Path: mantis!not-for-mail
From: Tom=Juno%ComputerSvcs%GWC@banyan.cccd.edu (Tom Juno)
Newsgroups: rec.games.computer.doom.announce
Subject: Doom II virus [found on CD - mod.]
Date: 18 Feb 1995 21:42:36 -0000
Organization: Coast Community College District, Costa Mesa, CA, USA
Lines: 30
Sender: tony@mantis.co.uk
Approved: doom@mantis.co.uk
Message-ID: <3i3r4g$n0p@spock.dis.cccd.edu>


I recently purchased a CD at one of the computer "swap meets" and lo and
behold after using it, my Xtree Gold wouldn't quite function right.
Eight of the XTP files had been invaded by the Doom II virus.  A quick
check with McAfee Scan 117 yielded nothing, but an ASCII search of my
entire hard drive found the Xtree files.  A similar search of the CD
found the culprit in several EXE files.

The name of the CD is "Doom II Mania!!! Vol 1" and is labeled as being
from Tech Express Software in San Jose.

Luckily the virus is just a file builder with a scary message, but will
eventually affect the operation of the program containing the infected
files.  I searched for the text "bye-bye" and was quite successful at
replacing the offenders.  The infecting files from the CD were several
copies of SEE.EXE, XDOS.EXE, MAKEMAP,EXE, and DEICE.EXE.

I would appreciate hearing from any of you that have had (or are having)
the same experience and please let us know if there are any other 
particular files to look out for.  

Thanks.
Tom Juno - Sysop, Golden West College BBS   714 895-8735
tjuno@cccd.edu

-- 
Tom Juno
Internet e-mail: Tom=Juno%ComputerSvcs%GWC@banyan.cccd.edu


