Second opinion requested! Does anyone else get a warning? (was -

In article , David_B
wrote:

AVs /luv/ to find pups.

they do a lot of things just to scare people so that they buy their
products.

mac anti-malware apps report finding *windows* malware, which are
guaranteed to not do anything on mac os, but it makes the number of
items found bigger and impresses the stupid.

THIS thread explains that the malware I detected wasn't ORDINARY
malware, but an extra-special item.

https://answers.microsoft.com/en-us/...protect_scanni
ng-windows_other/ramnit-trojan-on-imac-aol-disk-from-2008-false/e18cc0a4-5895-
412e-9306-e565d2571849

that thread shows that you are nothing more than a troll.

On Sat, 13 Jun 2020 02:58:36 -0700, Mike Easter
wrote:

David_B wrote:
THIS thread explains that the malware I detected wasn't ORDINARY
malware, but an extra-special item.

Ramnit did NOT come on some ancient 2008 AOL disk you had.

It had not even been created at that time. Ramnit was born in 2011 and
peaked in about 2015. It wasn't distributed on any AOL disk which
preceded its existence by years and years.

He knows. It was discussed (on more than one occasion) here in
acw a while ago.

-------------------------------------
BD: I want people to "get to know me better. I have nothing to
hide".
I'm always here to help, this page was put up at BD's request,
rather, he said "Do it *NOW*!":

https://tekrider.net/pages/david-brooks-stalker.php

66 confirmed #FAKE_NYMS, most used in cybercrimes!
Google "David Brooks Devon"
[]'s

--
Don't be evil - Google 2004
We have a new policy - Google 2012

On Sat, 13 Jun 2020 06:08:05 -0400, nospam
wrote:

In article , Mike Easter
wrote:

David_B wrote:
THIS thread explains that the malware I detected wasn't ORDINARY
malware, but an extra-special item.

Ramnit did NOT come on some ancient 2008 AOL disk you had.

of course not.

he's been told that many, many times before. he ignored it then and
will ignore it now.

It had not even been created at that time. Ramnit was born in 2011 and
peaked in about 2015. It wasn't distributed on any AOL disk which
preceded its existence by years and years.

You made some kind of mistake by mixing and matching things from
completely different 'generations' and inviting a false report.

he didn't make a mistake. his goal is to troll, not to find malware.
malware is just the bait to hook people.

Not to troll, it was to slime an AV product because "it made a
mistake". The "mistake" was removing said "malware" sigs from the
whitelist.
If AVs didn't do maintenance on their whitelists(removing sigs
for decades-old programs that are no longer used) the whitelists would
be enormous.
[]'s

--
Don't be evil - Google 2004
We have a new policy - Google 2012

On 13/06/2020 11:08, nospam wrote:
In article , Mike Easter
wrote:

David_B wrote:
THIS thread explains that the malware I detected wasn't ORDINARY
malware, but an extra-special item.

Ramnit did NOT come on some ancient 2008 AOL disk you had.

of course not.

Agreed.

he's been told that many, many times before. he ignored it then and
will ignore it now.

Where WHERE those files hiding? The ones I asked Virus Total to scan?

It had not even been created at that time. Ramnit was born in 2011 and
peaked in about 2015. It wasn't distributed on any AOL disk which
preceded its existence by years and years.

You made some kind of mistake by mixing and matching things from
completely different 'generations' and inviting a false report.

he didn't make a mistake. his goal is to troll, not to find malware.
malware is just the bait to hook people.

You are wrong, yet again, 'nospam'

ClamXav told me that it had detected malware on my AOL disk. We all
agree that it was impossible for Ramnit to be on my AOL DVD. So where
WERE the files it detected?

https://answers.microsoft.com/en-us/...6-e565d2571849

How certain ARE you that the ClamXav product is NOT a scam?

An Apple computer does not NEED such an AV product. You KNOW that. Why
haven't folk like you made moves to remove it from the market place?

--
David

David_B wrote:
Why haven't folk like you made moves to remove it from the market place?

You are raving irrationally.

--
Mike Easter

On Sat, 13 Jun 2020 14:41:03 -0700, Mike Easter
wrote:

David_B wrote:
Why haven't folk like you made moves to remove it from the market place?

You are raving irrationally.

He gets that way when he's drunk.
Which happens EVERY DAY.

-------------------------------------
BD: I want people to "get to know me better. I have nothing to
hide".
I'm always here to help, this page was put up at BD's request,
rather, he said "Do it *NOW*!":

https://tekrider.net/pages/david-brooks-stalker.php

66 confirmed #FAKE_NYMS, most used in cybercrimes!
Google "David Brooks Devon"
[]'s


--
Don't be evil - Google 2004
We have a new policy - Google 2012

On 13/06/2020 11:08, nospam wrote:
In article , David_B
wrote:

AVs /luv/ to find pups.

they do a lot of things just to scare people so that they buy their
products.

mac anti-malware apps report finding *windows* malware, which are
guaranteed to not do anything on mac os, but it makes the number of
items found bigger and impresses the stupid.

THIS thread explains that the malware I detected wasn't ORDINARY
malware, but an extra-special item.

https://answers.microsoft.com/en-us/...protect_scanni
ng-windows_other/ramnit-trojan-on-imac-aol-disk-from-2008-false/e18cc0a4-5895-
412e-9306-e565d2571849

that thread shows that you are nothing more than a troll.

It means that I was 'stirring the pot' and a few folk were getting upset
that I was getting too close to the truth.

Why DO folk like you, 'nospam', get so hot under the collar when folk
wonder exactly who you are? I'm sure it must make other folk feel uneasy
- not knowing ANYTHING about you. In fact, it's rather creepy.

GOOD guys are never quite as rude as you choose to be.

Do you work for a guvermint? Which one?

On 6/13/20 4:02 PM, David_B wrote:
On 13/06/2020 11:08, nospam wrote:
In article , David_B
wrote:

AVs /luv/ to find pups.

they do a lot of things just to scare people so that they buy their
products.

mac anti-malware apps report finding *windows* malware, which are
guaranteed to not do anything on mac os, but it makes the number of
items found bigger and impresses the stupid.

THIS thread explains that the malware I detected wasn't ORDINARY
malware, but an extra-special item.

https://answers.microsoft.com/en-us/...protect_scanni

ng-windows_other/ramnit-trojan-on-imac-aol-disk-from-2008-false/e18cc0a4-5895-

412e-9306-e565d2571849

that thread shows that you are nothing more than a troll.

It means that I was 'stirring the pot' and a few folk were getting upset
that I was getting too close to the truth.

Why DO folk like you, 'nospam', get so hot under the collar when folk
wonder exactly who you are? I'm sure it must make other folk feel uneasy
- not knowing ANYTHING about you. In fact, it's rather creepy.

GOOD guys are never quite as rude as you choose to be.

Do you work for a guvermint? Which one?

I am not as concerned with who someone is. I focus on content. And, I
will acknowledge, I actually saw *A* post the other day from nospam
where he pointed to a good source on wireless network tech. It was good
to see.

--
Personal attacks from those who troll show their own insecurity. They
cannot use reason to show the message to be wrong so they try to feel
somehow superior by attacking the messenger.

They cling to their attacks and ignore the message time and time again.

On 14/06/2020 00:28, Snit wrote:
On 6/13/20 4:02 PM, David_B wrote:
On 13/06/2020 11:08, nospam wrote:
In article , David_B
wrote:

AVs /luv/ to find pups.

they do a lot of things just to scare people so that they buy their
products.

mac anti-malware apps report finding *windows* malware, which are
guaranteed to not do anything on mac os, but it makes the number of
items found bigger and impresses the stupid.

THIS thread explains that the malware I detected wasn't ORDINARY
malware, but an extra-special item.

https://answers.microsoft.com/en-us/...protect_scanni

ng-windows_other/ramnit-trojan-on-imac-aol-disk-from-2008-false/e18cc0a4-5895-

412e-9306-e565d2571849

that thread shows that you are nothing more than a troll.

It means that I was 'stirring the pot' and a few folk were getting
upset that I was getting too close to the truth.

Why DO folk like you, 'nospam', get so hot under the collar when folk
wonder exactly who you are? I'm sure it must make other folk feel
uneasy - not knowing ANYTHING about you. In fact, it's rather creepy.

GOOD guys are never quite as rude as you choose to be.

Do you work for a guvermint? Which one?

I am not as concerned with who someone is. I focus on content. And, I
will acknowledge, I actually saw *A* post the other day from nospam
where he pointed to a good source on wireless network tech. It was good
to see.

I understand your stance. I too saw THAT post - but they are few and far
between! ;-)

Have YOU ever encountered the Ramnit malware?

If it wasn't on my AOL DVD, where was it - exactly?!!

On 6/13/20 4:34 PM, David_B wrote:
On 14/06/2020 00:28, Snit wrote:
On 6/13/20 4:02 PM, David_B wrote:
On 13/06/2020 11:08, nospam wrote:
In article , David_B
wrote:

AVs /luv/ to find pups.

they do a lot of things just to scare people so that they buy their
products.

mac anti-malware apps report finding *windows* malware, which are
guaranteed to not do anything on mac os, but it makes the number of
items found bigger and impresses the stupid.

THIS thread explains that the malware I detected wasn't ORDINARY
malware, but an extra-special item.

https://answers.microsoft.com/en-us/...protect_scanni

ng-windows_other/ramnit-trojan-on-imac-aol-disk-from-2008-false/e18cc0a4-5895-

412e-9306-e565d2571849

that thread shows that you are nothing more than a troll.

It means that I was 'stirring the pot' and a few folk were getting
upset that I was getting too close to the truth.

Why DO folk like you, 'nospam', get so hot under the collar when folk
wonder exactly who you are? I'm sure it must make other folk feel
uneasy - not knowing ANYTHING about you. In fact, it's rather creepy.

GOOD guys are never quite as rude as you choose to be.

Do you work for a guvermint? Which one?

I am not as concerned with who someone is. I focus on content. And, I
will acknowledge, I actually saw *A* post the other day from nospam
where he pointed to a good source on wireless network tech. It was
good to see.

I understand your stance. I too saw THAT post - but they are few and far
between! ;-)

Have YOU ever encountered the Ramnit malware?

If it wasn't on my AOL DVD, where was it - exactly?!!


I do not recall it... though I have run into lots over the years and
could not name 1/10th of them.

--
Personal attacks from those who troll show their own insecurity. They
cannot use reason to show the message to be wrong so they try to feel
somehow superior by attacking the messenger.

They cling to their attacks and ignore the message time and time again.

On 14/06/2020 01:03, Snit wrote:
On 6/13/20 4:34 PM, David_B wrote:
On 14/06/2020 00:28, Snit wrote:
On 6/13/20 4:02 PM, David_B wrote:
On 13/06/2020 11:08, nospam wrote:
In article , David_B
wrote:

AVs /luv/ to find pups.

they do a lot of things just to scare people so that they buy their
products.

mac anti-malware apps report finding *windows* malware, which are
guaranteed to not do anything on mac os, but it makes the number of
items found bigger and impresses the stupid.

THIS thread explains that the malware I detected wasn't ORDINARY
malware, but an extra-special item.

https://answers.microsoft.com/en-us/...protect_scanni

ng-windows_other/ramnit-trojan-on-imac-aol-disk-from-2008-false/e18cc0a4-5895-

412e-9306-e565d2571849

that thread shows that you are nothing more than a troll.

It means that I was 'stirring the pot' and a few folk were getting
upset that I was getting too close to the truth.

Why DO folk like you, 'nospam', get so hot under the collar when
folk wonder exactly who you are? I'm sure it must make other folk
feel uneasy - not knowing ANYTHING about you. In fact, it's rather
creepy.

GOOD guys are never quite as rude as you choose to be.

Do you work for a guvermint? Which one?

I am not as concerned with who someone is. I focus on content. And, I
will acknowledge, I actually saw *A* post the other day from nospam
where he pointed to a good source on wireless network tech. It was
good to see.

I understand your stance. I too saw THAT post - but they are few and
far between! ;-)

Have YOU ever encountered the Ramnit malware?

If it wasn't on my AOL DVD, where was it - exactly?!!


I do not recall it... though I have run into lots over the years and
could not name 1/10th of them.

With respect, Snit - did you read at this link?

https://answers.microsoft.com/en-us/...6-e565d2571849

"David_B" wrote:
ClamXav told me that it had detected malware on my AOL disk. We all
agree that it was impossible for Ramnit to be on my AOL DVD. So where
WERE the files it detected?

On the AOL disk, as you said. We had this discussion last year. The
files were falsely detected as Ramnit. One of them, shown in the
ClamXav listing, was uploaded to VT by you. So where did you get it
from if not the AOL disk?

David_B expressed precisely :
On 13/06/2020 11:08, nospam wrote:
In article , Mike Easter
wrote:

David_B wrote:
THIS thread explains that the malware I detected wasn't ORDINARY
malware, but an extra-special item.

Ramnit did NOT come on some ancient 2008 AOL disk you had.

of course not.

Agreed.

he's been told that many, many times before. he ignored it then and
will ignore it now.

Where WHERE those files hiding? The ones I asked Virus Total to scan?

It had not even been created at that time. Ramnit was born in 2011 and
peaked in about 2015. It wasn't distributed on any AOL disk which
preceded its existence by years and years.

You made some kind of mistake by mixing and matching things from
completely different 'generations' and inviting a false report.

he didn't make a mistake. his goal is to troll, not to find malware.
malware is just the bait to hook people.

You are wrong, yet again, 'nospam'

ClamXav told me that it had detected malware on my AOL disk.

In the same sense as it can tell you the disk is clean. That is to say
a "guess" made by the engine. Best to think of them as saying "I think
I found such and such malware" or "I think the disk has no malware
because I didn't find any".

It doesn't sound quite as trustworthy with the "I think" part there
though, and they want to exude confidence, so they leave that part out.

We all agree
that it was impossible for Ramnit to be on my AOL DVD. So where WERE the
files it detected?

On the disk, they're still there, they just were being mistaken for a
Ramnit remnant(s) by that particular AV.

On 14/06/2020 11:24, FromTheRafters wrote:
David_B expressed precisely :
On 13/06/2020 11:08, nospam wrote:
In article , Mike Easter
wrote:

David_B wrote:
THIS thread explains that the malware I detected wasn't ORDINARY
malware, but an extra-special item.

Ramnit did NOT come on some ancient 2008 AOL disk you had.

of course not.

Agreed.

he's been told that many, many times before. he ignored it then and
will ignore it now.

Where WHERE those files hiding? The ones I asked Virus Total to scan?

It had not even been created at that time.* Ramnit was born in 2011 and
peaked in about 2015.* It wasn't distributed on any AOL disk which
preceded its existence by years and years.

You made some kind of mistake by mixing and matching things from
completely different 'generations' and inviting a false report.

he didn't make a mistake. his goal is to troll, not to find malware.
malware is just the bait to hook people.

You are wrong, yet again, 'nospam'

ClamXav told me that it had detected malware on my AOL disk.

In the same sense as it can tell you the disk is clean. That is to say a
"guess" made by the engine. Best to think of them as saying "I think I
found such and such malware" or "I think the disk has no malware because
I didn't find any".

OK - Thanks

It doesn't sound quite as trustworthy with the "I think" part there
though, and they want to exude confidence, so they leave that part out.

:-)

We all agree that it was impossible for Ramnit to be on my AOL DVD. So
where WERE the files it detected?

On the disk, they're still there, they just were being mistaken for a
Ramnit remnant(s) by that particular AV.

No other AV has found malware on the AOL disk! Is there some way I can
examine what is ACTUALLY on the disk?

You'll no doubt take a look at what ClamXav said about my old computer
(in my response to Apd)

Have a great day, FTR. I hope your health problems are not too bad.

"David_B" wrote:
On 14/06/2020 10:17, Apd wrote:
"David_B" wrote:
ClamXav told me that it had detected malware on my AOL disk. We all
agree that it was impossible for Ramnit to be on my AOL DVD. So
where WERE the files it detected?

On the AOL disk, as you said. We had this discussion last year. The
files were falsely detected as Ramnit. One of them, shown in the
ClamXav listing, was uploaded to VT by you. So where did you get it
from if not the AOL disk?

I've just found this whilst looking for the items quarantined by AVG
recently (I've still not found them!)

It's not relevant to what I asked above which you haven't answered.

It seems to me that one DOES give root access to ClamXav - do you
agree?

I expect so. Isn't this the reason it was removed from the app store,
so it could better do its job?

If so, cannot the software do anything it wants? Anything at all?

In theory, yes but I don't know enough about OSX to confirm that. It
may be constrained in some other way by the Mac kernel.

ClamXAV Diagnostics report

Please don't post long listings to newsgroups. Upload to Pastebin
or a similar place in future and provide a link.

The report is from 2017 and lists some suspicious Windows files and
emails that have been quarantined and then put in the Trash. No mention
of the Ramnit files previously detected.

[f'ups to acw]