Обсуждение: Hey, ya! =))
removed from the mailing lists On Mon, 1 Mar 2004 larryr@saturn.sdsu.edu wrote: > I don't bite, weah! > > pass: 74574 > ---- Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy ICQ: 7615664
It was a virus, FWIW. w32/bagle.h@MM LER --On Monday, March 01, 2004 14:48:14 -0400 "Marc G. Fournier" <scrappy@postgresql.org> wrote: > > removed from the mailing lists > > On Mon, 1 Mar 2004 larryr@saturn.sdsu.edu wrote: > >> I don't bite, weah! >> >> pass: 74574 >> > > ---- > Marc G. Fournier Hub.Org Networking Services > (http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy > ICQ: 7615664 > > ---------------------------(end of broadcast)--------------------------- > TIP 2: you can get off all lists at once with the unregister command > (send "unregister YourEmailAddressHere" to majordomo@postgresql.org) > -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 972-414-9812 E-Mail: ler@lerctr.org US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
are you and larryr the same person? *scratch head* On Mon, 1 Mar 2004, Larry Rosenman wrote: > It was a virus, FWIW. > > w32/bagle.h@MM > > LER > > > --On Monday, March 01, 2004 14:48:14 -0400 "Marc G. Fournier" > <scrappy@postgresql.org> wrote: > > > > > removed from the mailing lists > > > > On Mon, 1 Mar 2004 larryr@saturn.sdsu.edu wrote: > > > >> I don't bite, weah! > >> > >> pass: 74574 > >> > > > > ---- > > Marc G. Fournier Hub.Org Networking Services > > (http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy > > ICQ: 7615664 > > > > ---------------------------(end of broadcast)--------------------------- > > TIP 2: you can get off all lists at once with the unregister command > > (send "unregister YourEmailAddressHere" to majordomo@postgresql.org) > > > > > > -- > Larry Rosenman http://www.lerctr.org/~ler > Phone: +1 972-414-9812 E-Mail: ler@lerctr.org > US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749 > ---- Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy ICQ: 7615664
--On Monday, March 01, 2004 15:02:50 -0400 "Marc G. Fournier" <scrappy@postgresql.org> wrote: > > are you and larryr the same person? *scratch head* No, but when I got the file, I fed it to www.webimmune.net and after feeding the .zip the password from the message, it told me that it was a virus. LER > > On Mon, 1 Mar 2004, Larry Rosenman wrote: > >> It was a virus, FWIW. >> >> w32/bagle.h@MM >> >> LER >> >> >> --On Monday, March 01, 2004 14:48:14 -0400 "Marc G. Fournier" >> <scrappy@postgresql.org> wrote: >> >> > >> > removed from the mailing lists >> > >> > On Mon, 1 Mar 2004 larryr@saturn.sdsu.edu wrote: >> > >> >> I don't bite, weah! >> >> >> >> pass: 74574 >> >> >> > >> > ---- >> > Marc G. Fournier Hub.Org Networking Services >> > (http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy >> > ICQ: 7615664 >> > >> > ---------------------------(end of >> > broadcast)--------------------------- TIP 2: you can get off all lists >> > at once with the unregister command (send "unregister >> > YourEmailAddressHere" to majordomo@postgresql.org) >> > >> >> >> >> -- >> Larry Rosenman http://www.lerctr.org/~ler >> Phone: +1 972-414-9812 E-Mail: ler@lerctr.org >> US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749 >> > > ---- > Marc G. Fournier Hub.Org Networking Services > (http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy > ICQ: 7615664 -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 972-414-9812 E-Mail: ler@lerctr.org US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
On Mon, 1 Mar 2004, Larry Rosenman wrote: > > > --On Monday, March 01, 2004 15:02:50 -0400 "Marc G. Fournier" > <scrappy@postgresql.org> wrote: > > > > > are you and larryr the same person? *scratch head* > No, but when I got the file, I fed it to www.webimmune.net and > after feeding the .zip the password from the message, it told me > that it was a virus. okay, if I'm reading you right here, this is one that virus checkers wouldn't pick up?? or is clamav's signatures just not updated yet? :( > > LER > > > > > On Mon, 1 Mar 2004, Larry Rosenman wrote: > > > >> It was a virus, FWIW. > >> > >> w32/bagle.h@MM > >> > >> LER > >> > >> > >> --On Monday, March 01, 2004 14:48:14 -0400 "Marc G. Fournier" > >> <scrappy@postgresql.org> wrote: > >> > >> > > >> > removed from the mailing lists > >> > > >> > On Mon, 1 Mar 2004 larryr@saturn.sdsu.edu wrote: > >> > > >> >> I don't bite, weah! > >> >> > >> >> pass: 74574 > >> >> > >> > > >> > ---- > >> > Marc G. Fournier Hub.Org Networking Services > >> > (http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy > >> > ICQ: 7615664 > >> > > >> > ---------------------------(end of > >> > broadcast)--------------------------- TIP 2: you can get off all lists > >> > at once with the unregister command (send "unregister > >> > YourEmailAddressHere" to majordomo@postgresql.org) > >> > > >> > >> > >> > >> -- > >> Larry Rosenman http://www.lerctr.org/~ler > >> Phone: +1 972-414-9812 E-Mail: ler@lerctr.org > >> US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749 > >> > > > > ---- > > Marc G. Fournier Hub.Org Networking Services > > (http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy > > ICQ: 7615664 > > > > -- > Larry Rosenman http://www.lerctr.org/~ler > Phone: +1 972-414-9812 E-Mail: ler@lerctr.org > US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749 > ---- Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy ICQ: 7615664
--On Monday, March 01, 2004 15:19:17 -0400 "Marc G. Fournier" <scrappy@postgresql.org> wrote: > On Mon, 1 Mar 2004, Larry Rosenman wrote: > >> >> >> --On Monday, March 01, 2004 15:02:50 -0400 "Marc G. Fournier" >> <scrappy@postgresql.org> wrote: >> >> > >> > are you and larryr the same person? *scratch head* >> No, but when I got the file, I fed it to www.webimmune.net and >> after feeding the .zip the password from the message, it told me >> that it was a virus. > > okay, if I'm reading you right here, this is one that virus checkers > wouldn't pick up?? or is clamav's signatures just not updated yet? :( I had to pick up an extra.dat for McAfee, and this is BRAND NEW (3/1/4). I don't think ClamAV's been updated yet for it. LER > > >> >> LER >> >> > >> > On Mon, 1 Mar 2004, Larry Rosenman wrote: >> > >> >> It was a virus, FWIW. >> >> >> >> w32/bagle.h@MM >> >> >> >> LER >> >> >> >> >> >> --On Monday, March 01, 2004 14:48:14 -0400 "Marc G. Fournier" >> >> <scrappy@postgresql.org> wrote: >> >> >> >> > >> >> > removed from the mailing lists >> >> > >> >> > On Mon, 1 Mar 2004 larryr@saturn.sdsu.edu wrote: >> >> > >> >> >> I don't bite, weah! >> >> >> >> >> >> pass: 74574 >> >> >> >> >> > >> >> > ---- >> >> > Marc G. Fournier Hub.Org Networking Services >> >> > (http://www.hub.org) Email: scrappy@hub.org Yahoo!: >> >> > yscrappy ICQ: 7615664 >> >> > >> >> > ---------------------------(end of >> >> > broadcast)--------------------------- TIP 2: you can get off all >> >> > lists at once with the unregister command (send "unregister >> >> > YourEmailAddressHere" to majordomo@postgresql.org) >> >> > >> >> >> >> >> >> >> >> -- >> >> Larry Rosenman http://www.lerctr.org/~ler >> >> Phone: +1 972-414-9812 E-Mail: ler@lerctr.org >> >> US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749 >> >> >> > >> > ---- >> > Marc G. Fournier Hub.Org Networking Services >> > (http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy >> > ICQ: 7615664 >> >> >> >> -- >> Larry Rosenman http://www.lerctr.org/~ler >> Phone: +1 972-414-9812 E-Mail: ler@lerctr.org >> US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749 >> > > ---- > Marc G. Fournier Hub.Org Networking Services > (http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy > ICQ: 7615664 -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 972-414-9812 E-Mail: ler@lerctr.org US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
Larry Rosenman <ler@lerctr.org> writes: >> okay, if I'm reading you right here, this is one that virus checkers >> wouldn't pick up?? or is clamav's signatures just not updated yet? :( > I had to pick up an extra.dat for McAfee, and this is BRAND NEW (3/1/4). > I don't think ClamAV's been updated yet for it. Something with the forged return address of "scrappy@postgresql.org" got through earlier today, too: http://archives.postgresql.org/pgsql-general/2004-03/msg00013.php Looks like another instance of the same virus. regards, tom lane