Virus Guy  wrote in
news:m3461n$10b$1@speranza.aioe.org: 

> Dustin wrote:
>  
>> > If anyone wants this sample, let me know.  I have no idea if
>> > Dustin has been doing anything with the samples I've been
>> > posting. 
>> 
>> I've been downloading them as I have the time and taking them
>> apart, as I have the time. So far, it's general boring ####,
>> trivial really. 
> 
> If you've taken them apart, why don't you submit to VT the
> random-named.exe file that these droppers create and link to in
> the registry run keys?

I already told you, this is pointless. I already have all the 
contacts directly with VT and a few that VT doesn't have. Sending it 
to VT will give it to some of the contacts I have, but leaves a few 
out of the loop. Emailing directly to them is faster.

If you think I'm lying about taking them apart, man up and say so. 
I'll be happy to leave your samples alone and do other things with my 
time. You just say the word and I quit ####ing with them.
 
> Here, try this one:

See above. You aren't posting anything new and spiffy looking, I 
really don't mind marking your future ones as read and ignore them. I 
don't really care if someone gets hit by one or not.

> The anubis report in my previous post says it creates the file
> dotsfhre.exe (although it's probably a random name so what-ever
> you come up with would have a different name).

Last chance....

You're either accusing me of lying or you aren't. Nut up and say 
which it is.
 



-- 
If you can read this, Thank a teacher.
If you're reading it in english, Thank a soldier!


--- NewsGate v1.0 gamma 2