Name         : Euromail

     Aliases      : EM-Wurm, AnitEuromail

     Type/Size    : Trojan/3888

     Clone        : No Clones

     Symptoms     : No Symptoms

     Discovered   : 16-07-91

     Way to infect: No infection

     Rating       : Dangerous

     Kickstarts   : 1.2/1.3/2.0

     Damage       : Damage Files.

     Removal      : Delete file.

     Comments     : The Euromail virus is a dangerous virus. It
                    only becomes active, if one of the following drawers
                    exists: EM, EUROMAIL, EUROSYS.
                    If you are starting the virus, it tries to damage
                    the file c:protect. After that the virus creates
                    a file c:$A0 and modifies the startup-sequence
                    with $A0, $0A. The virus starts the process
                    "clipboard.device". All files in the above mentioned
                    drawers will be damaged. Such damaged files CANNOT
                    be repaired.

A.D 02-94