X-Authentication-Warning: delorie.com: mailnull set sender to djgpp-workers-bounces using -f
Subject: Re: [FlorinGhido AT yahoo DOT com: 12 files from >bnu2112b.zip< ARE
	INFECTED with a trojan virus!]
From: Tim Van Holder <tim DOT van DOT holder AT pandora DOT be>
To: djgpp-workers AT delorie DOT com
In-Reply-To: <200201161523.g0GFNTX11672@envy.delorie.com>
References: <200201161523 DOT g0GFNTX11672 AT envy DOT delorie DOT com>
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Mailer: Evolution/1.0.1 
Date: 16 Jan 2002 17:18:53 +0100
Message-Id: <1011197934.8794.73.camel@bender.falconsoft.be>
Mime-Version: 1.0
Reply-To: djgpp-workers AT delorie DOT com
Errors-To: nobody AT delorie DOT com
X-Mailing-List: djgpp-workers AT delorie DOT com
X-Unsubscribes-To: listserv AT delorie DOT com
Precedence: bulk

On Wed, 2002-01-16 at 16:23, DJ Delorie wrote:
> 
> Sure enough, there are two djgpp images there.  Ideas?

UPX stub?  But that doesn't explain the second stub, I think.
Pure chance? (as in: generated with the 'leading garbage in ld output'
              bug, which just happened to contain a stubbed executable
              this time around)