On Monday 03 May 2004 10:11 pm, Michael St. Laurent wrote:
> Antony Stone <mailto:[EMAIL PROTECTED]> wrote:
> > On Monday 03 May 2004 7:10 pm, Michael St. Laurent wrote:
> >> Wow. I posted a message to the list at 9:23 AM (PDT) and as of
> >> 11:06 AM (PDT) it *still* hasn't posted. I wonder if this one will
> >> do any better?
> >
> > You mean the one saying: "According to http://sarc.com/ there are
> > several variants of the Sasser worm running around on the net. A
> > "sigtool -l | grep -i sasser" command reports "Worm.Sasser.A" but no
> > others. Does this one signature catch all the variants?"
> >
> > If so, it arrived here ages ago; I didn;t reply to it then because
> > the only answer I could think of was "We don't know until someone
> > sends us a variant which the signature doesn't match."
>
> I asked because it didn't arrive in my own mailbox until 12:19 PM, almost
> three hours after I had sent it. How curious that it arrived elsewhere
> more quickly.
Check the headers of what you got back from the list if you want to see where
it got stuck.
(I notice Diego has just posted a signature for Worm.Sasser.D)
Regards,
Antony.
--
Ramdisk is not an installation procedure.
Please reply to the list;
please don't CC me.
-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
