{"ygPerms":{"resourceCapabilityList":[{"resourceType":"GROUP","capabilities":[{"name":"UPDATE"},{"name":"READ"},{"name":"WELCOME_MSG"},{"name":"PENDING_COUNT"},{"name":"ACTIVITY_LOGS"}]},{"resourceType":"PHOTO","capabilities":[{"name":"READ"},{"name":"READ"},{"name":"UPLOAD"},{"name":"UPDATE"},{"name":"DELETE"},{"name":"COPY"},{"name":"MOVE"},{"name":"APPROVE"},{"name":"UPLOADTEMP"},{"name":"GROUPCOVER"}]},{"resourceType":"FILE","capabilities":[{"name":"READ"},{"name":"CREATE"},{"name":"UPDATE"},{"name":"DELETE"},{"name":"AUTO_SEND"}]},{"resourceType":"MEMBER","capabilities":[{"name":"READ"},{"name":"READ"},{"name":"EDIT_MODERATOR"},{"name":"DELETE"},{"name":"CREATE"},{"name":"UPDATE"},{"name":"BAN"}]},{"resourceType":"LINK","capabilities":[{"name":"READ"},{"name":"CREATE"},{"name":"UPDATE"},{"name":"DELETE"},{"name":"MOVE_LINK"}]},{"resourceType":"CALENDAR","capabilities":[{"name":"READ"}]},{"resourceType":"DATABASE","capabilities":[{"name":"READ"},{"name":"READ_DATA"},{"name":"CREATE"}]},{"resourceType":"POLL","capabilities":[{"name":"READ"},{"name":"VOTE"},{"name":"UPDATE"},{"name":"CREATE"},{"name":"DELETE"},{"name":"CLOSE"}]},{"resourceType":"MESSAGE","capabilities":[{"name":"CREATE"},{"name":"READ"},{"name":"DELETE"}]},{"resourceType":"PENDING_MESSAGE","capabilities":[{"name":"READ"},{"name":"UPDATE"},{"name":"DELETE"}]},{"resourceType":"ATTACHMENTS","capabilities":[{"name":"READ"},{"name":"DELETE"}]},{"resourceType":"PHOTOMATIC_ALBUMS","capabilities":[{"name":"READ"},{"name":"UPLOAD"}]},{"resourceType":"MEMBERSHIP_TYPE","capabilities":[{"name":"READ"},{"name":"CREATE"},{"name":"DELETE"},{"name":"UPDATE"}]},{"resourceType":"POST","capabilities":[{"name":"READ"},{"name":"DELETE"},{"name":"CREATE"},{"name":"UPDATE"}]},{"resourceType":"PIN","capabilities":[{"name":"READ"},{"name":"DELETE"},{"name":"CREATE"},{"name":"UPDATE"}]}],"modStatus":"MODERATOR","subStatus":"NORMAL","groupUrl":"groups.yahoo.com","intlCode":"us"},"comscore":"pageview_candidate","ygData":{"userId":156346385,"authorName":"Maxym Mykhalchuk","from":"Maxym Mykhalchuk &lt;mihmax@yahoo.com&gt;","profile":"mihmax","replyTo":"LIST","senderId":"fOuVJeahIEpNKPMw47S2eKg0iAJMzcqy8AS98nIYcy_eGDigj20NN8nhIeFmpBIjmMe9Jyd-M4N_t4B6VOIfhobjoy9bMP4VrLc","spamInfo":{"isSpam":false,"reason":"12"},"subject":"Re: [OmT] Virus again?","postDate":"1118498387","msgId":2245,"canDelete":true,"contentTrasformed":false,"systemMessage":false,"headers":{"messageIdInHeader":"PDIwMDUwNjExMTM1OTQ3LjEwODMxLnFtYWlsQHdlYjQwOTEzLm1haWwueWFob28uY29tPg==","inReplyToHeader":"PGQ4ZXBsbiszM3RyQGVHcm91cHMuY29tPg=="},"prevInTopic":2244,"nextInTopic":2251,"prevInTime":2244,"nextInTime":2246,"topicId":2234,"numMessagesInTopic":20,"msgSnippet":"Hi Steve, Can you possibly download the file (temporary disabling the antivirus) and send it to me privately? And also why does your McAfee REMOVE, and not","rawEmail":"Return-Path: &lt;mihmax@yahoo.com&gt;\r\nX-Sender: mihmax@yahoo.com\r\nX-Apparently-To: OmegaT@yahoogroups.com\r\nReceived: (qmail 55674 invoked from network); 11 Jun 2005 13:59:59 -0000\r\nReceived: from unknown (66.218.66.217)\n  by m25.grp.scd.yahoo.com with QMQP; 11 Jun 2005 13:59:59 -0000\r\nReceived: from unknown (HELO web40913.mail.yahoo.com) (66.218.78.210)\n  by mta2.grp.scd.yahoo.com with SMTP; 11 Jun 2005 13:59:59 -0000\r\nReceived: (qmail 10833 invoked by uid 60001); 11 Jun 2005 13:59:47 -0000\r\nMessage-ID: &lt;20050611135947.10831.qmail@web40913.mail.yahoo.com&gt;\r\nReceived: from [193.205.213.166] by web40913.mail.yahoo.com via HTTP; Sat, 11 Jun 2005 06:59:47 PDT\r\nDate: Sat, 11 Jun 2005 06:59:47 -0700 (PDT)\r\nTo: OmegaT@yahoogroups.com\r\nIn-Reply-To: &lt;d8epln+33tr@eGroups.com&gt;\r\nMIME-Version: 1.0\r\nContent-Type: text/plain; charset=iso-8859-1\r\nContent-Transfer-Encoding: 8bit\r\nX-Originating-IP: 66.218.78.210\r\nX-eGroups-Msg-Info: 1:12:0\r\nFrom: Maxym Mykhalchuk &lt;mihmax@yahoo.com&gt;\r\nSubject: Re: [OmT] Virus again?\r\nX-Yahoo-Group-Post: member; u=156346385; y=bG1ir3wTcMgTg82fRC1JZul5riKPUJUMCLQOW_ENwsI5\r\nX-Yahoo-Profile: mihmax\r\n\r\nHi Steve,\n\nCan you possibly download the file (temporary disabling the\nantivirus) and send it to me privately?\nAnd also why does your McAfee REMOVE, and not CURE the virus?\n\nP.S. Anyone else having such a problem?\nP.P.S. Even with paranoid heuristics?\n\nMaxym\n\n--- omegatexe &lt;steveleg@hotmail.com&gt; wrote:\n\n&gt; Hi, Maxim\n&gt; \n&gt; I made sure my computer was clean by scanning it thoroughly and\n&gt; disabling and re-enabling System Restore. It appears that when I\n&gt; try\n&gt; to download an exe-file OmegaT_1.4.5_setup.exe, the McAfee online\n&gt; scanner detects the just arrived Trojan horse in the browser cache\n&gt; and\n&gt; deletes it. OmegaT.exe itself is not infected, I checked it. This\n&gt; time\n&gt; I downloaded from Lausanne, Switzerland. I realize that this is not\n&gt; a\n&gt; virus forum and that OmegaT itself is virus free, but could there\n&gt; be\n&gt; something with the setup_exe-file when you try to download it. Or\n&gt; would anyone be able to give a clue how the Generic backdoor.dr\n&gt; Trojan\n&gt; works. Another possibility may be that whenever a user tries to\n&gt; download an exe from some address a Trojan will introduce itself to\n&gt; Mr. McAfee? This seems to happen only when I try to download the\n&gt; Omega\n&gt; exe from the sourceforge download mirror sites, other sites are OK.\n&gt; \n&gt; Cheerio, Steve\n&gt; \n&gt; --- In OmegaT@yahoogroups.com, Maxym Mykhalchuk &lt;mihmax@y...&gt;\n&gt; wrote:\n&gt; &gt; Strange, Steve,\n&gt; &gt; \n&gt; &gt; I&#39;ve just checked, my Symantec Antivirus Corporate with latest\n&gt; DBs\n&gt; &gt; (8.06.2005) doesn&#39;t find anything there.\n&gt; &gt; Did you check your system?\n&gt; &gt; \n&gt; &gt; Maxym\n&gt; &gt; \n&gt; &gt; --- omegatexe &lt;steveleg@h...&gt; wrote:\n&gt; &gt; \n&gt; &gt; &gt; Just when I thought I am shipshape with the Trojan I reported I\n&gt; got\n&gt; &gt; &gt; another scare. As Sabine informed me about the OmegaT 1.5, I\n&gt; went\n&gt; &gt; &gt; to\n&gt; &gt; &gt; sourceforge site and tried to download it from\n&gt; &gt; &gt; nchcdl.sourceforge.net\n&gt; &gt; &gt; in Taiwan. My virus detection system immediately popped up\n&gt; &gt; &gt; informing\n&gt; &gt; &gt; me that  the very same Generic backdoor.dr Trojan had emerged\n&gt; in\n&gt; &gt; &gt; qptmngl.exe (Local Settings/Temp folder)file and was removed.\n&gt; Then\n&gt; &gt; &gt; I\n&gt; &gt; &gt; tried downloading it from the German site and the same thing\n&gt; &gt; &gt; happened.\n&gt; &gt; &gt; Now, I don&#39;t know how the Trojan works: does it try to attach\n&gt; &gt; &gt; itself\n&gt; &gt; &gt; to downloads from certain sites or whether there might be\n&gt; something\n&gt; &gt; &gt; wrong with the setup.exe-file. Any ideas? I use McAfee\n&gt; virusscan.\n&gt; &gt; &gt; \n&gt; &gt; &gt; Steve\n&gt; &gt; &gt; \n&gt; &gt; &gt; \n&gt; &gt; &gt; \n&gt; &gt; &gt; \n&gt; &gt; &gt; ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\n&gt; &gt; &gt; Go to: http://sourceforge.net/projects/omegat/ for bug reports,\n&gt; &gt; &gt; feature\n&gt; &gt; &gt; requests, OmegaT test versions etc...\n&gt; &gt; &gt; To localize OmegaT to your language, or proofread existing\n&gt; &gt; &gt; translations,\n&gt; &gt; &gt; read: http://www.omegat.org/omegat/translation-info.html\n&gt; &gt; &gt; ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\n&gt; &gt; &gt;  \n&gt; &gt; &gt; Yahoo! Groups Links\n&gt; &gt; &gt; \n&gt; &gt; &gt; \n&gt; &gt; &gt; \n&gt; &gt; &gt;  \n&gt; &gt; &gt; \n&gt; &gt; &gt; \n&gt; &gt; &gt; \n&gt; &gt; \n&gt; &gt; \n&gt; &gt; ================================\n&gt; &gt; Maxym Mykhalchuk\n&gt; &gt; phone: (+39) 320 8593170\n&gt; &gt; icq: 172-308-458\n&gt; &gt; ================================\n&gt; &gt; \n&gt; &gt; \n&gt; &gt; \t\t\n&gt; &gt; __________________________________ \n&gt; &gt; Discover Yahoo! \n&gt; &gt; Stay in touch with email, IM, photo sharing and more. Check it\n&gt; out! \n&gt; &gt; http://discover.yahoo.com/stayintouch.html\n&gt; \n&gt; \n&gt; \n&gt; \n&gt; ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\n&gt; Go to: http://sourceforge.net/projects/omegat/ for bug reports,\n&gt; feature\n&gt; requests, OmegaT test versions etc...\n&gt; To localize OmegaT to your language, or proofread existing\n&gt; translations,\n&gt; read: http://www.omegat.org/omegat/translation-info.html\n&gt; ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\n&gt;  \n&gt; Yahoo! Groups Links\n&gt; \n&gt; \n&gt; \n&gt;  \n&gt; \n&gt; \n&gt; \n\n\n================================\nMaxym Mykhalchuk\nphone: (+39) 320 8593170\nicq: 172-308-458\n================================\n\n\n\t\t\n__________________________________ \nDiscover Yahoo! \nStay in touch with email, IM, photo sharing and more. Check it out! \nhttp://discover.yahoo.com/stayintouch.html\n\n"}}