Path: utzoo!utgpu!news-server.csri.toronto.edu!mailrus!cs.utexas.edu!usc!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: RY15@DKAUNI11.BITNET (Christoph Fischer)
Newsgroups: comp.virus
Subject: Analysis of the KEYBGR / FACE problem (PC)
Message-ID: <0001.9006061301.AA19134@ubu.cert.sei.cmu.edu>
Date: 5 Jun 90 21:14:39 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1.BITNET>
Lines: 17
Approved: krvw@sei.cmu.edu

Hi
  over the weekend I analysed the KEYBGR.COM it is a hacked version of the
original KEYBGR.COM MSDOS V2.1. I asked Mr Joest to keep an eye on the
replacements (original) maybe they change again, this could possibly be a hint
that they have a trojan horse producing a trojan horse. (This is theory sofar
and they ran tests that turned out negative, so lets hope it stays that way)
Again as a result: it is *not* a virus! It is a trojan horse with transient
                   damage.

      Christoph Fischer

*****************************************************************
* Christoph Fischer                                             *
* Micro-BIT Virus Team / University of Karlsruhe / West-Germany *
* D-7500 Karlsruhe 1, Zirkel 2, Tel.: (0)721-608-37 64 22       *
* E-Mail: RY15 at DKAUNI11.BITNET                               *
*****************************************************************