Re: Hey, ya! =))

Started by The Hermit Hackerabout 22 years ago7 messageshackers
Jump to latest
#1The Hermit Hacker
scrappy@hub.org

removed from the mailing lists

On Mon, 1 Mar 2004 larryr@saturn.sdsu.edu wrote:

I don't bite, weah!

pass: 74574

----
Marc G. Fournier Hub.Org Networking Services (http://www.hub.org)
Email: scrappy@hub.org Yahoo!: yscrappy ICQ: 7615664

#2Larry Rosenman
ler@lerctr.org
In reply to: The Hermit Hacker (#1)

It was a virus, FWIW.

w32/bagle.h@MM

LER

--On Monday, March 01, 2004 14:48:14 -0400 "Marc G. Fournier"
<scrappy@postgresql.org> wrote:

removed from the mailing lists

On Mon, 1 Mar 2004 larryr@saturn.sdsu.edu wrote:

I don't bite, weah!

pass: 74574

----
Marc G. Fournier Hub.Org Networking Services
(http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy
ICQ: 7615664

---------------------------(end of broadcast)---------------------------
TIP 2: you can get off all lists at once with the unregister command
(send "unregister YourEmailAddressHere" to majordomo@postgresql.org)

--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 972-414-9812 E-Mail: ler@lerctr.org
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749

#3The Hermit Hacker
scrappy@hub.org
In reply to: Larry Rosenman (#2)

are you and larryr the same person? *scratch head*

On Mon, 1 Mar 2004, Larry Rosenman wrote:

It was a virus, FWIW.

w32/bagle.h@MM

LER

--On Monday, March 01, 2004 14:48:14 -0400 "Marc G. Fournier"
<scrappy@postgresql.org> wrote:

removed from the mailing lists

On Mon, 1 Mar 2004 larryr@saturn.sdsu.edu wrote:

I don't bite, weah!

pass: 74574

----
Marc G. Fournier Hub.Org Networking Services
(http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy
ICQ: 7615664

---------------------------(end of broadcast)---------------------------
TIP 2: you can get off all lists at once with the unregister command
(send "unregister YourEmailAddressHere" to majordomo@postgresql.org)

--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 972-414-9812 E-Mail: ler@lerctr.org
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749

----
Marc G. Fournier Hub.Org Networking Services (http://www.hub.org)
Email: scrappy@hub.org Yahoo!: yscrappy ICQ: 7615664

#4Larry Rosenman
ler@lerctr.org
In reply to: The Hermit Hacker (#3)

--On Monday, March 01, 2004 15:02:50 -0400 "Marc G. Fournier"
<scrappy@postgresql.org> wrote:

are you and larryr the same person? *scratch head*

No, but when I got the file, I fed it to www.webimmune.net and
after feeding the .zip the password from the message, it told me
that it was a virus.

LER

On Mon, 1 Mar 2004, Larry Rosenman wrote:

It was a virus, FWIW.

w32/bagle.h@MM

LER

--On Monday, March 01, 2004 14:48:14 -0400 "Marc G. Fournier"
<scrappy@postgresql.org> wrote:

removed from the mailing lists

On Mon, 1 Mar 2004 larryr@saturn.sdsu.edu wrote:

I don't bite, weah!

pass: 74574

----
Marc G. Fournier Hub.Org Networking Services
(http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy
ICQ: 7615664

---------------------------(end of
broadcast)--------------------------- TIP 2: you can get off all lists
at once with the unregister command (send "unregister
YourEmailAddressHere" to majordomo@postgresql.org)

--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 972-414-9812 E-Mail: ler@lerctr.org
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749

----
Marc G. Fournier Hub.Org Networking Services
(http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy
ICQ: 7615664

--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 972-414-9812 E-Mail: ler@lerctr.org
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749

#5The Hermit Hacker
scrappy@hub.org
In reply to: Larry Rosenman (#4)

On Mon, 1 Mar 2004, Larry Rosenman wrote:

--On Monday, March 01, 2004 15:02:50 -0400 "Marc G. Fournier"
<scrappy@postgresql.org> wrote:

are you and larryr the same person? *scratch head*

No, but when I got the file, I fed it to www.webimmune.net and
after feeding the .zip the password from the message, it told me
that it was a virus.

okay, if I'm reading you right here, this is one that virus checkers
wouldn't pick up?? or is clamav's signatures just not updated yet? :(

LER

On Mon, 1 Mar 2004, Larry Rosenman wrote:

It was a virus, FWIW.

w32/bagle.h@MM

LER

--On Monday, March 01, 2004 14:48:14 -0400 "Marc G. Fournier"
<scrappy@postgresql.org> wrote:

removed from the mailing lists

On Mon, 1 Mar 2004 larryr@saturn.sdsu.edu wrote:

I don't bite, weah!

pass: 74574

----
Marc G. Fournier Hub.Org Networking Services
(http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy
ICQ: 7615664

---------------------------(end of
broadcast)--------------------------- TIP 2: you can get off all lists
at once with the unregister command (send "unregister
YourEmailAddressHere" to majordomo@postgresql.org)

--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 972-414-9812 E-Mail: ler@lerctr.org
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749

----
Marc G. Fournier Hub.Org Networking Services
(http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy
ICQ: 7615664

--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 972-414-9812 E-Mail: ler@lerctr.org
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749

----
Marc G. Fournier Hub.Org Networking Services (http://www.hub.org)
Email: scrappy@hub.org Yahoo!: yscrappy ICQ: 7615664

#6Larry Rosenman
ler@lerctr.org
In reply to: The Hermit Hacker (#5)

--On Monday, March 01, 2004 15:19:17 -0400 "Marc G. Fournier"
<scrappy@postgresql.org> wrote:

On Mon, 1 Mar 2004, Larry Rosenman wrote:

--On Monday, March 01, 2004 15:02:50 -0400 "Marc G. Fournier"
<scrappy@postgresql.org> wrote:

are you and larryr the same person? *scratch head*

No, but when I got the file, I fed it to www.webimmune.net and
after feeding the .zip the password from the message, it told me
that it was a virus.

okay, if I'm reading you right here, this is one that virus checkers
wouldn't pick up?? or is clamav's signatures just not updated yet? :(

I had to pick up an extra.dat for McAfee, and this is BRAND NEW (3/1/4).

I don't think ClamAV's been updated yet for it.

LER

LER

On Mon, 1 Mar 2004, Larry Rosenman wrote:

It was a virus, FWIW.

w32/bagle.h@MM

LER

--On Monday, March 01, 2004 14:48:14 -0400 "Marc G. Fournier"
<scrappy@postgresql.org> wrote:

removed from the mailing lists

On Mon, 1 Mar 2004 larryr@saturn.sdsu.edu wrote:

I don't bite, weah!

pass: 74574

----
Marc G. Fournier Hub.Org Networking Services
(http://www.hub.org) Email: scrappy@hub.org Yahoo!:
yscrappy ICQ: 7615664

---------------------------(end of
broadcast)--------------------------- TIP 2: you can get off all
lists at once with the unregister command (send "unregister
YourEmailAddressHere" to majordomo@postgresql.org)

--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 972-414-9812 E-Mail: ler@lerctr.org
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749

----
Marc G. Fournier Hub.Org Networking Services
(http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy
ICQ: 7615664

--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 972-414-9812 E-Mail: ler@lerctr.org
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749

----
Marc G. Fournier Hub.Org Networking Services
(http://www.hub.org) Email: scrappy@hub.org Yahoo!: yscrappy
ICQ: 7615664

--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 972-414-9812 E-Mail: ler@lerctr.org
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749

#7Tom Lane
tgl@sss.pgh.pa.us
In reply to: Larry Rosenman (#6)

Larry Rosenman <ler@lerctr.org> writes:

okay, if I'm reading you right here, this is one that virus checkers
wouldn't pick up?? or is clamav's signatures just not updated yet? :(

I had to pick up an extra.dat for McAfee, and this is BRAND NEW (3/1/4).

I don't think ClamAV's been updated yet for it.

Something with the forged return address of "scrappy@postgresql.org" got
through earlier today, too:
http://archives.postgresql.org/pgsql-general/2004-03/msg00013.php
Looks like another instance of the same virus.

regards, tom lane