TROJAN UNDETECTED BY AD-AWARE

<sam1967.RemoveThis@hetnet.nl> wrote in message news:i1a730lfp66km39sl9ijii1ndpae1jp2vt@4ax.com...

> Thanks Laura. Keep your informed posts coming.

Well, at least she hit the nail on the head.

> Ever considered that some people are not as afraid of virii/trojans as
> others

Fools rush in....

> and have enough analaysis tools to handle them and run them if
> they are curious enough.

The thing is, the Trojan was detected and you ran it anyway. The
program being downloaded (and perhaps executed) may or may
not be malware itself, it is the program (downloader) itself that
should be (and was) detected.

....but you ran it (and on an internet connected machine) anyway.

Perhaps it would have been better to analyze the downloader and
retrieve the program by using FTP or HTTP to download the file
for further analysis. That way maybe you would avoid a possible
"download *and* execute" scenario.
 >> Stay informed about: TROJAN UNDETECTED BY AD-AWARE 

"Leythos" <void.DeleteThis@nowhere.com> wrote in message news:MPG.1a9e6c65563041d398a1df@news-server.columbus.rr.com...

> IMO, Any post or reply to a post made by a person or persons calling
> themselves "Tracker" may contain false or misleading information and
> should be considered as spam or worthless garbage.

You do realize of course that this post of yours falls into the
"reply to" clause and thus is calling itself worthless garbage
or spam.

....just thought I would bring that to your attention.
 >> Stay informed about: TROJAN UNDETECTED BY AD-AWARE 

"Celtic Ferret" <katgall.DeleteThis@nospamvoyager.net> wrote in message
news:103a0085kdkm4b9@corp.supernews.com...
> Is our freakin' unfavortie troll back again!
>
> F***
>
> KG
She was probably in the nut house, but it look like she escaped! Whoops
 >> Stay informed about: TROJAN UNDETECTED BY AD-AWARE 

This message is not archived
 >> Stay informed about: TROJAN UNDETECTED BY AD-AWARE 

On Thu, 19 Feb 2004 11:49:40 -0500, "FromTheRafters"
<!0000@nomad.fake> wrote:

>
><sam1967.RemoveThis@hetnet.nl> wrote in message news:352930daj2glt616el80ohjtvpjepcm81k@4ax.com...
>
>> i never claimed to be a security expert ( far from it ).
>> security was never a part of my job ans always someone elses
>> responsibility - until now.
>
>Uh oh.
>
>> it is only since I started freelancing that i realise just what a
>> complete mess the security situation is in esp regarding M$.
>
>M$ is not responsible for your running a downloader trojan
>just to see what it does.
>
>> i cannot believe the number of vulnerabilities being exposed in their
>> sw at the moment and have switched to opera as a first step.
>
>Yes, their security record is abysmal, but you need to brush
>up on safe computing practices if you think that software is
>the weakest link in the security chain.
>
>Safer software, safer practices, and isolationism (isolated test
>machine or network) is probably better than VM, emulation
>or sandbox approaches. Running a trojan downloader could
>download *and* execute a foreign program on your internet
>connected machine ~ which could be bad for all of us.
>
My computer running a trojan is bad for the Internet ?
LOL.
 >> Stay informed about: TROJAN UNDETECTED BY AD-AWARE 

On Thu, 19 Feb 2004 18:24:08 GMT, Laura Fredericks
<anonomiss.RemoveThis@CLOTHEShotmail.com> wrote:

>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>On Thu, 19 Feb 2004 10:04:04 +0000,
>"sam1967@hetnet.nl" <sam1967.RemoveThis@hetnet.nl> wrote in post:
>><snip self-righteous, obnoxious, opinionated and
>>downright false nazi rant>
>
>Yes. Yes. Yes. No. ("Nazi rant"? LMAO!)
>
>>what a bitch.
>
>Yes.
>
>It's people like YOU that are responsible for the
>propagation of viruses and worms.
>
there was me thinking it was the fault of Microsoft for writing
appalling software full of bugs and holes and of hackers for writing
malicious code to take advantage of said holes.
just shows you who naive some people are eh .
 >> Stay informed about: TROJAN UNDETECTED BY AD-AWARE 

On that special day, optikl, (optikl@invalid.net) said...

> >>i turned off AVG and ran this 7k trojan to see what
> >>it would do.
> >
> >
> > Idiot.
>
> This guy must think he's Super Dave Osbourne.

Hm. You know about Ozzies capabilities of driving a motorbike at home?
If you are comparing these two, I say, sam1967 did mess it up even more
royally.


Gabriele Neukam

Gabriele.Spamfighter.Neukam.RemoveThis@t-online.de


--
Ah, Information. A good, too valuable these days, to give it away, just
so, at no cost.
 >> Stay informed about: TROJAN UNDETECTED BY AD-AWARE 

On that special day, Tracker, (Tracker <"snailmail(valid)
222000"@yahoo.com>) said...

> You can "NEVER" trust a warez website

sure. Lots of them are just dialers nests.

> nor any website or newsgroup which hackers list on Usenet

Why usenet? IRC is *much* more convenient. Ask any average Diablo2 gamer
who is running a chat program while playing. He/she is swamped with
messages like "new cheat out. download at $trojanizedsite"

> since most are owned by malicious hackers.

By "owned", what do you mean? Real property, hacked, or just DDoSed?


Gabriele Neukam

Gabriele.Spamfighter.Neukam.DeleteThis@t-online.de


--
Ah, Information. A good, too valuable these days, to give it away, just
so, at no cost.
 >> Stay informed about: TROJAN UNDETECTED BY AD-AWARE 

On Thu, 19 Feb 2004 18:58:06 GMT, Laura Fredericks
<anonomiss DeleteThis @CLOTHEShotmail.com> wrote:

>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>On Thu, 19 Feb 2004 18:37:58 +0000,
>"sam1967@hetnet.nl" <sam1967 DeleteThis @hetnet.nl> wrote in post:
>>My computer running a trojan is bad for the Internet
>>? LOL.
>
><smack> (Idiot.)
>
nazi bitch.
 >> Stay informed about: TROJAN UNDETECTED BY AD-AWARE 

On Thu, 19 Feb 2004 18:55:37 GMT, Laura Fredericks
<anonomiss.DeleteThis@CLOTHEShotmail.com> wrote:

>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>On Thu, 19 Feb 2004 18:38:46 +0000,
>"sam1967@hetnet.nl" <sam1967.DeleteThis@hetnet.nl> wrote in post:
>>there was me thinking it was the fault of Microsoft
>>for writing appalling software full of bugs and holes
>>and of hackers for writing malicious code to take
>>advantage of said holes.
>>just shows you who naive some people are eh .
>
>I wouldn't call you naive, that's too good for you.
>You, my friend, are an idiot.
>
>You really should be smacked around a bit for
>knowingly executing a trojan on a machine connected to
>the internet -- just "to see what it would do".
>
>Here, I'll start...
>
><smack>
>
uber nazi bitch.
 >> Stay informed about: TROJAN UNDETECTED BY AD-AWARE 

On Thu, 19 Feb 2004 00:58:31 -0500, Colonel Flagg
<colonel_flagg DeleteThis @NOSOUPFORJ00internetwarzone.org> wrote:

>In article <j18830hjli5l4h342utjpqilu5e1ptk5fh DeleteThis @4ax.com>,
>NoneOfBusiness@nob.net says...
>> On Wed, 18 Feb 2004 18:29:37 -0500, Colonel Flagg
>> <colonel_flagg DeleteThis @NOSOUPFORJ00internetwarzone.org> wrote:
>>
>> >In article <i1a730lfp66km39sl9ijii1ndpae1jp2vt DeleteThis @4ax.com>, sam1967
>> >@hetnet.nl says...
>
>> >
>> >
>> >anyone that needs to ask "where to send it to" is by no means someone
>> >capable of doing proper analysis.
>>
>> Oh thats BS. i can do the analysis (and frequently do as part of my
>> work) but i do not know right off the top of my head where to send it
>> though i can guess or "google" it.
>>
>
>
>and your point is? you're telling me you run "analysis" on a production
>box and then connect it to the Internet? this person seems like someone
>"getting their feet wet" without the forethought to research accepted
>practices and procedures, then goes to the professionals to help clean
>up his mess. typical.

I know enough to clean up my mess. And no i do not do if on a
production box. I have test machines i work with
 >> Stay informed about: TROJAN UNDETECTED BY AD-AWARE 

Laura Fredericks wrote:

> Anyway, it just seemed "right" to add your ng to the
> list -- seeing how the lovely Tracker says it was the
> Evil Hacker Ferret Owners who got her started on her
> quest to become the world's foremost authority on uh,
> um, exactly WHAT is it that she's an authority on,
> anyway?

STD clinics?
 >> Stay informed about: TROJAN UNDETECTED BY AD-AWARE 

On Thu, 19 Feb 2004 22:06:24 +0100, Jim Watt <jimwatt.DeleteThis@aol.no_way>
wrote:

>On Thu, 19 Feb 2004 19:47:12 +0000, "sam1967@hetnet.nl"
><sam1967.DeleteThis@hetnet.nl> wrote:
>
>>nazi bitch.
>
>I see everyone who points out you are a total idiot gets
>labelled 'Nazi' contrary to Godwins law.

i know i know. i keep forgetting how outdated the term is.
neo-con oil-pirates, shock-and-awe racists or US imperialists are
probably more appropriate terms in these enlightened times.
 >> Stay informed about: TROJAN UNDETECTED BY AD-AWARE