Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > alt.folklore.computers > #160130

Re: Ransomware

From Melzzzzz <mel@zzzzz.com>
Newsgroups alt.folklore.computers
Subject Re: Ransomware
Date 2016-02-22 22:28 +0100
Organization albasani.net
Message-ID <20160222222846.06433d43@maxa-pc> (permalink)
References (4 earlier) <nae8me$12d$1@dont-email.me> <20160222093756.4dd7f598@maxa-pc> <naff9v$6so$1@dont-email.me> <20160222182507.023044c9@maxa-pc> <naftks$3dd$1@dont-email.me>

Show all headers | View raw

On Mon, 22 Feb 2016 15:15:58 -0600
Stephen Sprunk <stephen@sprunk.org> wrote:

> On 22-Feb-16 11:25, Melzzzzz wrote:
> > Stephen Sprunk <stephen@sprunk.org> wrote:  
> >> On 22-Feb-16 02:37, Melzzzzz wrote:  
> >>> Hm. int 0x80 does not preserve ebp rather it uses it as sixth 
> >>> parameter.  
> >> 
> >> Ah, it's been so long that I'd forgotten that; so you always have
> >> to deal with that, which I bet most asm callers do not.  Do you
> >> also have to deal with restarting, or is that just
> >> SYSENTER/SYSCALL?  
> > 
> > sysenter/syscall are not used in 32 bit code, not directly.  
> 
> Some people do.

Never saw it, and I follow assembler forums/groups ;)
But I guess some do.

> 
> > There is aux vector that has pointer to routine that does that.  
> 
> Yes, it's called __kernel_vsyscall, and it's located at GS:10; you can
> call the function that checks the vector, but enough people call that
> address directly that it'll probably never change.

Are you sure about GS:10? That's some libc thing?

> 
> > Pointer is not always present, but one can check for presence.  
> 
> It's always there, provided you have a modern kernel.

Ok. Didn't know that.

> 
> > Never saw anything but checking return value for restart
> > indication.  
> 
> It also deals with trashing EBP.
> 
> Even just the handling restarts is worth using it; folks doing
> syscalls directly (whether INT 80, SYSENTER or SYSCALL) often forget
> that, which is a bug just waiting to appear during your customer demo.

Never saw that. I assume ebp is not preserved in 32 bit code
and I assume that it is preserved in 64 bit code.


> 
> >>> It is not that much slower on newer cpus. In 64 bit code, syscall
> >>> instruction is used rather then int 0x80.  
> >> 
> >> Or SYSENTER on Intel CPUs.  
> > 
> > No. On both cpus syscall is used in 64 bit mode.  
> 
> In 64-bit mode, Intel supports both SYSENTER and SYSCALL, and SYSENTER
> is preferred because it's faster; AMD only supports SYSCALL.

Yes, but I never saw anything but syscall in 64 bit code.

> 
> In 32-bit mode, AMD supports both SYSENTER and SYSCALL, and SYSCALL is
> preferred because it's faster; Intel only supports SYSENTER.

I never saw example of using them directly in 32 bit code.

> 
> Older CPUs support neither in 32-bit mode, and some older Intel CPUs
> have a buggy SYSENTER, so INT 80 must be used on those as well.
> 
> __kernel_vsyscall handles all of that nonsense for you.

Yep.

> 
> S
>

Back to alt.folklore.computers | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Ransomware "Osmium" <r124c4u102@comcast.net> - 2016-02-16 10:37 -0600
  Re: Ransomware hancock4@bbs.cpcn.com - 2016-02-16 09:54 -0800
    Re: Ransomware Melzzzzz <mel@zzzzz.com> - 2016-02-16 19:41 +0100
      Re: Ransomware Morten Reistad <first@last.name.invalid> - 2016-02-16 21:11 +0100
        Re: Ransomware Melzzzzz <mel@zzzzz.com> - 2016-02-17 02:16 +0100
        Re: Ransomware usenet@only.tnx (Questor) - 2016-02-17 22:05 +0000
          Re: Ransomware Morten Reistad <first@last.name.invalid> - 2016-02-17 23:35 +0100
            Re: Ransomware jmfbahciv <See.above@aol.com> - 2016-02-18 13:58 +0000
          Re: Ransomware Peter Flass <peter_flass@yahoo.com> - 2016-02-17 18:41 -0700
      Re: Ransomware Peter Flass <peter_flass@yahoo.com> - 2016-02-16 18:52 -0700
      Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-17 14:13 +1100
        Re: Ransomware Melzzzzz <mel@zzzzz.com> - 2016-02-17 04:53 +0100
          Re: Ransomware Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2016-02-17 04:21 +0000
          Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-17 17:24 +1100
            Re: Ransomware Morten Reistad <first@last.name.invalid> - 2016-02-17 15:07 +0100
              Re: Ransomware usenet@only.tnx (Questor) - 2016-02-17 23:02 +0000
      Re: Ransomware Huge <Huge@nowhere.much.invalid> - 2016-02-17 08:03 +0000
        Re: Ransomware usenet@only.tnx (Questor) - 2016-02-17 23:02 +0000
    Re: Ransomware Huge <Huge@nowhere.much.invalid> - 2016-02-17 08:01 +0000
      Re: Ransomware Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2016-02-17 18:07 +0000
        Re: Ransomware Walter Banks <walter@bytecraft.com> - 2016-02-17 14:01 -0500
          Re: Ransomware Peter Flass <peter_flass@yahoo.com> - 2016-02-17 18:41 -0700
            Re: Ransomware Anne & Lynn Wheeler <lynn@garlic.com> - 2016-02-17 18:09 -0800
              Re: Ransomware Joe Pfeiffer <pfeiffer@cs.nmsu.edu> - 2016-02-17 20:45 -0700
                Re: Ransomware Jon Elson <elson@pico-systems.com> - 2016-02-17 22:34 -0600
                Re: Ransomware "Osmium" <r124c4u102@comcast.net> - 2016-02-18 11:16 -0600
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-19 05:44 +1100
              Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-18 15:00 +1100
            Re: Ransomware Roger Blake <rogblake@iname.invalid> - 2016-02-18 02:12 +0000
            Re: Ransomware Dan Espen <despen@verizon.net> - 2016-02-17 22:47 -0500
              Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-18 15:10 +1100
                Re: Ransomware Anne & Lynn Wheeler <lynn@garlic.com> - 2016-02-17 21:29 -0800
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-18 17:56 +1100
                Re: Ransomware Anne & Lynn Wheeler <lynn@garlic.com> - 2016-02-17 23:15 -0800
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-18 18:35 +1100
                Re: Ransomware Anne & Lynn Wheeler <lynn@garlic.com> - 2016-02-18 17:58 -0800
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-19 13:44 +1100
            Re: Ransomware hancock4@bbs.cpcn.com - 2016-02-17 20:44 -0800
              Re: Ransomware Lawrence Statton <lawrence@senguio.mx> - 2016-02-18 08:03 -0600
                Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-18 17:14 -0600
                Re: Ransomware Lawrence Statton <lawrence@senguio.mx> - 2016-02-18 19:10 -0600
                Re: Ransomware hancock4@bbs.cpcn.com - 2016-02-18 20:13 -0800
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-19 15:26 +1100
                Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-19 09:34 -0600
                Re: Ransomware scott@slp53.sl.home (Scott Lurndal) - 2016-02-19 16:26 +0000
                Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-19 14:58 -0600
                Re: Ransomware Dan Espen <despen@verizon.net> - 2016-02-19 18:21 -0500
                Re: Ransomware Peter Flass <peter_flass@yahoo.com> - 2016-02-19 18:43 -0700
                Re: Ransomware Dan Espen <despen@verizon.net> - 2016-02-19 23:32 -0500
                Re: Ransomware hancock4@bbs.cpcn.com - 2016-02-19 19:34 -0800
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-20 19:59 +1100
                Re: Ransomware "J. Clarke" <j.clarke.873638@gmail.com> - 2016-02-20 07:25 -0500
                Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-20 10:30 -0600
                Re: Ransomware Dave Garland <dave.garland@wizinfo.com> - 2016-02-20 10:58 -0600
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-21 04:25 +1100
                Re: Ransomware Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2016-02-20 19:56 +0000
                Re: Ransomware Peter Flass <peter_flass@yahoo.com> - 2016-02-20 18:15 -0700
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-21 13:26 +1100
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-21 04:16 +1100
                Re: Ransomware Peter Flass <peter_flass@yahoo.com> - 2016-02-20 18:15 -0700
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-21 13:22 +1100
                Re: Ransomware Walter Banks <walter@bytecraft.com> - 2016-02-19 17:36 -0500
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-20 10:01 +1100
                Re: Ransomware Gene Wirchenko <genew@telus.net> - 2016-02-20 16:26 -0800
                Re: Ransomware Gene Wirchenko <genew@telus.net> - 2016-02-21 13:52 -0800
                Re: Ransomware Walter Banks <walter@bytecraft.com> - 2016-02-21 18:51 -0500
                Re: Ransomware hancock4@bbs.cpcn.com - 2016-02-19 19:18 -0800
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-20 15:03 +1100
                Re: Ransomware Andrew Swallow <am.swallow@btinternet.com> - 2016-02-20 16:12 +0000
                Re: Ransomware Stephen Sprunk <stephen@sprunk.org> - 2016-02-19 15:59 -0600
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-20 09:59 +1100
                Re: Ransomware Dave Garland <dave.garland@wizinfo.com> - 2016-02-19 18:43 -0600
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-20 14:36 +1100
                Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-19 17:01 -0600
                Re: Ransomware Stephen Sprunk <stephen@sprunk.org> - 2016-02-19 18:54 -0600
                Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-19 19:48 -0600
                Re: Ransomware Stephen Sprunk <stephen@sprunk.org> - 2016-02-20 16:20 -0600
                Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-20 18:17 -0600
                Re: Ransomware hancock4@bbs.cpcn.com - 2016-02-19 19:53 -0800
                Re: Ransomware Peter Flass <peter_flass@yahoo.com> - 2016-02-19 18:43 -0700
                Re: Ransomware "J. Clarke" <j.clarke.873638@gmail.com> - 2016-02-19 21:33 -0500
                Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-20 10:23 -0600
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-20 14:48 +1100
                Re: Ransomware hancock4@bbs.cpcn.com - 2016-02-19 19:56 -0800
                Re: Ransomware Michael Black <et472@ncf.ca> - 2016-02-19 23:18 -0500
                Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-20 10:35 -0600
                Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-20 10:12 -0600
                Re: Ransomware Stephen Sprunk <stephen@sprunk.org> - 2016-02-20 15:33 -0600
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-21 12:11 +1100
                Re: Ransomware Peter Flass <peter_flass@yahoo.com> - 2016-02-19 18:43 -0700
                Re: Ransomware hancock4@bbs.cpcn.com - 2016-02-19 20:00 -0800
                Re: Ransomware Peter Flass <peter_flass@yahoo.com> - 2016-02-20 01:51 -0700
                Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-20 10:34 -0600
                Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-20 10:19 -0600
                Re: Ransomware hancock4@bbs.cpcn.com - 2016-02-19 19:40 -0800
                Re: Ransomware jmfbahciv <See.above@aol.com> - 2016-02-20 15:18 +0000
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-21 03:46 +1100
                Re: Ransomware Dave Garland <dave.garland@wizinfo.com> - 2016-02-18 23:55 -0600
                Re: Ransomware mausg@mail.com - 2016-02-19 10:48 +0000
                Re: Ransomware "J. Clarke" <j.clarke.873638@gmail.com> - 2016-02-19 05:56 -0500
                Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-19 09:50 -0600
                Re: Ransomware scott@slp53.sl.home (Scott Lurndal) - 2016-02-19 16:29 +0000
                Re: Ransomware Stan Barr <plan.b@bluesomatic.org> - 2016-02-19 16:54 +0000
                Re: Ransomware Ahem A Rivet's Shot <steveo@eircom.net> - 2016-02-19 17:55 +0000
                Re: Ransomware Stan Barr <plan.b@bluesomatic.org> - 2016-02-20 08:30 +0000
                Re: Ransomware Ahem A Rivet's Shot <steveo@eircom.net> - 2016-02-20 15:29 +0000
                Re: Ransomware Lawrence Statton NK1G <lawrence@senguio.mx> - 2016-02-20 10:06 -0600
                Re: Ransomware "Osmium" <r124c4u102@comcast.net> - 2016-02-20 11:03 -0600
                Re: Ransomware Stephen Sprunk <stephen@sprunk.org> - 2016-02-22 16:14 -0600
                Re: Ransomware Stephen Sprunk <stephen@sprunk.org> - 2016-02-22 16:27 -0600
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-23 09:49 +1100
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-20 05:29 +1100
                Re: Ransomware Ahem A Rivet's Shot <steveo@eircom.net> - 2016-02-19 18:53 +0000
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-20 09:42 +1100
                Re: Ransomware Walter Banks <walter@bytecraft.com> - 2016-02-19 14:24 -0500
                Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-19 14:58 -0600
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-20 05:24 +1100
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-20 04:53 +1100
                Re: Ransomware Ahem A Rivet's Shot <steveo@eircom.net> - 2016-02-19 18:15 +0000
                Re: Ransomware hancock4@bbs.cpcn.com - 2016-02-19 17:55 -0800
              Re: Ransomware Walter Banks <walter@bytecraft.com> - 2016-02-18 11:19 -0500
              Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-18 10:19 -0600
                Re: Ransomware Walter Banks <walter@bytecraft.com> - 2016-02-18 11:46 -0500
                Re: Ransomware Ahem A Rivet's Shot <steveo@eircom.net> - 2016-02-18 18:01 +0000
                Re: Ransomware Walter Banks <walter@bytecraft.com> - 2016-02-18 14:36 -0500
                Re: Ransomware Ahem A Rivet's Shot <steveo@eircom.net> - 2016-02-19 11:23 +0000
                Re: Ransomware Walter Banks <walter@bytecraft.com> - 2016-02-19 09:28 -0500
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-20 05:19 +1100
              Re: Ransomware Dave Garland <dave.garland@wizinfo.com> - 2016-02-18 11:06 -0600
                Re: Ransomware Peter Flass <peter_flass@yahoo.com> - 2016-02-18 10:24 -0700
                Re: Ransomware hancock4@bbs.cpcn.com - 2016-02-18 12:27 -0800
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-19 10:22 +1100
                Re: Ransomware Dave Garland <dave.garland@wizinfo.com> - 2016-02-19 00:07 -0600
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-19 18:34 +1100
                Re: Ransomware "J. Clarke" <j.clarke.873638@gmail.com> - 2016-02-19 05:41 -0500
                Re: Ransomware "Osmium" <r124c4u102@comcast.net> - 2016-02-19 07:43 -0600
                Re: Ransomware scott@slp53.sl.home (Scott Lurndal) - 2016-02-19 16:13 +0000
                Re: Ransomware "Osmium" <r124c4u102@comcast.net> - 2016-02-19 08:01 -0600
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-20 04:50 +1100
                Re: Ransomware Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2016-02-18 21:34 +0000
                Re: Ransomware Lawrence Statton <lawrence@senguio.mx> - 2016-02-18 13:34 -0600
              Re: Ransomware "J. Clarke" <j.clarke.873638@gmail.com> - 2016-02-18 17:34 -0500
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-19 10:33 +1100
                Re: Ransomware "J. Clarke" <j.clarke.873638@gmail.com> - 2016-02-18 21:04 -0500
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-19 13:46 +1100
                Re: Ransomware "J. Clarke" <j.clarke.873638@gmail.com> - 2016-02-19 05:34 -0500
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-20 04:47 +1100
                Re: Ransomware jmfbahciv <See.above@aol.com> - 2016-02-19 14:24 +0000
            Re: Ransomware Walter Banks <walter@bytecraft.com> - 2016-02-18 11:03 -0500
            Re: Ransomware Ibmekon <Ibmekon> - 2016-02-18 19:21 +0000
              Re: Ransomware scott@slp53.sl.home (Scott Lurndal) - 2016-02-18 20:56 +0000
                Re: Ransomware Ibmekon <Ibmekon> - 2016-02-18 21:19 +0000
                Re: Ransomware scott@slp53.sl.home (Scott Lurndal) - 2016-02-19 13:48 +0000
                Re: Ransomware Ibmekon <Ibmekon> - 2016-02-19 14:12 +0000
                Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-19 09:54 -0600
                Re: Ransomware jmfbahciv <See.above@aol.com> - 2016-02-20 15:18 +0000
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-21 03:29 +1100
                Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-20 10:42 -0600
                Re: Ransomware jmfbahciv <See.above@aol.com> - 2016-02-21 15:48 +0000
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-22 03:43 +1100
                Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-21 12:55 -0600
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-22 07:53 +1100
                Re: Ransomware jmfbahciv <See.above@aol.com> - 2016-02-23 13:13 +0000
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-24 04:49 +1100
                Re: Ransomware Ibmekon <Ibmekon> - 2016-02-21 19:56 +0000
                Re: Ransomware scott@slp53.sl.home (Scott Lurndal) - 2016-02-19 16:19 +0000
                Re: Ransomware hancock4@bbs.cpcn.com - 2016-02-19 18:08 -0800
                Re: Ransomware hancock4@bbs.cpcn.com - 2016-02-19 18:18 -0800
                Re: Ransomware mausg@mail.com - 2016-02-19 18:10 +0000
                Re: Ransomware Ibmekon <Ibmekon> - 2016-02-19 21:43 +0000
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-20 09:52 +1100
                Re: Ransomware Anne & Lynn Wheeler <lynn@garlic.com> - 2016-02-19 16:53 -0800
              Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-18 18:37 -0600
          Re: Ransomware jmfbahciv <See.above@aol.com> - 2016-02-18 13:58 +0000
            Re: Ransomware "Rod Speed" <rod.speed.aaa@gmail.com> - 2016-02-19 05:32 +1100
    Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-17 11:13 -0600
  Re: Ransomware Roger Blake <rogblake@iname.invalid> - 2016-02-16 17:57 +0000
    Re: Ransomware "Osmium" <r124c4u102@comcast.net> - 2016-02-16 14:19 -0600
      Re: Ransomware Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2016-02-17 03:42 +0000
        Re: Ransomware Huge <Huge@nowhere.much.invalid> - 2016-02-17 08:05 +0000
        Re: Ransomware Ahem A Rivet's Shot <steveo@eircom.net> - 2016-02-17 12:03 +0000
          Re: Ransomware Morten Reistad <first@last.name,invalid> - 2016-02-17 15:21 +0100
          Re: Ransomware Joe Pfeiffer <pfeiffer@cs.nmsu.edu> - 2016-02-17 07:38 -0700
          Re: Ransomware Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2016-02-17 18:07 +0000
            Re: Ransomware "Charles Richmond" <numerist@aquaporin4.com> - 2016-02-18 12:10 -0600
              Re: Ransomware Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2016-02-18 21:34 +0000
        Re: Ransomware "Charles Richmond" <numerist@aquaporin4.com> - 2016-02-18 12:06 -0600
    Re: Ransomware Quadibloc <jsavard@ecn.ab.ca> - 2016-02-16 12:49 -0800
      Re: Ransomware Lawrence Statton <lawrence@senguio.mx> - 2016-02-16 16:55 -0600
        Re: Ransomware "Osmium" <r124c4u102@comcast.net> - 2016-02-16 17:31 -0600
      Re: Ransomware hancock4@bbs.cpcn.com - 2016-02-16 16:11 -0800
      Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-17 14:26 +1100
      Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-17 11:19 -0600
        Re: Ransomware "Osmium" <r124c4u102@comcast.net> - 2016-02-17 12:05 -0600
          Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-17 17:58 -0600
            Re: Ransomware Peter Flass <peter_flass@yahoo.com> - 2016-02-17 18:41 -0700
              Re: Ransomware Anne & Lynn Wheeler <lynn@garlic.com> - 2016-02-17 18:39 -0800
  Re: Ransomware Mike Spencer <mds@bogus.nodomain.nowhere> - 2016-02-16 16:44 -0400
    Re: Ransomware Jon Elson <jmelson@wustl.edu> - 2016-02-16 15:30 -0600
      Re: Ransomware Morten Reistad <first@last.name.invalid> - 2016-02-17 00:20 +0100
        Re: Ransomware usenet@only.tnx (Questor) - 2016-02-17 23:03 +0000
          Re: Ransomware Michael Black <et472@ncf.ca> - 2016-02-17 18:48 -0500
            Re: Ransomware jmfbahciv <See.above@aol.com> - 2016-02-18 13:58 +0000
              Re: Ransomware Morten Reistad <first@Last.name.invalid> - 2016-02-18 16:46 +0100
                Re: Ransomware Gene Wirchenko <genew@telus.net> - 2016-02-18 11:06 -0800
                Re: Ransomware Dan Espen <despen@verizon.net> - 2016-02-18 14:43 -0500
                Re: Ransomware "Osmium" <r124c4u102@comcast.net> - 2016-02-18 14:06 -0600
                Re: Ransomware Dan Espen <despen@verizon.net> - 2016-02-18 15:48 -0500
                Re: Ransomware "Osmium" <r124c4u102@comcast.net> - 2016-02-18 15:36 -0600
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-19 10:30 +1100
                Re: Ransomware Dan Espen <despen@verizon.net> - 2016-02-18 19:38 -0500
                Re: Ransomware Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2016-02-18 21:43 +0000
                Re: Ransomware Morten Reistad <first@last.name.invalid> - 2016-02-19 00:51 +0100
                Re: Ransomware scott@slp53.sl.home (Scott Lurndal) - 2016-02-19 13:45 +0000
                Re: Ransomware Melzzzzz <mel@zzzzz.com> - 2016-02-19 15:00 +0100
                Re: Ransomware Peter Flass <peter_flass@yahoo.com> - 2016-02-19 07:01 -0700
                Re: Ransomware Dan Espen <despen@verizon.net> - 2016-02-19 10:16 -0500
                Re: Ransomware Peter Flass <peter_flass@yahoo.com> - 2016-02-19 11:15 -0700
                Re: Ransomware Peter Flass <peter_flass@yahoo.com> - 2016-02-19 11:19 -0700
                Re: Ransomware Ahem A Rivet's Shot <steveo@eircom.net> - 2016-02-19 18:55 +0000
                Re: Ransomware Peter Flass <peter_flass@yahoo.com> - 2016-02-19 12:54 -0700
                Re: Ransomware Gene Wirchenko <genew@telus.net> - 2016-02-20 17:46 -0800
                Re: Ransomware JimP <solosam90@gmail.com> - 2016-02-19 15:08 -0600
                Re: Ransomware "Charles Richmond" <numerist@aquaporin4.com> - 2016-02-23 16:01 -0600
                Re: Ransomware "J. Clarke" <j.clarke.873638@gmail.com> - 2016-02-23 21:24 -0500
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-20 04:58 +1100
                Re: Ransomware scott@slp53.sl.home (Scott Lurndal) - 2016-02-19 13:40 +0000
                Re: Ransomware jmfbahciv <See.above@aol.com> - 2016-02-19 14:24 +0000
                Re: Ransomware "Rod Speed" <rod.speed.aaa@gmail.com> - 2016-02-20 05:06 +1100
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-19 10:11 +1100
                Re: Ransomware Morten Reistad <first@last.name.invalid> - 2016-02-18 21:44 +0100
                Re: Ransomware jmfbahciv <See.above@aol.com> - 2016-02-19 14:24 +0000
                Re: Ransomware "Rod Speed" <rod.speed.aaa@gmail.com> - 2016-02-20 05:13 +1100
                Re: Ransomware jmfbahciv <See.above@aol.com> - 2016-02-19 14:24 +0000
                Re: Ransomware Morten Reistad <first@last.name.invalid> - 2016-02-19 17:08 +0100
                Re: Ransomware jmfbahciv <See.above@aol.com> - 2016-02-20 15:18 +0000
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-21 03:41 +1100
                Re: Ransomware Peter Flass <peter_flass@yahoo.com> - 2016-02-20 18:15 -0700
                Re: Ransomware Morten Reistad <first@last.name.invalid> - 2016-02-21 09:35 +0100
                Re: Ransomware Ahem A Rivet's Shot <steveo@eircom.net> - 2016-02-21 10:18 +0000
                Re: Ransomware Morten Reistad <first@last.name.invalid> - 2016-02-21 16:48 +0100
                Re: Ransomware Stephen Sprunk <stephen@sprunk.org> - 2016-02-21 18:40 -0600
                Re: Ransomware Melzzzzz <mel@zzzzz.com> - 2016-02-22 01:53 +0100
                Re: Ransomware Peter Flass <peter_flass@yahoo.com> - 2016-02-21 18:36 -0700
                Re: Ransomware Stephen Sprunk <stephen@sprunk.org> - 2016-02-22 00:12 -0600
                Re: Ransomware Melzzzzz <mel@zzzzz.com> - 2016-02-22 09:37 +0100
                Re: Ransomware Dan Espen <despen@verizon.net> - 2016-02-22 09:17 -0500
                Re: Ransomware Melzzzzz <mel@zzzzz.com> - 2016-02-22 15:29 +0100
                Re: Ransomware using libc Dan Espen <despen@verizon.net> - 2016-02-22 09:42 -0500
                Re: Ransomware using libc Melzzzzz <mel@zzzzz.com> - 2016-02-22 15:52 +0100
                Re: Ransomware using libc Dan Espen <despen@verizon.net> - 2016-02-22 10:23 -0500
                Re: Ransomware using libc scott@slp53.sl.home (Scott Lurndal) - 2016-02-22 17:24 +0000
                Re: Ransomware using libc Melzzzzz <mel@zzzzz.com> - 2016-02-22 20:29 +0100
                Re: Ransomware using libc Ahem A Rivet's Shot <steveo@eircom.net> - 2016-02-22 19:38 +0000
                Re: Ransomware using libc Melzzzzz <mel@zzzzz.com> - 2016-02-22 21:31 +0100
                Re: Ransomware using libc Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2016-02-22 17:17 +0000
                Re: Ransomware using libc Stephen Sprunk <stephen@sprunk.org> - 2016-02-22 14:41 -0600
                Re: Ransomware using libc Melzzzzz <mel@zzzzz.com> - 2016-02-22 22:07 +0100
                Re: Ransomware Joe Pfeiffer <pfeiffer@cs.nmsu.edu> - 2016-02-22 09:16 -0700
                Re: Ransomware Melzzzzz <mel@zzzzz.com> - 2016-02-22 17:21 +0100
                Re: Ransomware Joe Pfeiffer <pfeiffer@cs.nmsu.edu> - 2016-02-22 09:34 -0700
                Re: Ransomware Stephen Sprunk <stephen@sprunk.org> - 2016-02-22 11:11 -0600
                Re: Ransomware Melzzzzz <mel@zzzzz.com> - 2016-02-22 18:25 +0100
                Re: Ransomware Stephen Sprunk <stephen@sprunk.org> - 2016-02-22 15:15 -0600
                Re: Ransomware Melzzzzz <mel@zzzzz.com> - 2016-02-22 22:28 +0100
                Re: Ransomware Stephen Sprunk <stephen@sprunk.org> - 2016-02-22 21:46 -0600
                Re: Ransomware "Rod Speed" <rod.speed.aaa@gmail.com> - 2016-02-20 05:05 +1100
              Re: Ransomware "Rod Speed" <rod.speed.aaa@gmail.com> - 2016-02-19 05:31 +1100
              Re: Ransomware Jon Elson <jmelson@wustl.edu> - 2016-02-18 13:56 -0600
                Re: Ransomware jmfbahciv <See.above@aol.com> - 2016-02-19 14:24 +0000
                Re: Ransomware "Rod Speed" <rod.speed.aaa@gmail.com> - 2016-02-20 05:16 +1100
                Re: Ransomware Jon Elson <jmelson@wustl.edu> - 2016-02-19 17:09 -0600
                Re: Ransomware jmfbahciv <See.above@aol.com> - 2016-02-20 15:18 +0000
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-21 03:55 +1100
                Re: Ransomware Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2016-02-20 19:56 +0000
                Re: Ransomware Jon Elson <jmelson@wustl.edu> - 2016-02-22 14:07 -0600
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-23 07:15 +1100
                Re: Ransomware "J. Clarke" <j.clarke.873638@gmail.com> - 2016-02-22 18:30 -0500
                Re: Ransomware Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2016-02-23 01:49 +0000
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-23 13:09 +1100
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-23 13:03 +1100
          Re: Ransomware Stephen Sprunk <stephen@sprunk.org> - 2016-02-19 13:12 -0600
        Re: Ransomware "J. Clarke" <j.clarke.873638@gmail.com> - 2016-02-18 06:29 -0500
          Re: Ransomware Stephen Sprunk <stephen@sprunk.org> - 2016-02-19 13:35 -0600
            Re: Ransomware Huge <Huge@nowhere.much.invalid> - 2016-02-20 09:55 +0000
              Re: Ransomware Peter Flass <peter_flass@yahoo.com> - 2016-02-20 07:30 -0700
                Re: Ransomware "J. Clarke" <j.clarke.873638@gmail.com> - 2016-02-20 11:11 -0500
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-21 04:05 +1100
                Re: Ransomware Huge <Huge@nowhere.much.invalid> - 2016-02-21 11:55 +0000
                Re: Ransomware Morten Reistad <first@last.name.invalid> - 2016-02-21 14:04 +0100
                Re: Ransomware Huge <Huge@nowhere.much.invalid> - 2016-02-21 13:57 +0000
                Re: Ransomware Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2016-02-21 23:28 +0000
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-22 03:34 +1100
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-22 03:32 +1100
                Re: Ransomware Dave Garland <dave.garland@wizinfo.com> - 2016-02-21 12:14 -0600
                Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-22 07:47 +1100
      Re: Ransomware scott@slp53.sl.home (Scott Lurndal) - 2016-02-17 14:03 +0000
        Re: Ransomware Jon Elson <jmelson@wustl.edu> - 2016-02-17 15:20 -0600
          Re: Ransomware scott@slp53.sl.home (Scott Lurndal) - 2016-02-17 21:31 +0000
          Re: Ransomware Stan Barr <plan.b@bluesomatic.org> - 2016-02-18 08:23 +0000
            Re: Ransomware Jon Elson <elson@pico-systems.com> - 2016-02-18 11:42 -0600
      Re: Ransomware "J. Clarke" <j.clarke.873638@gmail.com> - 2016-02-18 06:23 -0500
        Re: Ransomware Jon Elson <elson@pico-systems.com> - 2016-02-18 11:43 -0600
          Re: Ransomware "J. Clarke" <j.clarke.873638@gmail.com> - 2016-02-18 17:48 -0500
    Re: Ransomware hancock4@bbs.cpcn.com - 2016-02-16 17:04 -0800
      Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-17 14:42 +1100
      Re: Ransomware Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2016-02-17 04:17 +0000
        Re: Ransomware Mike Spencer <mds@bogus.nodomain.nowhere> - 2016-02-17 04:08 -0400
          Re: Ransomware usenet@only.tnx (Questor) - 2016-02-17 23:04 +0000
        Re: Ransomware "J. Clarke" <j.clarke.873638@gmail.com> - 2016-02-18 06:38 -0500
          Re: Ransomware Morten Reistad <first@last.name.invalid> - 2016-02-18 13:38 +0100
            Re: Ransomware "J. Clarke" <j.clarke.873638@gmail.com> - 2016-02-18 17:57 -0500
    Re: Ransomware "hgww" <hgww@gmail.com> - 2016-02-17 14:24 +1100
    Re: Ransomware usenet@only.tnx (Questor) - 2016-02-17 23:03 +0000
      Re: Ransomware Anne & Lynn Wheeler <lynn@garlic.com> - 2016-02-17 16:43 -0800
      Re: Ransomware jmfbahciv <See.above@aol.com> - 2016-02-18 13:58 +0000
    Re: Ransomware Stephen Sprunk <stephen@sprunk.org> - 2016-02-19 12:55 -0600

csiph-web