Full Disclosure mailing list archives

Re: ZIP Attachment


From: GuidoZ <uberguidoz () gmail com>
Date: Sat, 18 Sep 2004 21:31:21 -0700

I'm well aware that a filename usually isn't a very useful tools when
tracking down virus infection. However, it was all there was to go off
of, so I ventured out on Google for a minute or two and posted back
the results. It's wasn't just "drivel" mind you. More like a friendly
report from the information at hand.

A little respect isn't that difficult. =) Maybe saying "once again
I'll remind you" instead of "folks with intellect have to point out",
for example. I doubt the original posted lacks intellect. I'm quite
sure I don't either. In fact, those that have to point out they don't
usually have some issues.

Glad the mystery was solved however. This reply isn't meant to be a
"flame" in any way, so please don't treat it as such... It is just a
mere explination of actions.

-- 
Peace. ~G


On Sun, 19 Sep 2004 11:25:05 +1200, Nick FitzGerald
<nick () virus-l demon co uk> wrote:
GuidoZ wrote:

I did a little Google digging and came up with this:
http://www.windowsstartup.com/wso/detail.php?id=4239
<<more drivel snipped>>

How many times do folks with intellect have to point out that a
filename alone is generally _VERY WEAK TO USELESS_ as a diagnostic
indicator?

FWIW, the .ZIP the OP received contains a new Glieder or Mitglieder
variant, which may mean a new, as yet undetected, Bagle variant is out
there or may be about to be released.

--
Nick FitzGerald
Computer Virus Consulting Ltd.
Ph/FAX: +64 3 3529854

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: