Path: utzoo!utgpu!watserv1!watmath!att!att!pacbell.com!ucsd!sdd.hp.com!uakari.primate.wisc.edu!zaphod.mps.ohio-state.edu!ub!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: nol2321%dsacg4.dsac.dla.mil@dsac.dla.mil (Jim Dunn) Newsgroups: comp.virus Subject: Re: Help - virus. (PC) Message-ID: <0002.9011011437.AA08158@ubu.cert.sei.cmu.edu> Date: 30 Oct 90 19:18:09 GMT Sender: Virus Discussion List Lines: 11 Approved: krvw@sei.cmu.edu NO, the hidden subdirectories called DELETED are NOT virus or trojan! They are simply an action of a program by Microsoft, called RM.EXE. You see, the Microsoft Editor brags being able to bring back old edits, and the only way to do that is to SAVE them. It creates the DELETED subdirectory and stores the files in there. As for the 'e5' filenames, never heard of it. ALSO, the SCANv68 is A TROJAN!!! Jim, jdunn@dsac.dla.mil