Security Incidents mailing list archives

Re: Strange services.exe file


From: Nick FitzGerald <nick () virus-l demon co uk>
Date: Thu, 11 Dec 2003 18:32:22 +1300

Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net> wrote:

Probably the XTC worm (or a mutation of it).

That is an unfounded and almost certainly worthless "assertion" based 
on no more than the filename.

How often does this have to be repeated??

   Filenames are seldom useful _AND NEVER SUFFICIENT_ for diagnosing
   what malware is present.

The OP should, as already advised, send the suspicious file to 
professional malware analysts if a current virus scanner does not 
detect it as something already known to be bad.


-- 
Nick FitzGerald
Computer Virus Consulting Ltd.
Ph/FAX: +64 3 3529854


---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: