Re: Strange services.exe file

From: Nick FitzGerald (nick_at_virus-l.demon.co.uk)
Date: 12/11/03

  • Next message: Joris De Donder: "Re: New Worm or Worm Variant?" 
    Date: Thu, 11 Dec 2003 18:32:22 +1300
To: incidents@securityfocus.com

    Ansgar -59cobalt- Wiechers <bugtraq@planetcobalt.net> wrote:

    > Probably the XTC worm (or a mutation of it).

    That is an unfounded and almost certainly worthless "assertion" based
    on no more than the filename.

    How often does this have to be repeated??

       Filenames are seldom useful _AND NEVER SUFFICIENT_ for diagnosing
       what malware is present.

    The OP should, as already advised, send the suspicious file to
    professional malware analysts if a current virus scanner does not
    detect it as something already known to be bad. 

    -- 
Nick FitzGerald
Computer Virus Consulting Ltd.
Ph/FAX: +64 3 3529854
---------------------------------------------------------------------------
----------------------------------------------------------------------------
  • Next message: Joris De Donder: "Re: New Worm or Worm Variant?"