Macro Virus Table - Defense Technical Information Center

PC
MS-DOS/PC-DOS Computer Viruses
PKWARE Inc., 9025 N. Deerwood Drive, Brown Deer, WI 53223 USA
See also PKZIP Trojan 2 Check the version number using PKUNZIP with the -l option to list
the contents of the archive. If it is version 2.01 then delete it. Delete the file.
Name: PKZIP Trojan 2
Aliases: PKZIP Trojan 2, PKZIPV2.ZIP, PKZIPV2.EXE,
ZIP Trojan
Type: Trojan.
Disk Location: PKZIPV2.ZIP
PKZIPV2.EXE
Features: Erases the Hard Disk.
Damage: Erases the Hard Size: The files are short, only See Also: PKZIP Trojan 1
Disk.
a few lines of text.
Notes: The PKZIP trojan is a program masquareding as PKZIP version 2.2. It is actually just a
short command file containing DEL C:\DOS\*.*, and DEL C:\*.* . When run, it attempts to
erase the contents of the C:\DOS directory and the c:\ directory. There will never be a version of
PKZIP numbered 2.2 though there may be a version 2.0 in the near future (6/92). The Trojan has
been found in the files PKZIPV2.ZIP, PKZIPV2.EXE and has been uploaded to several BBSs. If
you have had files deleted by this Trojan, you may be able to recover them with an unerase utility
such as those supplied with Norton Utilities or PCTools. Contact PKWARE if you see it. Voice
at 414-354-8699, BBS at 414-354-8670, FAX at 414-354-8559
PKWARE Inc., 9025 N. Deerwood Drive, Brown Deer, WI 53223 USA
See also PKZIP Trojan 1 Your hard disk is erased. Type the file to see if it is a command file
instead of an executable. The command file will contain instructions to delete files on the hard
disk. Delete the file.
Name: Plague
Aliases: Plague Type:
Disk Location: Features:
Damage: Size: See Also:
Notes: claim that it was created by either someone in Brisbane Austrailia, or USA. (virus-l, v5-
189).
Name: Plastique
Aliases: Plastique, 3012, HM2, Plastique 1, Plastique 4.51 Type: Boot sector.
Disk Location: COM application.
EXE application.
Hard disk boot sector.
Features:
Damage: Size: See Also: Jerusalem, Anticad
Notes: Most variants play a melody, if you press Ctrl-Alt-del while melody is being played, it
overwrites the beginning of the hard disk.
Name: Plovdiv
Aliases: Plovdiv, Plovdiv 1.1, Plovdiv 1.3, Damage 1.1,
Damage 1.3, Bulgarian Damage 1.3
Type: Program.
Disk Location: COM application.
Features: Corrupts a program or overlay files.
EXE application.
Attempts to format the disk.
Damage: Corrupts a program Size: Overlays application, no See Also:
278 CIAC Computer Virus Information Update May 21, 1998