Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!pacific.mps.ohio-state.edu!linac!att!pacbell.com!iggy.GW.Vitalink.COM!widener!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: viki@crash.cts.com (Victoria Harkey)
Newsgroups: comp.virus
Subject: Re: AF/91 and April Foolism in general
Message-ID: <0001.9104181344.AA09450@ubu.cert.sei.cmu.edu>
Date: 17 Apr 91 04:46:37 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 13
Approved: krvw@sei.cmu.edu

The problem with the joke is that I did run across a trojan horse that
did activate on 4/1. If the system clock was reset to a date prior to
4/1, no music played when the infected files were accessed... however,
any date =>4/1 caused numerous songs. It was not benign.. In trying to
trap and eradicate the virus, it hit the File Allocation Table and
wiped out all access to the drive. They were using DOS 4.01, and my
software tools couldn't salvage the disk.

I've devirused a number of systems and networks; this little sucker
was not a joking matter.

Victoria Harkey
Certified NetWare Engineer