Received: from localhost.localdomain (postgresql.org [64.49.215.8]) by localhost (Postfix) with ESMTP id 1F17D476DBC for ; Fri, 21 Jun 2002 12:12:20 -0400 (EDT) Received: from lerlaptop.iadfw.net (lerlaptop.iadfw.net [206.66.13.21]) by postgresql.org (Postfix) with ESMTP id 20998476D7D for ; Fri, 21 Jun 2002 12:11:52 -0400 (EDT) Received: from localhost (localhost [127.0.0.1]) by lerlaptop.iadfw.net (8.12.3/8.12.3) with ESMTP id g5LGBYIJ001475; Fri, 21 Jun 2002 11:11:34 -0500 (CDT) (envelope-from ler@lerctr.org) Subject: Re: [ADMIN] Incredible.. From: Larry Rosenman To: Cliff Wells Cc: "Luis Andaluz P," , pgsql-sql@postgresql.org In-Reply-To: <20020621090253.5b0eacdf.logiplexsoftware@earthlink.net> References: <200206211457.g5LEvH218071@proxserv.orbis-corp.com> <20020621090253.5b0eacdf.logiplexsoftware@earthlink.net> Content-Type: text/plain Content-Transfer-Encoding: 7bit X-Mailer: Ximian Evolution 1.0.7 Date: 21 Jun 2002 11:11:34 -0500 Message-Id: <1024675894.751.6.camel@lerlaptop> Mime-Version: 1.0 X-Virus-Scanned: by amavisd-milter (http://amavis.org/) X-Archive-Number: 200206/296 X-Sequence-Number: 8261 On Fri, 2002-06-21 at 11:02, Cliff Wells wrote: > On Fri, 21 Jun 2002 09:57:20 -0500 > Luis Andaluz P, wrote: > > > Hello, > > see this interesting file. > > Bye. > > > > And see this interesting URL: > > http://www.brocku.ca/its/helpdesk/virusalerts/viruses.phtml?vid=75 And this mail from my virus scanner: > A virus was found in an email from: The message was addressed to: -> The message has been quarantined as: /var/virusmails/virus-20020621-104030-30552 Here is the output of the scanner: Scanning /var/amavis/amavis-milter-xZtvqxe2/parts/* Scanning file /var/amavis/amavis-milter-xZtvqxe2/parts/msg-30552-1.txt Scanning file /var/amavis/amavis-milter-xZtvqxe2/parts/msg-30552-2.html Scanning file /var/amavis/amavis-milter-xZtvqxe2/parts/msg-30552-3.exe /var/amavis/amavis-milter-xZtvqxe2/parts/msg-30552-3.exe Found the W32/Higuy@MM virus !!! Summary report on /var/amavis/amavis-milter-xZtvqxe2/parts/* File(s) Total files: ........... 3 Clean: ................. 2 Possibly Infected: ..... 1 Here are the headers: ------------------------- BEGIN HEADERS ----------------------------- Received: from localhost.localdomain (postgresql.org [64.49.215.8]) by localhost (Postfix) with ESMTP id 20A31476F2A; Fri, 21 Jun 2002 11:40:13 -0400 (EDT) Received: from postgresql.org (postgresql.org [64.49.215.8]) by postgresql.org (Postfix) with SMTP id D5B67477260; Fri, 21 Jun 2002 11:31:30 -0400 (EDT) Received: from localhost.localdomain (postgresql.org [64.49.215.8]) by localhost (Postfix) with ESMTP id 44B42477003 for ; Fri, 21 Jun 2002 11:30:43 -0400 (EDT) Received: from proxserv.orbis-corp.com (unknown [64.35.169.125]) by postgresql.org (Postfix) with ESMTP id 1CB81476339 for ; Fri, 21 Jun 2002 11:14:24 -0400 (EDT) Received: from jparrao ([192.168.1.40]) by proxserv.orbis-corp.com (8.11.0/8.8.7) with SMTP id g5LEvH218071; Fri, 21 Jun 2002 09:57:20 -0500 Date: Fri, 21 Jun 2002 09:57:20 -0500 Message-Id: <200206211457.g5LEvH218071@proxserv.orbis-corp.com> From: "Luis Andaluz P," To: Subject: [ADMIN] Incredible.. MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_000C_01A516B1.1F066B30" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Frali' ViRii v.3 by 4nt4R35 (June2002) X-MimeOLE: Don'tWorry:It'sNotDangerous.ILoveTheWorldAndThePeople.Bye. Precedence: bulk Sender: pgsql-admin-owner@postgresql.org -------------------------- END HEADERS ------------------------------ > -- > Cliff Wells, Software Engineer > Logiplex Corporation (www.logiplex.net) > (503) 978-6726 x308 (800) 735-0555 x308 > > ---------------------------(end of broadcast)--------------------------- > TIP 6: Have you searched our list archives? > > http://archives.postgresql.org > -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 972-414-9812 E-Mail: ler@lerctr.org US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749