Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!tut.cis.ohio-state.edu!rutgers!rochester!udel!davis
From: davis@udel.EDU (Michael Davis)
Newsgroups: comp.sys.ibm.pc
Subject: Re: New? Virus
Message-ID: <11758@louie.udel.EDU>
Date: 28 Mar 89 14:06:28 GMT
Reply-To: davis@udel.EDU (Michael Davis)
Organization: University of Delaware
Lines: 10

Has anyone ran across a "virus" that consists of a hidden dir called INDEX
that has subdirectories named DELETED containing still, files call
DELETED.xxx where xxx are hex numbers?  When the files are deleted,
a new DELETED subdir is created with more files!!! It's happening on
my prof's machine at home in his directory filled with NCSA TELNET 
distributions and such.  They were obtained using FTP Software mgets,
but I don't know from where.

Thanks for any info or help
mike