full-disclosure - Trainz_Service_Pack_3_V1.0_to

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <200406231338.47416.fdraven@ehugin.com>
From: fdraven at ehugin.com (FD Raven)
Subject: Trainz_Service_Pack_3_V1.0_to_V1.3.exe

On Wednesday 23 June 2004 12:16, Random Letters wrote:
> This file, Trainz_Service_Pack_3_V1.0_to_V1.3.exe, appeared in my Linux
> home directory, accessible from plenty of other Windows systems. Either
> someone is having a laugh or something strange is happening.
>
> McAfee and Symantec (both fully up to date) aren't interested.
>
> Has anyone else seen this before?

Google's your friend:

http://www.google.com/search?q=trainz+service+pack

First two hits - Trainz Railroad Simulator 2004.  First link looks rather 
SP2-specific.  So let's look at the second one, which seems more general:

http://www.auran.com/trainz/servicepacks.htm

Taking a WAG on the version:

http://www.auran.com/trainz/servicepacks_f.php?TrainzType=Community

At which point we find a page including a link to:

http://files.auran.com/trainz/ServicePacks/Trainz_Service_Pack_3_V1.0_to_V1.3.exe

Total time to locate:  under 2 minutes

Google -- it's not just a good idea...it's The Law.  (Okay, maybe it's just a 
good idea... :-)

Possibly download a copy of the 1.0-1.3 SP from Auran and compare to the one 
you found on your Linux box (to verify that the one you found isn't simply 
some renamed piece of malware), and/or walk around the office and listen for 
choo-choo sounds coming from a co-worker's cube...