
removed from the mailing lists

On Mon, 1 Mar 2004 larryr@saturn.sdsu.edu wrote:

>  I  don't bite,  weah!
>
> pass:  74574
>

----
Marc G. Fournier           Hub.Org Networking Services (http://www.hub.org)
Email: scrappy@hub.org           Yahoo!: yscrappy              ICQ: 7615664

Mon, 1 Mar 2004 14:48:14 -0400 (AST)
"Marc G. Fournier" <scrappy@postgresql.org>
Re: Hey, ya! =))
It was a virus, FWIW.

w32/bagle.h@MM

LER


--On Monday, March 01, 2004 14:48:14 -0400 "Marc G. Fournier" 
<scrappy@postgresql.org> wrote:

>
> removed from the mailing lists
>
> On Mon, 1 Mar 2004 larryr@saturn.sdsu.edu wrote:
>
>>  I  don't bite,  weah!
>>
>> pass:  74574
>>
>
> ----
> Marc G. Fournier           Hub.Org Networking Services
> (http://www.hub.org) Email: scrappy@hub.org           Yahoo!: yscrappy
> ICQ: 7615664
>
> ---------------------------(end of broadcast)---------------------------
> TIP 2: you can get off all lists at once with the unregister command
>     (send "unregister YourEmailAddressHere" to majordomo@postgresql.org)
>



-- 
Larry Rosenman                     http://www.lerctr.org/~ler
Phone: +1 972-414-9812                 E-Mail: ler@lerctr.org
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
Mon, 01 Mar 2004 13:00:30 -0600
Larry Rosenman <ler@lerctr.org>
Re: Hey, ya! =))

are you and larryr the same person? *scratch head*

On Mon, 1 Mar 2004, Larry Rosenman wrote:

> It was a virus, FWIW.
>
> w32/bagle.h@MM
>
> LER
>
>
> --On Monday, March 01, 2004 14:48:14 -0400 "Marc G. Fournier"
> <scrappy@postgresql.org> wrote:
>
> >
> > removed from the mailing lists
> >
> > On Mon, 1 Mar 2004 larryr@saturn.sdsu.edu wrote:
> >
> >>  I  don't bite,  weah!
> >>
> >> pass:  74574
> >>
> >
> > ----
> > Marc G. Fournier           Hub.Org Networking Services
> > (http://www.hub.org) Email: scrappy@hub.org           Yahoo!: yscrappy
> > ICQ: 7615664
> >
> > ---------------------------(end of broadcast)---------------------------
> > TIP 2: you can get off all lists at once with the unregister command
> >     (send "unregister YourEmailAddressHere" to majordomo@postgresql.org)
> >
>
>
>
> --
> Larry Rosenman                     http://www.lerctr.org/~ler
> Phone: +1 972-414-9812                 E-Mail: ler@lerctr.org
> US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
>

----
Marc G. Fournier           Hub.Org Networking Services (http://www.hub.org)
Email: scrappy@hub.org           Yahoo!: yscrappy              ICQ: 7615664

Mon, 1 Mar 2004 15:02:50 -0400 (AST)
"Marc G. Fournier" <scrappy@postgresql.org>
Re: Hey, ya! =))
--On Monday, March 01, 2004 15:02:50 -0400 "Marc G. Fournier" 
<scrappy@postgresql.org> wrote:

>
> are you and larryr the same person? *scratch head*
No, but when I got the file, I fed it to www.webimmune.net and
after feeding the .zip the password from the message, it told me
that it was a virus.

LER

>
> On Mon, 1 Mar 2004, Larry Rosenman wrote:
>
>> It was a virus, FWIW.
>>
>> w32/bagle.h@MM
>>
>> LER
>>
>>
>> --On Monday, March 01, 2004 14:48:14 -0400 "Marc G. Fournier"
>> <scrappy@postgresql.org> wrote:
>>
>> >
>> > removed from the mailing lists
>> >
>> > On Mon, 1 Mar 2004 larryr@saturn.sdsu.edu wrote:
>> >
>> >>  I  don't bite,  weah!
>> >>
>> >> pass:  74574
>> >>
>> >
>> > ----
>> > Marc G. Fournier           Hub.Org Networking Services
>> > (http://www.hub.org) Email: scrappy@hub.org           Yahoo!: yscrappy
>> > ICQ: 7615664
>> >
>> > ---------------------------(end of
>> > broadcast)--------------------------- TIP 2: you can get off all lists
>> > at once with the unregister command (send "unregister
>> >     YourEmailAddressHere" to majordomo@postgresql.org)
>> >
>>
>>
>>
>> --
>> Larry Rosenman                     http://www.lerctr.org/~ler
>> Phone: +1 972-414-9812                 E-Mail: ler@lerctr.org
>> US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
>>
>
> ----
> Marc G. Fournier           Hub.Org Networking Services
> (http://www.hub.org) Email: scrappy@hub.org           Yahoo!: yscrappy
> ICQ: 7615664



-- 
Larry Rosenman                     http://www.lerctr.org/~ler
Phone: +1 972-414-9812                 E-Mail: ler@lerctr.org
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
Mon, 01 Mar 2004 13:12:21 -0600
Larry Rosenman <ler@lerctr.org>
Re: Hey, ya! =))
On Mon, 1 Mar 2004, Larry Rosenman wrote:

>
>
> --On Monday, March 01, 2004 15:02:50 -0400 "Marc G. Fournier"
> <scrappy@postgresql.org> wrote:
>
> >
> > are you and larryr the same person? *scratch head*
> No, but when I got the file, I fed it to www.webimmune.net and
> after feeding the .zip the password from the message, it told me
> that it was a virus.

okay, if I'm reading you right here, this is one that virus checkers
wouldn't pick up??  or is clamav's signatures just not updated yet? :(


>
> LER
>
> >
> > On Mon, 1 Mar 2004, Larry Rosenman wrote:
> >
> >> It was a virus, FWIW.
> >>
> >> w32/bagle.h@MM
> >>
> >> LER
> >>
> >>
> >> --On Monday, March 01, 2004 14:48:14 -0400 "Marc G. Fournier"
> >> <scrappy@postgresql.org> wrote:
> >>
> >> >
> >> > removed from the mailing lists
> >> >
> >> > On Mon, 1 Mar 2004 larryr@saturn.sdsu.edu wrote:
> >> >
> >> >>  I  don't bite,  weah!
> >> >>
> >> >> pass:  74574
> >> >>
> >> >
> >> > ----
> >> > Marc G. Fournier           Hub.Org Networking Services
> >> > (http://www.hub.org) Email: scrappy@hub.org           Yahoo!: yscrappy
> >> > ICQ: 7615664
> >> >
> >> > ---------------------------(end of
> >> > broadcast)--------------------------- TIP 2: you can get off all lists
> >> > at once with the unregister command (send "unregister
> >> >     YourEmailAddressHere" to majordomo@postgresql.org)
> >> >
> >>
> >>
> >>
> >> --
> >> Larry Rosenman                     http://www.lerctr.org/~ler
> >> Phone: +1 972-414-9812                 E-Mail: ler@lerctr.org
> >> US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
> >>
> >
> > ----
> > Marc G. Fournier           Hub.Org Networking Services
> > (http://www.hub.org) Email: scrappy@hub.org           Yahoo!: yscrappy
> > ICQ: 7615664
>
>
>
> --
> Larry Rosenman                     http://www.lerctr.org/~ler
> Phone: +1 972-414-9812                 E-Mail: ler@lerctr.org
> US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
>

----
Marc G. Fournier           Hub.Org Networking Services (http://www.hub.org)
Email: scrappy@hub.org           Yahoo!: yscrappy              ICQ: 7615664

Mon, 1 Mar 2004 15:19:17 -0400 (AST)
"Marc G. Fournier" <scrappy@postgresql.org>
Re: Hey, ya! =))
--On Monday, March 01, 2004 15:19:17 -0400 "Marc G. Fournier" 
<scrappy@postgresql.org> wrote:

> On Mon, 1 Mar 2004, Larry Rosenman wrote:
>
>>
>>
>> --On Monday, March 01, 2004 15:02:50 -0400 "Marc G. Fournier"
>> <scrappy@postgresql.org> wrote:
>>
>> >
>> > are you and larryr the same person? *scratch head*
>> No, but when I got the file, I fed it to www.webimmune.net and
>> after feeding the .zip the password from the message, it told me
>> that it was a virus.
>
> okay, if I'm reading you right here, this is one that virus checkers
> wouldn't pick up??  or is clamav's signatures just not updated yet? :(
I had to pick up an extra.dat for McAfee, and this is BRAND NEW (3/1/4).

I don't think ClamAV's been updated yet for it.

LER

>
>
>>
>> LER
>>
>> >
>> > On Mon, 1 Mar 2004, Larry Rosenman wrote:
>> >
>> >> It was a virus, FWIW.
>> >>
>> >> w32/bagle.h@MM
>> >>
>> >> LER
>> >>
>> >>
>> >> --On Monday, March 01, 2004 14:48:14 -0400 "Marc G. Fournier"
>> >> <scrappy@postgresql.org> wrote:
>> >>
>> >> >
>> >> > removed from the mailing lists
>> >> >
>> >> > On Mon, 1 Mar 2004 larryr@saturn.sdsu.edu wrote:
>> >> >
>> >> >>  I  don't bite,  weah!
>> >> >>
>> >> >> pass:  74574
>> >> >>
>> >> >
>> >> > ----
>> >> > Marc G. Fournier           Hub.Org Networking Services
>> >> > (http://www.hub.org) Email: scrappy@hub.org           Yahoo!:
>> >> > yscrappy ICQ: 7615664
>> >> >
>> >> > ---------------------------(end of
>> >> > broadcast)--------------------------- TIP 2: you can get off all
>> >> > lists at once with the unregister command (send "unregister
>> >> >     YourEmailAddressHere" to majordomo@postgresql.org)
>> >> >
>> >>
>> >>
>> >>
>> >> --
>> >> Larry Rosenman                     http://www.lerctr.org/~ler
>> >> Phone: +1 972-414-9812                 E-Mail: ler@lerctr.org
>> >> US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
>> >>
>> >
>> > ----
>> > Marc G. Fournier           Hub.Org Networking Services
>> > (http://www.hub.org) Email: scrappy@hub.org           Yahoo!: yscrappy
>> > ICQ: 7615664
>>
>>
>>
>> --
>> Larry Rosenman                     http://www.lerctr.org/~ler
>> Phone: +1 972-414-9812                 E-Mail: ler@lerctr.org
>> US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
>>
>
> ----
> Marc G. Fournier           Hub.Org Networking Services
> (http://www.hub.org) Email: scrappy@hub.org           Yahoo!: yscrappy
> ICQ: 7615664



-- 
Larry Rosenman                     http://www.lerctr.org/~ler
Phone: +1 972-414-9812                 E-Mail: ler@lerctr.org
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
Mon, 01 Mar 2004 13:27:27 -0600
Larry Rosenman <ler@lerctr.org>
Re: Hey, ya! =))
Larry Rosenman <ler@lerctr.org> writes:
>> okay, if I'm reading you right here, this is one that virus checkers
>> wouldn't pick up??  or is clamav's signatures just not updated yet? :(
> I had to pick up an extra.dat for McAfee, and this is BRAND NEW (3/1/4).

> I don't think ClamAV's been updated yet for it.

Something with the forged return address of "scrappy@postgresql.org" got
through earlier today, too:
http://archives.postgresql.org/pgsql-general/2004-03/msg00013.php
Looks like another instance of the same virus.

			regards, tom lane

Mon, 01 Mar 2004 14:43:41 -0500
Tom Lane <tgl@sss.pgh.pa.us>
Re: Hey, ya! =)) 