Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!swrinde!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: ccmlh@iceman.oz.au (Michael L Hope)
Newsgroups: comp.virus
Subject: New Trojan Horse ??? (Mac)
Message-ID: <0006.9003151947.AA01476@ubu.cert.sei.cmu.edu>
Date: 14 Mar 90 02:34:21 GMT
Sender: Virus Discussion List <VIRUS-L@IBM1.CC.Lehigh.EDU>
Lines: 18
Approved: krvw@sei.cmu.edu

Hi,

Recently I saw a rather disturbing article on what appeared to be a
distructive Macintosh trojan horse in Canada.  The article appeared in
the 19th February issue of the Australian magazine COMPUTING on page
eight.  The article refers to two programs 'Mosaic' and 'Fontfinder'
that were downloaded from a bulliten board in Canada and contained the
trojan horse. The trojan then destroyed the directories of all
unlocked hard and floppy disks that were available.  This included the
disk containing the trojan program.  The affected disks were then
named "Gotcha!".  In the article most of the data was apparently
recovered using a utility program, except for the filenames.  Does
anyone know more on this trojan?  Is it isolated to Canada?  Is this
the only destructive trojan/virus program attacking the mac?

Michael Hope
James Cook University
{ccmlh@iceman.jcu.oz}