0b8r01h(a)4ax.com... > > >>>>>> I thought "this class of virus" would be specific enough, > >>>>>> but you're right that I should have been clearer, > >>>>>> and I thank you for the clarification. > > >>>>>Just curious, what did you mean by 'this class of virus' and the > >>>>>infection of possibly needed executables? > > >>>> I meant the class of virus that implants its own executable files, > >>>> and protects them from most methods of removal. Sorry for not being > >>>> more clear. > > >>>That's okay. You are correct that self-contained replicator files can > >>>be > >>>deleted outright - there is nothing there that needs to be salvaged, > >>>but > >>>Ramnit.a actually modifies (infects/trojanizes) preexisting program > >>>files (although not with a replicant). > > >> That depends on the actual problem, what the anti-virus system is or > >> is > >> not able to remove and disinfect on its own. According to this > >> report: > >> <http://www.threatexpert.com/report.aspx?md5=074a688443faea25c25899750...> > >> Win32/RAMNIT.A modifies few essential executables. My own experience > >> with Microsoft Security Essentials (cf OP) is that only non-essential > >> files are missed in this case. Do you have experience to the > >> contrary? > > >No, but I think I understand what you are saying now. > > I understood what I was saying in the first post, thank you very much. > > -- uh, John? That would be 'thankyouvurrymuch...'. TBerk I'm just say'n
From: John Navas on 12 Aug 2010 10:39 On Thu, 12 Aug 2010 00:31:58 -0700 (PDT), in <73c5f5ab-824f-4314-91c2-05db663d1070(a)g21g2000prn.googlegroups.com>, TBerk <bayareaberk(a)yahoo.com> wrote: >On Aug 10, 4:55�pm, John Navas <spamfilt...(a)navasgroup.com> wrote: >> I understood what I was saying in the first post, thank you very much. > >uh, John? That would be 'thankyouvurrymuch...'. You're right of course. My space bar must be on autopilot. ;) -- John "We have met the enemy and he is us" -Pogo
From: FromTheRafters on 12 Aug 2010 11:27 "Heather" <lainie(a)nowhere.invalid> wrote in message news:i3nhn8$u10$1(a)news.eternal-september.org... > > "FromTheRafters" <erratic(a)nomail.afraid.org> wrote in message > news:i3ng76$n70$1(a)news.eternal-september.org... >> "Heather" <lainie(a)nowhere.invalid> wrote in message >> news:i3n942$u5f$1(a)news.eternal-september.org... >>> >>>>> Anyone know how, when and why Peter Foldes was added to the list? >>>> >>>> Yes, PCButts knows. >>> >>> 8-)) I suppose one could add....."does anyone care"?? Besides the >>> always nosey BD?? >> >> Hi Heather. > > Hi FTR......been up this way lately? Canada, not since our Niagara Falls trip - which was actually due west from here. > We are off to Quebec City on Labour Day for > 5 days of sumptuous feasting, etc. Must brush > up on my French. 8-)) Now that *is* up there...perfect time of year to visit though.
From: Dustin on 12 Aug 2010 18:17 TBerk <bayareaberk(a)yahoo.com> wrote in news:3eb3bbc9-99aa-402b-b5ee- c98c4ae0bd66(a)a4g2000prm.googlegroups.com: > On Aug 2, 10:37�pm, Dustin <bughunter.dus...(a)gmail.com> wrote: > > >> And your opinion of wargames? >> > > Here is the other half of the double bill- > > http://www.imdb.com/title/tt0091472/ Yea, I didn't care much for that one. -- "I like your Christ. I don't like your Christians. They are so unlike your Christ." - author unknown.
From: RJK on 12 Aug 2010 18:22
<CHOP> gured John was confused, I also associate 'acid core' with solder. Since I studied electrical engineering, not plumbing, to me it was always Rosin Core or Silver Solder. -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp .....is this "solder" argument ever going to end <grin> ? ....you'll all be arguing about "sudsing" in a minute !!! regards, Richard Despite upgrading one's personal PC again and again and again, (for over 25 years), has anyone noticed that what used to take half an hour on a PC, still takes half an hour ! ....well, mostly !!! |