X-Authentication-Warning: delorie.com: mailnull set sender to djgpp-workers-bounces using -f From: sandmann AT clio DOT rice DOT edu (Charles Sandmann) Message-Id: <10201161632.AA16922@clio.rice.edu> Subject: Re: [FlorinGhido AT yahoo DOT com: 12 files from >bnu2112b.zip< ARE INFECTED with a trojan virus!] To: djgpp-workers AT delorie DOT com Date: Wed, 16 Jan 2002 10:32:15 -0600 (CST) Cc: dj AT delorie DOT com (DJ at Home) In-Reply-To: <200201161523.g0GFNTX11672@envy.delorie.com> from "DJ Delorie" at Jan 16, 2002 10:23:29 AM X-Mailer: ELM [version 2.5 PL2] Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Reply-To: djgpp-workers AT delorie DOT com Errors-To: nobody AT delorie DOT com X-Mailing-List: djgpp-workers AT delorie DOT com X-Unsubscribes-To: listserv AT delorie DOT com Precedence: bulk This was brought up before; I believe the answer was the binutils library has this code in it to be able to directly stub the images. The updated binutils also has this, so maybe the binutils infects its self ... :-) By the way, if you extract the stuff from the second stub to end of file and try to run it, you get the not coff message.