[Freeciv-Dev] (PR#2671) Guys, keep

["Raimar Falke via RT" <rt@xxxxxxxxxxxxxx>]

[jdorje - Mon Dec 30 07:55:49 2002]:

> This seems to contain freeciv content.  But what is it?

That is the newest step: include some of the files of the victim. We 
had another such case in the past. String'ing the setup.exe however
shows:
QUIT
DATA 
HELO %s
MAIL FROM: <
RCPT TO:<
.,()%$@!`~ 
\*.*
which marks this pretty clearly as a worm doing SMTP.