Hello,

Maurice Lombardi wrote on Feb 19, 2003 at 11:31AM +0100:

I have received through gpc-announce a message containing a virus: WORM_KLEZ.H in file .pif It has been removed automatically by our mail system, but others should be careful !!! The subject was A IE 6.0 patch

You are right, the virus went via gpc-announce. :-(

sender was bug-m4

The _fake_ sender was bug-m4@gnu.org. The actual sender was somebody at verizon.net.

For every post to gpc-announce, a confirmation token is sent to the (apparent) sender given in the From: line. In the case of this token, *it has been confirmed* by bug-m4@gnu.org. It has obviously been confirmed in error.

There is an additional check: Messages larger than 10kB are sent to me for review. Unfortunately, the virus was just a bit smaller.

Best wishes,

Anja