AOL4Free trojan horse-Put "DELTREE.EXE " on a floppy disk!

[Warren Fisher]

More on the AOL4Freee Trojan Horse  from Symantec Corp.

This trojan horse program is not the same as, and should not be confused
with, the AOL4Free Virus Hoax. A virus hoax message was distributed in
the same timeframe (March 1997) under the same name.

The AOL4Free Trojan Horse program first reported as being distributed
through America Online e-mail in early March 1997. This executable file
is actually converted from a batch file using DOS utility BAT2EXEC
version 1.5. This Utility is commonly used to convert large batch files
to COM files to enhance speed.

     This trojan first searches for the DOS program "DELTREE.EXE" is in
various directories and then it uses it to delete all files from the
user’s C drive. After completion, it displays the DOS error message "Bad
Command or file name" and continuously displays an obscene message. This
trojan cannot delete the files from the C drive if it is unable to find
DELTREE.EXE, but the obscene message will always display.

     This trojan will work on both DOS and Windows 95 environments [[as
long as DELTREE.EXE is present and accessible.]]  Take it off your hard
drive and put on a floppy disk!  WDF

     For more information see:
http://ciac.llnl.gov/ciac/bulletins/h-47a.shtml
--
Home of The Humor List
Warren D. Fisher
fish@communique.net
Registered Piano Technician
Piano Technicians Guild
New Orleans Chapter 701