Re: [Full-Disclosure] Trainz_Service_Pack_3_V1.0_to_V1.3.exe

[FD Raven <fdraven@xxxxxxxxxx>]

On Wednesday 23 June 2004 12:16, Random Letters wrote:
> This file, Trainz_Service_Pack_3_V1.0_to_V1.3.exe, appeared in my Linux
> home directory, accessible from plenty of other Windows systems. Either
> someone is having a laugh or something strange is happening.
>
> McAfee and Symantec (both fully up to date) aren't interested.
>
> Has anyone else seen this before?

Google's your friend:

http://www.google.com/search?q=trainz+service+pack

First two hits - Trainz Railroad Simulator 2004.  First link looks rather 
SP2-specific.  So let's look at the second one, which seems more general:

http://www.auran.com/trainz/servicepacks.htm

Taking a WAG on the version:

http://www.auran.com/trainz/servicepacks_f.php?TrainzType=Community

At which point we find a page including a link to:

http://files.auran.com/trainz/ServicePacks/Trainz_Service_Pack_3_V1.0_to_V1.3.exe

Total time to locate:  under 2 minutes

Google -- it's not just a good idea...it's The Law.  (Okay, maybe it's just a 
good idea... :-)

Possibly download a copy of the 1.0-1.3 SP from Auran and compare to the one 
you found on your Linux box (to verify that the one you found isn't simply 
some renamed piece of malware), and/or walk around the office and listen for 
choo-choo sounds coming from a co-worker's cube...


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html