Name         : FileGhost

     Aliases      : Friend (?)

     Clones       : No clones

     Type/Size    : Link/872

     Symptoms     : No symptoms

     Discovered   : 16-11-93

     Way to Infect: Link infection

     Rating       : Less Dangerous (Many Infections !!)

     Kickstarts   : 2.0/3.0 with & without cachet !

     Removal      : Use good viruskiller or delete infected programms.

     Comments     : It uses the LoadSeg and the NewLoadSeg
                    to get the names of all executed programms.
                    Then it links itself behind the 1. Hunk by
                    searching a RTS. (Just as Crime)

                    The virus just infects files which are:
                    
                    - executeable
                    - smaller than 100000 bytes
                    - don`t have a "-" or a "." in their names.
                    
                    The virus doesn`t infect libraries and handlers
                    In the virus there is a coded message:
                    
                    "Hi Friend! Don`t worry... it`s only the FileGhost"
                    
                    The virus isn`t resident.
                    A trojan is spread around which installs this virus.
                    (HardSpeeder - please look there !!)
                    ATTENTION: HD-Users! Be careful with this virus.
                    ^^^^^^^^^  It infects files VERY FAST !!!
                               And because of the short length, the virus
                               doesn`t conspicuous.  


A.D 12-93