Virus Alert?...

[Bernard Dautrevaux]

Hey all, 

        I just receive (yesterday evening in fact) a mail from the autoconf
mailing list containing just an "EBGILGEB.EXE" attachment... I suspect it to
be a Virus, although I didn't try it :-)

        I was quite concerned about the fact that the mailing list accepts
attachments, especially dangerous ones as ".EXE"... I think I'm not the only
one to read my mail on a Windoze box, and I think a good policy for a
mailing list is to suppress ALL attachments so that only text is going
through it. Also this avoids the need to store a 22Kbyte virus in tha data
bases :-)

        I'm pretty sure the virus come through the mailing list; I join the
headers and send this also to the mailing list owner.

        Regards,

        Bernard


PS: Here are the promised headers:

--------------8<----------------------

Received: from s3.smtp.oleane.net ([195.25.12.10]) by iis000.microdata.fr
with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21)
        id DN8N5F6C; Mon, 22 Jan 2001 09:41:07 +0100
Received: from fencepost.gnu.org (fencepost.gnu.org [199.232.76.164])
        by s3.smtp.oleane.net (Postfix) with ESMTP id 5722E22C60
        for <address@hidden>; Sun, 21 Jan 2001 19:50:50 +0100
(CET)
Received: from localhost ([127.0.0.1] helo=fencepost.gnu.org)
        by fencepost.gnu.org with esmtp (Exim 3.16 #1 (Debian))
        id 14KPUC-00040J-00; Sun, 21 Jan 2001 13:45:08 -0500
Received: from [195.218.182.219] (helo=195)
        by fencepost.gnu.org with smtp (Exim 3.16 #1 (Debian))
        id 14KPTN-0003yA-00
        for <address@hidden>; Sun, 21 Jan 2001 13:44:19 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="--VEYB8DYB4XM3CP6ROHIFST"
Message-Id: <address@hidden>
From: Remote Mail Delivery System <>
Subject: (no subject)
Sender: address@hidden
Errors-To: address@hidden
X-BeenThere: address@hidden
X-Mailman-Version: 2.0
Precedence: bulk
List-Help: <mailto:address@hidden>
List-Post: <mailto:address@hidden>
List-Subscribe: <http://mail.gnu.org/mailman/listinfo/autoconf>,
        <mailto:address@hidden>
List-Id: Discussion list for the autoconf build system <autoconf.gnu.org>
List-Unsubscribe: <http://mail.gnu.org/mailman/listinfo/autoconf>,
        <mailto:address@hidden>
List-Archive: <http://mail.gnu.org/pipermail/autoconf/>
Date: Sun, 21 Jan 2001 13:44:19 -0500

----VEYB8DYB4XM3CP6ROHIFST
Content-Type: text/plain; charset="us-ascii"

----VEYB8DYB4XM3CP6ROHIFST
Content-Type: application/octet-stream; name="EBGILGEB.EXE"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="EBGILGEB.EXE"

--------------8<----------------------


--------------------------------------------
Bernard Dautrevaux
Microprocess Ingenierie
97 bis, rue de Colombes
92400 COURBEVOIE
FRANCE
Tel:    +33 (0) 1 47 68 80 80
Fax:    +33 (0) 1 47 88 97 85
e-mail: address@hidden
                address@hidden
--------------------------------------------