Security Incidents mailing list archives
Re: Strange services.exe file
From: Nick FitzGerald <nick () virus-l demon co uk>
Date: Thu, 11 Dec 2003 18:32:22 +1300
Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net> wrote:
Probably the XTC worm (or a mutation of it).
That is an unfounded and almost certainly worthless "assertion" based on no more than the filename. How often does this have to be repeated?? Filenames are seldom useful _AND NEVER SUFFICIENT_ for diagnosing what malware is present. The OP should, as already advised, send the suspicious file to professional malware analysts if a current virus scanner does not detect it as something already known to be bad. -- Nick FitzGerald Computer Virus Consulting Ltd. Ph/FAX: +64 3 3529854 --------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- Strange services.exe file Dano (Dec 09)
- Re: Strange services.exe file Harlan Carvey (Dec 10)
- Re: Strange services.exe file Nick FitzGerald (Dec 10)
- Re: Strange services.exe file Tomasz Papszun (Dec 11)
- Re: [mailinglists] Strange services.exe file Tom Wright (Dec 10)
- Re: Strange services.exe file Ansgar -59cobalt- Wiechers (Dec 10)
- Re: Strange services.exe file Nick FitzGerald (Dec 11)
- Re: Strange services.exe file Harlan Carvey (Dec 11)
- Re: Strange services.exe file Harlan Carvey (Dec 11)
- Re: Strange services.exe file Nick FitzGerald (Dec 11)
- <Possible follow-ups>
- RE: Strange services.exe file Josh.Berry (Dec 10)
- RE: Strange services.exe file Harlan Carvey (Dec 11)
- Re: Strange services.exe file jdavison3 (Dec 10)
- Re: Strange services.exe file Nick FitzGerald (Dec 11)
- Re: Strange services.exe file Harlan Carvey (Dec 11)