From jan@swi.swi.psy.uva.nl Mon Dec  3 13:57:07 2001
Received: from gollem.swi.psy.uva.nl (gollem.swi.psy.uva.nl [145.18.152.30])
	by swi.psy.uva.nl (8.10.2+Sun/8.11.2) with ESMTP id fB3Cv7I26544;
	Mon, 3 Dec 2001 13:57:07 +0100 (MET)
Received: (from jan@localhost)
	by gollem.swi.psy.uva.nl (8.11.3/8.11.3/SuSE Linux 8.11.1-0.5) id fB3Cv7S14735;
	Mon, 3 Dec 2001 13:57:07 +0100
Date: Mon, 3 Dec 2001 13:57:07 +0100
Message-Id: <200112031257.fB3Cv7S14735@gollem.swi.psy.uva.nl>
From: Jan Wielemaker <jan@swi.psy.uva.nl>
Subject: Re: [SWIPL] last virus
To: Gerhard Wolfstieg <gw@wolfstieg.com>, <prolog@swi.swi.psy.uva.nl>
In-Reply-To: Gerhard Wolfstieg's message of Sun, 2 Dec 2001 16:22:35 +0100
Phone: +31 - 20 - 525 6121

Gerhard,

> the name of the virus attachment "actmovie.exe" seems to implicate a seals 
> (is this the right word for the german "Köder") for a special destination. Is 
> there a chance for trying to trace back to the sender?

I don't have much more than you have.  I haven't studied the mail
carefully (I receive many virusses, but running a text-based mail
agent on Linux they don't affect me).  Regarding the fact that
scanners know about it, the virus is known and further distribution is
probably due to innocent victims.

If this starts happening too often I'll consider deleting all
attachments from postings to the list.  Sofar the protection that
only subscribed users can use the list appears to be appropriate.

	--- Jan

