%%File: VIRS0633.TXT
%%Name/Aliases: PKZIP Trojan 2, PKZIPV2.ZIP, PKZIPV2.EXE, ZIP Trojan
%%Platform: PC/MS-DOS
%%Type: Trojan., 
%%Disk Location: PKZIPV2.ZIP, PKZIPV2.EXE
%%Features: 
%%Damage: Erases the Hard Disk.
%%Size: The files are short, only a few lines of text.
%%See Also: PKZIP Trojan 1
%%Notes: The PKZIP trojan is a program masquareding as PKZIP version 
2.2. It is actually just a short command file containing DEL C:\DOS\*.*, 
and DEL C:\*.* .  When run, it attempts to erase the contents of the 
C:\DOS directory and the c:\ directory. There will never be a version of 
PKZIP numbered 2.2 though there may be a version 2.0 in the near future 
(6/92). The Trojan has been found in the files PKZIPV2.ZIP, PKZIPV2.EXE 
and has been uploaded to several BBSs.  If you have had files deleted by 
this Trojan, you may be able to recover them with an unerase utility 
such as those supplied with Norton Utilities or PCTools. Contact PKWARE 
if you see it. Voice at 414-354-8699, BBS   at 414-354-8670, FAX   at 
414-354-8559
PKWARE Inc., 9025 N. Deerwood Drive, Brown Deer, WI 53223 USA
See also PKZIP Trojan 1  Your hard disk is erased.   Type the file to 
see if it is a command file instead of an executable. The command file 
will contain instructions to delete files on the hard disk.  Delete the 
file.