Hoax Warnings


	Alphabetical Index

NAME:	Ghost
ALIAS:	Ghosts

This is a widespread false alarm on a demonstration program. There is no virus or trojan by this name.

GHOST.EXE is a Windows program which displays a graveyard and a set of ghosts in a window. On Friday the 13th, the title of the screen was changed to 'Happy Friday the 13th!' and the ghosts started flying around the Windows desktop. This program was analyzed and found harmless.

The confirmed-clean versions of this program have the following CRCs as displayed by PKUNZIP:

 Length  Method   Size  Ratio   Date    Time    CRC-32  Attr  Name
 ------  ------   ----- -----   ----    ----   -------- ----  ----
  28096  DeflatN  14145  50%  30-10-96  13:20  5dce8738 --w-  GHOST.EXE
  28064  DeflatN  14142  50%  13-11-96  13:45  a6839c30 --w-  GHOST2.EXE
  28065  DeflatX  14121  50%  11-22-96  12:11  f47d5cbd --w-  GHOST3.EXE
 ------          ------  ---                                  -------

CIAC has released an advisory on this hoax. Please see http://ciac.llnl.gov/ciac/CIACHoaxes.html

[Analysis: Mikko Hypponen, F-Secure]